Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/__60qo5KWLcxIQ96Zk1z1VBhk-0.roa
File: __60qo5KWLcxIQ96Zk1z1VBhk-0.roa (raw, json)
Hash identifier: rj2wv5x5DzCLEU7hmcTuxQI5Urvj/ZXlJ3yUP+Zmct0=
Subject key identifier: FF:FE:B4:AA:8E:4A:58:B7:31:21:0F:7A:66:4D:73:D5:50:61:93:ED
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018891832A6036F177856B02A93A5660265B
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/__60qo5KWLcxIQ96Zk1z1VBhk-0.roa
Signing time: Tue 06 Jun 2023 16:21:12 +0000
ROA not before: Tue 06 Jun 2023 16:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.246.37.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:83:2a:60:36:f1:77:85:6b:02:a9:3a:56:60:26:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 6 16:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fffeb4aa8e4a58b731210f7a664d73d5506193ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:68:eb:b4:e9:f9:b6:2d:b3:7d:34:09:96:
c7:42:94:41:6b:8a:12:6d:36:08:e8:4f:48:8e:6e:
be:77:7c:c4:a4:9e:90:e9:75:fc:4f:18:4a:35:09:
fe:fa:e1:25:b4:b7:1b:d5:35:c2:4d:cf:20:36:47:
7c:1b:d1:90:fb:ca:d4:b3:64:b3:4b:ff:39:fc:5f:
15:6a:ca:1c:ff:19:e7:f3:db:81:fe:1c:1c:2c:71:
f4:70:49:20:47:6e:74:5b:1e:81:cd:be:a4:4a:7d:
d1:3f:3b:e7:4b:86:31:6e:47:98:60:0b:bf:36:15:
c9:d0:2b:1f:30:4d:39:d7:60:aa:0b:9c:10:c5:6f:
57:53:e6:d0:19:a1:a7:ec:fb:ee:00:19:a7:cd:ee:
5e:c6:57:58:6d:11:1f:cc:9e:bb:85:41:2d:5a:4c:
3f:70:91:db:b2:f8:24:7e:c7:66:c5:7f:51:1b:c7:
05:19:3e:48:a8:9d:95:d4:6b:0c:d1:a1:90:4d:e0:
79:82:a6:5d:f0:27:47:0c:6a:44:2d:92:1b:ca:78:
f9:0f:bb:0b:11:e1:a0:03:8f:05:fe:15:fe:a5:ee:
20:a7:cf:ed:ac:86:5c:2d:65:c8:52:f6:f0:1c:aa:
48:0c:e9:b8:2b:2b:0d:eb:c8:ba:51:be:6b:00:4c:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:B4:AA:8E:4A:58:B7:31:21:0F:7A:66:4D:73:D5:50:61:93:ED
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/__60qo5KWLcxIQ96Zk1z1VBhk-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.166.0/24
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
13:be:a9:0b:6d:0b:94:53:56:58:92:3c:3b:95:cd:ce:4a:9b:
51:2c:f6:7a:2c:2b:95:90:1a:da:03:88:b7:5a:ed:50:d1:b0:
72:ab:02:3a:02:01:63:86:29:f7:72:69:88:23:57:80:63:af:
9f:7e:6e:01:6c:58:ac:d9:12:9f:51:45:a1:5a:78:aa:ad:d9:
9e:ae:e5:de:9b:34:71:d8:d9:4a:2f:ff:d0:53:31:fc:70:25:
0d:03:41:11:8c:0f:b0:21:56:9c:b2:e1:83:6b:5d:c1:b5:7e:
9a:78:6a:fd:82:cc:76:fb:6d:eb:7f:45:d5:82:24:00:8b:e6:
ad:50:fd:a2:5c:53:53:ac:26:cb:fc:b3:04:5c:73:f0:64:71:
26:89:e8:8c:95:39:30:15:73:94:6d:9b:7d:b7:78:d2:70:54:
13:04:51:e3:dc:c5:13:bc:b9:42:f5:2b:b0:80:42:5d:dd:a5:
84:41:8e:a2:a9:57:2e:f3:04:a0:ea:9b:4d:9a:a5:6c:ad:68:
74:c2:fc:bf:49:ac:f5:72:d8:42:da:ce:1e:6e:16:9c:0d:e9:
e2:66:76:49:2e:10:ee:69:60:80:21:e3:b5:e0:b5:b5:24:4a:
ed:45:89:04:90:31:47:24:62:cf:ef:77:f5:3f:a3:17:15:eb:
ee:ae:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org