Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/dCxO0fpFD84BSEJpIpyHokjliIE.roa
File: dCxO0fpFD84BSEJpIpyHokjliIE.roa (raw, json)
Hash identifier: djkLPhGzulfl9hVhFOM+nRh49NJDq525NwFvBRWCFi0=
Subject key identifier: 74:2C:4E:D1:FA:45:0F:CE:01:48:42:69:22:9C:87:A2:48:E5:88:81
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0190CF46736C05DB28C264D43C236516DD36
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/dCxO0fpFD84BSEJpIpyHokjliIE.roa
Signing time: Sat 20 Jul 2024 08:33:39 +0000
ROA not before: Sat 20 Jul 2024 08:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.246.36.0/24 maxlen: 24
194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cf:46:73:6c:05:db:28:c2:64:d4:3c:23:65:16:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jul 20 08:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=742c4ed1fa450fce01484269229c87a248e58881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:69:4c:8c:1f:17:7a:a7:61:71:a9:b7:9c:
d4:b7:e1:d5:ef:8b:50:32:99:c7:66:5d:d6:74:f9:
25:f5:21:ba:6c:37:b1:64:d8:4c:94:86:8e:e2:6e:
b3:e4:82:85:37:34:1f:3e:1f:4f:b7:8b:55:14:e4:
56:f9:1a:45:14:59:9e:8f:2d:9e:d3:c6:59:5d:59:
07:02:4b:ba:60:d2:5e:d9:f9:02:dc:79:59:2c:ab:
8c:93:74:2b:f9:be:06:4b:18:2c:c7:dd:d0:3d:d2:
98:1f:74:d0:e5:48:ef:75:61:d9:75:34:f9:2e:4e:
93:21:fb:13:e7:39:f5:3e:d4:f7:d5:3e:5b:6f:7e:
f2:34:75:d5:b6:23:bd:18:f2:1d:1e:2d:cd:d7:31:
20:06:ea:26:8d:e7:fa:d0:82:e5:54:3e:b7:df:6e:
9a:d1:63:c5:b9:1b:47:31:15:e7:d8:8c:0c:51:2e:
e0:aa:54:7c:22:d9:54:28:93:19:52:df:b0:b3:27:
b9:63:58:5f:09:3c:54:eb:82:db:8f:c8:3b:1a:c9:
40:2a:76:72:20:f9:b2:31:2a:9a:6f:be:ab:35:4a:
5d:10:18:fc:f0:2b:d1:9a:a5:1c:7c:e8:74:dd:e2:
05:06:1e:9b:c3:d0:2f:30:86:6b:a1:3c:98:8e:30:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:4E:D1:FA:45:0F:CE:01:48:42:69:22:9C:87:A2:48:E5:88:81
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/dCxO0fpFD84BSEJpIpyHokjliIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/23
Signature Algorithm: sha256WithRSAEncryption
09:44:db:68:d0:3a:04:b0:a0:31:f0:89:4e:20:27:5f:c4:c4:
44:f3:61:6e:58:b9:f9:61:65:7b:c3:af:e2:9a:b4:48:c3:9d:
65:77:0f:77:bf:fb:eb:94:0f:13:61:5f:e1:40:72:13:9a:99:
93:40:56:0b:2a:8d:45:b0:ff:36:8f:4f:69:c7:26:44:f1:a9:
fb:29:86:84:d6:e0:46:f5:85:15:91:77:f2:c5:7c:86:0d:ad:
aa:28:6a:59:37:69:cb:65:7e:22:8e:bd:ad:0f:c6:e9:a0:04:
f8:81:66:37:0a:25:9f:d7:c9:eb:4b:38:21:f5:25:d7:2b:fd:
26:ce:8b:ab:3e:9a:d2:d1:18:19:6e:d7:55:d4:cb:f6:b3:d9:
ed:d6:7d:ec:ee:5d:62:0f:98:0f:22:01:32:ec:27:20:10:93:
10:da:c6:17:1c:5f:26:a0:28:ba:e8:19:a7:33:14:dc:7e:32:
a1:50:19:d6:c3:5c:06:c3:10:a7:c8:c3:f5:32:d1:8e:4f:6b:
9e:9a:59:67:56:43:83:0e:b4:1f:40:66:20:07:a6:3c:b1:25:
0b:62:a8:0a:95:f3:11:10:ed:25:b3:f5:e4:f4:3a:f9:4a:db:
98:cd:81:94:ea:b8:db:d4:e5:0a:7d:3d:3b:96:ae:18:ae:ac:
be:4e:01:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDPRnNsBdsowmTUPCNlFt02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwNzIwMDgzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDJjNGVkMWZhNDUwZmNlMDE0ODQyNjkyMjljODdhMjQ4ZTU4ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA221pTIwfF3qnYXGpt5zUt+HV74tQ
MpnHZl3WdPkl9SG6bDexZNhMlIaO4m6z5IKFNzQfPh9Pt4tVFORW+RpFFFmejy2e
08ZZXVkHAku6YNJe2fkC3HlZLKuMk3Qr+b4GSxgsx93QPdKYH3TQ5UjvdWHZdTT5
Lk6TIfsT5zn1PtT31T5bb37yNHXVtiO9GPIdHi3N1zEgBuomjef60ILlVD63326a
0WPFuRtHMRXn2IwMUS7gqlR8ItlUKJMZUt+wsye5Y1hfCTxU64Lbj8g7GslAKnZy
IPmyMSqab76rNUpdEBj88CvRmqUcfOh03eIFBh6bw9AvMIZroTyYjjAPzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQsTtH6RQ/OAUhCaSKch6JI5YiBMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvZEN4TzBmcEZEODRCU0VKcElweUhva2psaUlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvYkMA0G
CSqGSIb3DQEBCwUAA4IBAQAJRNto0DoEsKAx8IlOICdfxMRE82FuWLn5YWV7w6/i
mrRIw51ldw93v/vrlA8TYV/hQHITmpmTQFYLKo1FsP82j09pxyZE8an7KYaE1uBG
9YUVkXfyxXyGDa2qKGpZN2nLZX4ijr2tD8bpoAT4gWY3CiWf18nrSzgh9SXXK/0m
zourPprS0RgZbtdV1Mv2s9nt1n3s7l1iD5gPIgEy7CcgEJMQ2sYXHF8moCi66Bmn
MxTcfjKhUBnWw1wGwxCnyMP1MtGOT2uemllnVkODDrQfQGYgB6Y8sSULYqgKlfMR
EO0ls/Xk9Dr5StuYzYGU6rjb1OUKfT07lq4Yrqy+TgGK
-----END CERTIFICATE-----
Generated at Wed Jul 24 09:54:24 2024 by rpki-client on console-ams.rpki-client.org