Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/jLDyp6opHKuZuQM0PJjwNw9YvUY.roa
File: jLDyp6opHKuZuQM0PJjwNw9YvUY.roa (raw, json)
Hash identifier: b51CpYksnIAlcqEkDDa4EyCC+i5dW0Dl70jX6YyXx4s=
Subject key identifier: 8C:B0:F2:A7:AA:29:1C:AB:99:B9:03:34:3C:98:F0:37:0F:58:BD:46
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01856EA6CFA783AEA1DF77EA3F569DAB00A4
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/jLDyp6opHKuZuQM0PJjwNw9YvUY.roa
Signing time: Sun 01 Jan 2023 18:45:03 +0000
ROA not before: Sun 01 Jan 2023 18:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 194.247.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jan 2023 10:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:cf:a7:83:ae:a1:df:77:ea:3f:56:9d:ab:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 18:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb0f2a7aa291cab99b903343c98f0370f58bd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:0a:85:d3:4b:c4:a3:71:b0:69:e2:8b:37:
a0:03:bd:31:cd:37:ea:b0:68:b3:62:9b:d1:50:ca:
ce:d4:3b:6f:80:9b:fa:00:fc:1f:9b:85:36:32:65:
a7:2f:26:5b:d1:2d:1d:20:52:e6:d9:19:51:84:85:
2a:2d:4e:31:20:67:95:f7:02:4d:37:f4:2e:81:bc:
26:5a:e0:67:c4:10:b4:0d:33:d6:69:52:38:4e:d0:
30:fb:99:37:b2:76:3f:d2:46:63:ed:94:11:65:5d:
d3:c8:64:a9:3f:83:74:ac:14:89:e1:4a:e2:08:e4:
2c:13:7e:4d:5b:11:2c:51:93:83:d1:fc:32:8a:59:
4b:48:99:d7:fc:a6:9b:a9:35:eb:a9:eb:1a:98:32:
39:c1:0c:9b:30:78:cd:34:e3:53:39:61:f9:f8:8b:
63:b8:5b:53:2d:32:45:bb:7c:e9:d2:d8:83:eb:b1:
0b:c4:6c:06:f7:a0:c5:4e:9f:4f:ef:b2:ff:4c:5f:
19:a8:2d:ae:7b:22:a6:a1:6a:ce:4d:48:07:31:e6:
73:ab:b0:f8:5d:c5:3b:cb:b9:49:6e:16:72:74:5c:
f9:5b:25:cf:d1:51:bc:a5:66:38:18:49:e9:6b:fb:
46:3f:f7:46:27:93:b6:2e:91:18:c6:d6:ba:e6:2f:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:F2:A7:AA:29:1C:AB:99:B9:03:34:3C:98:F0:37:0F:58:BD:46
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/jLDyp6opHKuZuQM0PJjwNw9YvUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
64:91:d7:be:38:54:1b:55:f2:9e:b8:32:81:bd:6f:58:a5:c9:
4b:e9:d7:b4:57:0a:7f:c4:56:28:60:d7:3a:b3:59:42:95:2f:
76:8a:0c:f7:b2:c8:00:b4:b7:c5:46:49:78:7d:98:91:1c:79:
0c:b0:20:55:fd:4b:08:d9:9d:9e:6f:86:17:bc:6f:cf:c8:b6:
40:35:4a:02:d1:4b:c2:b9:07:da:25:dc:4d:68:f1:1e:37:bb:
76:b1:2d:32:3b:81:bf:86:df:96:9c:28:d7:1c:10:7e:d6:48:
bf:7f:4f:af:85:de:87:2f:f8:5d:f6:cb:8c:73:4c:9c:ad:23:
4b:99:f5:a2:bf:01:71:4f:7c:02:0a:a5:4f:77:cc:dc:7f:0b:
2d:d0:b5:f3:91:84:04:e5:b2:1e:15:a3:f8:5d:a5:de:3e:19:
ae:7b:56:f9:c9:b2:f1:da:17:52:9c:86:1b:d7:20:11:25:dd:
37:ea:b5:ae:f2:c0:e7:80:66:8a:5b:c0:ed:fd:d7:74:f3:cb:
ce:9c:c5:93:10:08:7e:41:31:c8:ce:50:bf:0e:4f:e7:31:ab:
f7:a9:1b:dd:f5:51:4e:45:3d:2d:e5:fe:8f:7d:be:01:50:97:
d0:35:64:eb:2e:11:84:b0:fb:96:53:cd:e9:15:2c:42:e8:db:
cc:26:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org