Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/oImRRejpW7_d74MCsj7eZ56_u1o.roa
File: oImRRejpW7_d74MCsj7eZ56_u1o.roa (raw, json)
Hash identifier: YXChz31y1+syr/qxESwyhNFpUQnzoWpkheiqQUCC+fM=
Subject key identifier: A0:89:91:45:E8:E9:5B:BF:DD:EF:83:02:B2:3E:DE:67:9E:BF:BB:5A
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0188C391AECA5FCBC405B0ABF48CE7CEFB96
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/oImRRejpW7_d74MCsj7eZ56_u1o.roa
Signing time: Fri 16 Jun 2023 09:38:04 +0000
ROA not before: Fri 16 Jun 2023 09:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.247.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 00:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:91:ae:ca:5f:cb:c4:05:b0:ab:f4:8c:e7:ce:fb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 16 09:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0899145e8e95bbfddef8302b23ede679ebfbb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:4e:dc:5f:4b:46:f9:f9:bf:96:6b:85:82:
eb:9f:7c:76:d7:a0:a6:4d:ba:98:e0:3d:27:32:40:
11:75:0a:28:5e:3f:a3:b3:55:2f:11:e4:ed:f6:ec:
93:47:c6:e5:7e:c5:c8:f5:d0:44:c9:48:aa:37:97:
59:71:0f:29:81:08:44:4e:40:5d:a3:92:b2:63:f2:
26:b8:a8:6d:15:96:14:df:6c:7a:d7:e7:7b:66:b4:
dd:81:49:4e:52:bb:05:b1:91:f7:1f:e4:57:02:4d:
0d:08:4d:ae:90:5d:ed:a1:99:8b:54:51:61:ac:0c:
ce:20:bd:b0:2e:12:13:79:ac:51:d5:ee:d3:7a:ae:
8c:02:cf:ae:02:c0:bc:cf:f0:54:96:98:a5:71:a8:
aa:de:34:96:a5:81:40:3a:61:1b:df:24:43:03:86:
f4:53:1f:c3:f5:26:a1:a0:13:06:af:a7:e5:c8:78:
46:4d:db:f0:0e:ff:bd:c9:89:69:ee:6e:10:c8:33:
7a:2f:c0:e1:75:08:5f:50:af:95:fb:5b:58:23:30:
9e:7f:e8:ad:bf:79:d2:c0:a3:e4:6c:ec:d8:b3:ac:
08:2b:4d:52:91:33:d1:3b:2b:ba:6b:f9:c2:5f:53:
d8:fe:55:98:18:33:34:61:1f:52:59:2e:f5:b1:24:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:91:45:E8:E9:5B:BF:DD:EF:83:02:B2:3E:DE:67:9E:BF:BB:5A
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/oImRRejpW7_d74MCsj7eZ56_u1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fc:15:70:aa:9c:66:fd:9d:7b:72:36:62:76:1d:8d:08:5d:
d7:db:32:51:05:18:20:a6:ea:d3:17:bc:4e:8e:3b:aa:7b:19:
81:76:dd:e4:a8:cb:fa:41:3b:ae:cd:3b:e0:8f:79:fa:06:c4:
af:79:19:22:aa:0e:18:98:90:8b:9c:d8:3f:75:4e:3f:6c:67:
82:e2:43:bd:a7:47:8e:d9:94:c5:ad:41:6b:b2:97:44:db:1c:
06:ea:70:6d:a6:95:e2:07:53:14:6d:f6:9c:6d:43:b4:d5:9c:
04:52:65:38:09:8b:12:84:e0:6c:4c:03:8d:c1:6d:e6:a7:c1:
e9:94:3b:ee:43:68:ff:e6:48:01:3e:c6:b4:98:0c:52:ba:44:
03:a5:cc:cf:3d:de:1c:50:cc:25:27:01:9a:9b:ae:30:7a:fc:
30:b9:48:ef:11:34:59:84:48:4b:db:17:ca:7e:0e:ea:8c:66:
18:b7:a3:cb:da:41:fa:98:f3:97:b2:ac:15:dc:a0:8b:49:21:
83:c3:fe:2c:1c:34:e1:58:2a:16:44:bb:5d:6c:ee:d6:49:24:
46:06:c3:db:75:0e:94:9e:b9:44:e3:aa:6a:8d:7a:b6:09:1e:
a2:33:55:42:da:2a:ab:6a:6a:92:a1:8a:69:ec:ba:77:fe:72:
cf:bc:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org