Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/rUnb8YRs_F-BjUl_LbOn4VDb-rI.roa
File: rUnb8YRs_F-BjUl_LbOn4VDb-rI.roa (raw, json)
Hash identifier: 7dLWSebVTSIUOUZ3aCICKeg4I+KAJjv/eLDQvTbfltk=
Subject key identifier: AD:49:DB:F1:84:6C:FC:5F:81:8D:49:7F:2D:B3:A7:E1:50:DB:FA:B2
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01858BB43AA51299BA0B225BEF192C0E3A45
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/rUnb8YRs_F-BjUl_LbOn4VDb-rI.roa
Signing time: Sat 07 Jan 2023 10:08:42 +0000
ROA not before: Sat 07 Jan 2023 10:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.246.36.0/24 maxlen: 24
45.143.160.0/24 maxlen: 24
45.143.162.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 04:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:b4:3a:a5:12:99:ba:0b:22:5b:ef:19:2c:0e:3a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 7 10:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad49dbf1846cfc5f818d497f2db3a7e150dbfab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:42:b7:40:61:45:66:63:34:18:8d:86:c5:
7f:eb:0a:c2:ca:fd:83:b5:93:79:6d:f7:7a:46:66:
b9:9f:eb:8d:70:49:ed:93:b0:79:63:e0:a5:79:5a:
8b:70:c3:bd:b3:08:7c:6c:cc:85:d8:38:91:a8:d7:
39:b0:71:a8:da:57:49:a2:34:0a:b3:95:bb:33:44:
14:ec:9a:7c:d5:9b:f2:d7:76:93:9c:fc:15:93:09:
87:de:52:20:a2:a4:8f:c4:c4:82:06:f8:0d:b7:b0:
37:c2:ab:80:3a:1d:b4:81:af:8b:45:ab:5e:7e:72:
c7:56:78:b5:c7:00:72:36:65:75:1d:dd:67:47:3b:
c2:b0:ec:5c:65:e4:24:04:15:7b:51:47:5a:64:13:
f6:55:e4:7e:06:f0:55:18:3c:ff:f2:c4:c7:e3:ba:
aa:6d:05:c4:38:ed:7e:2f:40:09:dc:14:67:ac:7e:
53:01:c1:6b:e5:32:48:7f:07:a1:fb:e8:cf:ca:17:
fb:ec:96:c2:11:59:0f:fe:f6:d1:f7:d1:fe:11:a5:
92:4c:aa:29:74:1e:e9:2c:43:d7:1f:47:4b:6d:0e:
36:3b:35:91:9b:b0:4b:e8:ad:df:de:ad:57:54:70:
be:94:f9:b7:9c:f9:29:ea:27:32:88:72:c1:0f:fe:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:DB:F1:84:6C:FC:5F:81:8D:49:7F:2D:B3:A7:E1:50:DB:FA:B2
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/rUnb8YRs_F-BjUl_LbOn4VDb-rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
45.143.162.0/24
45.149.166.0/24
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
55:56:d4:5d:1a:85:f7:67:84:ad:79:bf:d1:62:b3:57:9d:67:
25:56:74:3d:b8:0c:45:95:92:71:3a:35:36:57:1f:6e:60:68:
75:f4:86:31:a1:51:80:aa:e8:e1:c3:58:3b:9a:62:f9:ab:af:
8e:16:dc:92:75:6b:a8:73:51:9f:5d:1b:ae:76:1b:38:32:c2:
9e:97:d9:3e:81:6b:1f:bd:87:73:f2:72:1a:93:d2:93:f4:3e:
81:48:f2:dc:fb:ec:40:36:41:51:98:a2:39:28:ea:71:6a:67:
67:05:58:57:09:e7:89:85:e7:00:3c:39:71:54:22:8d:a7:a4:
e3:a5:b9:67:55:67:02:2d:d7:fb:34:26:cd:89:e6:b6:ec:b7:
71:16:9d:09:c7:42:46:f5:e0:92:84:c6:f6:e6:9f:ac:32:3b:
27:4a:15:eb:99:d8:e0:21:0c:e3:ee:8f:43:b5:ba:02:b9:56:
50:b8:c6:5e:2f:63:98:15:87:9d:f2:f9:1e:e9:55:cd:78:cf:
59:fa:eb:5e:49:40:d4:ad:4c:92:83:4a:51:63:79:0e:44:6e:
e3:90:cb:49:39:21:88:c8:64:00:cf:46:22:da:42:9e:41:f5:
67:e7:e8:df:c9:b2:9a:ba:a7:c9:77:67:de:fc:8c:c3:38:43:
9a:46:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org