Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tGgcHu2cNq_GRi075wp4p_wMmVY.roa
File: tGgcHu2cNq_GRi075wp4p_wMmVY.roa (raw, json)
Hash identifier: psONZiLnd2+tJzikyChJgK4CGbmyqyiymb/SQL++n4A=
Subject key identifier: B4:68:1C:1E:ED:9C:36:AF:C6:46:2D:3B:E7:0A:78:A7:FC:0C:99:56
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0191C29E576668141A9D54F978C6DBB3B204
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tGgcHu2cNq_GRi075wp4p_wMmVY.roa
Signing time: Thu 05 Sep 2024 14:37:22 +0000
ROA not before: Thu 05 Sep 2024 14:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 07:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:9e:57:66:68:14:1a:9d:54:f9:78:c6:db:b3:b2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Sep 5 14:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4681c1eed9c36afc6462d3be70a78a7fc0c9956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:5d:c0:df:35:c5:2c:84:45:30:b6:69:9e:
7f:4d:3c:e1:0c:ad:63:28:de:4d:c3:39:fb:a1:e5:
23:28:0f:9b:c0:52:43:5a:3e:29:9b:ed:89:f4:14:
f5:b7:45:d3:55:b5:99:7b:28:7b:6e:f9:ca:bc:2a:
03:41:29:d4:e5:a9:e2:33:24:ea:1b:e9:d5:88:b0:
8f:e1:5a:9c:f7:5c:a8:a7:b5:a0:5a:9d:7b:19:e4:
df:06:c3:7b:67:64:8c:36:57:2f:7b:93:09:d8:06:
f3:cb:4b:ed:8f:28:5d:8c:d9:ad:de:10:6c:0f:b5:
68:04:95:d3:1d:94:12:c4:6d:d5:42:46:e6:e0:76:
83:d2:cb:6d:8f:59:c7:32:04:f5:3f:35:c0:e0:b9:
98:5b:ce:3d:0e:3a:de:6c:cc:bb:a9:e2:aa:19:b5:
b0:a1:a4:57:94:b9:d4:b4:30:48:08:dc:23:fd:68:
99:29:09:39:b6:90:bb:cd:8d:6a:a3:f5:ed:6a:11:
60:cd:3b:62:0e:3a:e1:30:55:4e:27:60:4c:88:98:
5d:81:c9:3c:37:fb:3d:13:cb:6a:d7:30:36:58:94:
12:a2:ba:af:2a:d6:95:cd:0d:90:a6:bf:6c:bb:b1:
fe:99:cc:ec:e7:ad:40:3e:05:3b:08:70:d7:cb:88:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:1C:1E:ED:9C:36:AF:C6:46:2D:3B:E7:0A:78:A7:FC:0C:99:56
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tGgcHu2cNq_GRi075wp4p_wMmVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:91:e6:f5:3c:a6:ed:45:cd:f0:62:58:be:ae:aa:43:3d:ce:
2d:c2:59:c0:aa:80:67:00:e0:80:45:a2:ae:c9:a6:a1:ae:16:
81:db:bf:6c:22:9f:37:a1:e3:e4:f4:98:7b:e6:b9:b2:74:13:
54:f2:49:8d:d6:58:89:cc:83:32:0c:69:1e:04:30:82:3b:17:
cc:ee:d1:12:7d:81:3f:79:bd:c3:19:69:22:a1:c0:38:44:d9:
96:20:89:eb:52:5a:d0:7e:08:a2:57:e8:5c:28:05:cb:25:ac:
f2:4d:bb:a1:30:a3:0b:11:36:c4:5e:b9:29:64:9f:af:7a:6f:
52:7b:8d:4f:da:80:9a:46:85:f8:7e:61:4a:08:f6:c4:69:97:
de:b3:b1:14:56:98:b3:e7:fb:74:b1:ce:ce:4b:41:24:76:30:
ae:81:d0:a5:49:45:13:c0:34:07:9c:13:a9:b1:b6:1a:ec:13:
94:a0:79:21:1a:89:2e:23:57:24:72:f6:02:1b:9e:5e:42:06:
51:96:95:91:f2:a2:d3:86:70:d7:68:27:b0:c3:58:42:11:0a:
6e:c7:6b:a4:52:2a:f7:d8:28:db:7d:da:74:c5:ab:9f:42:d3:
3c:e0:31:e8:18:38:36:b6:97:50:10:81:d0:25:aa:4d:37:ff:
69:2d:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 08:30:06 2024 by rpki-client on console-ams.rpki-client.org