Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/wH3oJogAqCB9akYcgqSdqpYhBBo.roa
File: wH3oJogAqCB9akYcgqSdqpYhBBo.roa (raw, json)
Hash identifier: mk3KEqXbQ3nNNRHgEJJx/sDAZgfZZKHVArv4pykRIZ0=
Subject key identifier: C0:7D:E8:26:88:00:A8:20:7D:6A:46:1C:82:A4:9D:AA:96:21:04:1A
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 0185718C3BBD36CECE4C0B455EEB3B0E0114
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/wH3oJogAqCB9akYcgqSdqpYhBBo.roa
Signing time: Mon 02 Jan 2023 08:14:53 +0000
ROA not before: Mon 02 Jan 2023 08:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16032
IP address blocks: 194.46.136.0/21 maxlen: 21
194.46.144.0/22 maxlen: 22
194.46.148.0/22 maxlen: 22
194.46.156.0/22 maxlen: 22
194.46.126.0/23 maxlen: 23
194.46.132.0/22 maxlen: 22
194.46.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:3b:bd:36:ce:ce:4c:0b:45:5e:eb:3b:0e:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Jan 2 08:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c07de8268800a8207d6a461c82a49daa9621041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:e1:23:a1:76:3b:f9:52:c4:a2:7f:d9:f8:
bd:ac:b4:20:7c:ce:88:9d:0a:b3:26:a3:e1:d7:37:
6c:59:97:f0:b7:28:88:87:7a:83:a9:c0:3e:29:de:
1c:be:be:74:e5:70:95:59:87:a6:27:c0:b2:77:48:
75:d7:9b:69:88:4c:47:2e:b9:74:1d:ca:44:69:db:
20:a2:42:13:f0:a1:19:44:06:29:dc:f0:d3:09:a9:
7c:28:03:bb:7c:ec:7d:f1:20:11:86:f4:2f:31:6f:
c1:0e:7c:e6:be:ea:ea:b8:0e:59:d7:df:8c:fa:c3:
90:c5:a8:8b:d0:88:75:9c:6e:33:40:cc:65:08:92:
4a:c5:8d:7d:80:ad:00:71:83:5b:67:98:e0:96:55:
8f:e9:c1:56:f1:23:a2:85:7f:2a:a3:1f:c8:ed:41:
40:96:3b:33:3c:57:ed:d7:cd:65:8c:af:50:bd:4e:
7a:5a:d5:20:42:2d:7b:3b:46:ca:4b:14:7c:1e:e5:
8f:fe:6d:11:e0:a0:a4:5c:d9:de:38:ce:d0:0e:62:
a8:76:c7:64:85:37:1d:0a:99:ca:04:26:12:05:fa:
f0:d8:0f:b7:f4:1c:da:c4:e4:a5:5a:30:96:c3:8a:
2d:ea:87:82:8a:14:4c:6c:0a:58:91:1a:d8:80:b5:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:E8:26:88:00:A8:20:7D:6A:46:1C:82:A4:9D:AA:96:21:04:1A
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/wH3oJogAqCB9akYcgqSdqpYhBBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.126.0-194.46.151.255
194.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:d8:cb:0e:6a:05:48:79:03:ec:0b:77:28:70:05:bd:37:b1:
5e:7e:03:48:99:c5:44:83:3a:bd:9a:36:d3:74:c5:6e:95:66:
be:b0:70:5e:59:1c:19:1d:18:ef:e6:d0:38:48:34:2a:36:a2:
ca:af:54:a8:57:4e:ca:d0:c3:14:a5:c7:e1:a1:97:7a:f2:4b:
2e:87:8c:a7:c6:fb:ba:91:76:3e:f3:a6:03:c7:ae:bf:ca:fd:
e7:99:a7:d0:da:1c:f2:fc:02:93:9e:53:77:c2:62:f6:20:f2:
a6:72:4e:b4:c5:05:4f:10:f8:93:e7:6f:2d:1e:af:ad:6b:50:
32:2d:bb:6e:77:e4:f1:16:bb:ac:06:b7:cf:e3:fd:a8:89:15:
47:19:24:12:5d:41:c7:dd:55:37:32:e9:10:44:fc:9f:41:e0:
f6:26:17:b7:e4:d7:8c:84:75:c4:67:74:9b:1a:fc:d5:59:48:
82:fc:e9:f6:12:a2:a6:87:1d:4d:9f:4b:9c:93:ca:a3:a4:d4:
2c:33:82:40:5f:f0:fe:bd:d6:91:3a:ed:8b:74:28:7b:06:6a:
96:d2:b4:d8:5a:71:3e:be:9b:69:c3:74:0f:00:4c:16:e7:3b:
25:9e:a6:66:9d:6a:9f:64:67:db:51:23:fc:91:cc:65:7d:db:
de:96:b0:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:10 2024 by rpki-client on console-fra.rpki-client.org