Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/BZt79NTly-CSLbdeO56S0KI412I.roa
File: BZt79NTly-CSLbdeO56S0KI412I.roa (raw, json)
Hash identifier: IjzVr3R63u1K1tuIuUrS8ox+G/JcEOeWy/V3+CI7wDc=
Subject key identifier: 05:9B:7B:F4:D4:E5:CB:E0:92:2D:B7:5E:3B:9E:92:D0:A2:38:D7:62
Certificate issuer: /CN=97668547a433343dde9bb36595bc903b4f149604
Certificate serial: 018CC4931FF953F25D1DDD7E9667ED12EF82
Authority key identifier: 97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/BZt79NTly-CSLbdeO56S0KI412I.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 194.54.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1f:f9:53:f2:5d:1d:dd:7e:96:67:ed:12:ef:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97668547a433343dde9bb36595bc903b4f149604
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=059b7bf4d4e5cbe0922db75e3b9e92d0a238d762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:e3:e2:e7:95:6c:c2:16:5d:54:90:8d:66:
6b:e9:e4:33:f1:4d:67:cf:84:ae:89:54:2b:6d:05:
b8:5b:d0:6e:e7:49:bf:a2:14:f5:b8:82:83:3d:f8:
21:52:81:cc:65:79:0c:23:f9:14:a4:e3:b0:be:bc:
27:6c:a8:87:8a:b7:a3:e5:8c:b3:a4:37:26:c0:07:
8f:4a:23:07:3e:b8:39:b5:5d:74:76:a9:81:51:66:
f4:c0:17:6c:58:62:15:3d:77:b4:76:7d:b3:cc:03:
c2:2f:c9:d2:57:73:98:86:25:93:8e:21:3b:36:4f:
16:10:a1:17:8f:39:ee:a2:84:82:a8:c5:5b:2d:d3:
42:f8:1d:3a:cd:a2:2a:e4:78:5b:70:09:f8:30:43:
04:df:6b:c0:b2:17:94:43:bd:7b:5d:27:35:7d:c1:
03:73:51:65:bb:3c:73:32:89:cb:c5:f2:b3:f9:44:
78:8c:21:ce:67:21:57:f3:10:75:9a:07:e3:9d:b4:
b8:3b:3b:30:16:e4:03:2c:db:3f:c9:f7:d5:bd:cd:
a4:b9:30:41:c6:cc:a2:42:a4:f9:47:de:b6:e5:d2:
0d:8e:ac:1a:24:6f:26:95:92:58:68:1f:76:36:ce:
07:62:85:48:c2:38:32:1d:fb:8d:6f:55:0f:06:53:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:7B:F4:D4:E5:CB:E0:92:2D:B7:5E:3B:9E:92:D0:A2:38:D7:62
X509v3 Authority Key Identifier:
keyid:97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/BZt79NTly-CSLbdeO56S0KI412I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.68.0/22
Signature Algorithm: sha256WithRSAEncryption
22:09:e4:55:a1:d8:d9:8a:52:22:1b:24:8f:88:f8:af:c7:27:
44:27:d7:00:b3:1b:6a:e0:39:8d:4d:e0:78:5c:f5:9f:f5:13:
17:f9:54:c4:c6:3c:05:e9:c9:d7:58:a4:0f:4d:5e:2f:c9:af:
f6:c9:8e:31:29:af:a5:8d:fa:9e:0e:da:e2:ef:5d:87:cc:60:
06:2c:af:38:81:16:0a:1e:ec:99:3c:ca:63:6f:00:5e:26:98:
2c:24:f7:8f:8b:78:42:0a:b5:a2:15:48:98:eb:f1:03:f9:1f:
af:0b:4c:de:70:29:9e:e3:33:28:13:71:39:18:1a:02:99:14:
b2:57:00:25:31:ea:ec:00:40:a3:24:8e:d0:ad:14:19:c1:69:
2e:37:c5:12:78:57:27:31:99:02:5d:26:49:7d:31:b3:07:8d:
19:de:96:93:d8:86:b0:b4:a5:4f:12:5c:59:38:ac:12:93:48:
30:a3:c0:c7:ca:f3:b6:da:57:5a:68:8b:1f:9b:55:40:34:11:
3f:a0:01:29:4b:52:58:c6:aa:40:65:65:4a:7a:f7:6a:91:29:
cc:7d:a8:35:03:ad:2c:b1:27:69:b0:23:4d:9a:a1:65:d2:18:
66:8e:71:ea:04:77:4b:eb:38:33:a0:bd:a1:18:74:c1:a8:57:
e6:99:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org