Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/BC40B7Jq54bE8MbgqQDt7q3vouA.roa
File: BC40B7Jq54bE8MbgqQDt7q3vouA.roa (raw, json)
Hash identifier: oMbBE03Hh3iF68p85PbE/C1ihUR8plafu2nQFecYBlA=
Subject key identifier: 04:2E:34:07:B2:6A:E7:86:C4:F0:C6:E0:A9:00:ED:EE:AD:EF:A2:E0
Certificate issuer: /CN=6dc66ca5c9e769ce919334fb1f66c8bd9fcaae96
Certificate serial: 01856F300C8584C6F527C0DCB8CA22726F66
Authority key identifier: 6D:C6:6C:A5:C9:E7:69:CE:91:93:34:FB:1F:66:C8:BD:9F:CA:AE:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/BC40B7Jq54bE8MbgqQDt7q3vouA.roa
Signing time: Sun 01 Jan 2023 21:14:57 +0000
ROA not before: Sun 01 Jan 2023 21:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 185.94.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:0c:85:84:c6:f5:27:c0:dc:b8:ca:22:72:6f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc66ca5c9e769ce919334fb1f66c8bd9fcaae96
Validity
Not Before: Jan 1 21:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042e3407b26ae786c4f0c6e0a900edeeadefa2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:db:ca:05:a4:d2:cc:b4:d6:ee:00:81:09:
80:7d:65:89:a9:04:f2:c5:83:f3:32:b6:28:25:18:
fe:59:8e:20:a4:cd:b9:b9:c2:ba:0f:de:83:f5:55:
b4:46:e2:ae:a8:ac:aa:67:2c:4b:01:05:07:7d:36:
e5:2b:4a:8c:3b:a1:0b:cd:7c:fa:c8:fa:ee:09:e7:
6d:94:e6:24:da:c4:e9:14:27:2c:21:ad:70:46:38:
3c:e8:57:f5:a0:a6:78:52:63:cb:36:03:c1:1a:37:
bf:60:c1:7c:61:70:d5:67:b1:31:ca:94:42:30:ae:
9e:64:30:bb:bc:53:a6:f3:65:86:99:ba:8e:52:a5:
a7:60:65:10:8f:09:19:f9:b0:19:82:05:74:00:c9:
6c:a1:14:c7:3d:ca:60:cf:a2:d8:3c:ea:b1:fc:8d:
6a:d7:d5:f2:c0:03:b4:64:20:0c:12:13:b7:d3:a0:
da:a4:c1:f9:5f:f5:4c:56:07:5a:9e:71:82:d9:90:
35:d8:66:f7:79:6b:e7:b4:63:88:1b:40:a8:e3:e4:
f2:26:c3:b7:81:0a:02:6a:87:c1:e4:f4:a2:6f:66:
20:3c:ac:e0:5f:b6:09:19:df:a8:48:b4:2d:7f:61:
81:99:dd:b2:24:3b:78:37:15:05:60:15:19:15:6d:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:34:07:B2:6A:E7:86:C4:F0:C6:E0:A9:00:ED:EE:AD:EF:A2:E0
X509v3 Authority Key Identifier:
keyid:6D:C6:6C:A5:C9:E7:69:CE:91:93:34:FB:1F:66:C8:BD:9F:CA:AE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/BC40B7Jq54bE8MbgqQDt7q3vouA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.66.0/24
Signature Algorithm: sha256WithRSAEncryption
32:48:24:a6:db:46:e8:d9:56:b7:d5:16:b9:1d:77:0e:76:46:
72:52:64:9a:a0:21:6e:f8:3a:6a:0d:19:4c:a6:4f:7c:2f:9c:
d7:54:76:43:6a:3c:e1:2d:89:98:bf:71:88:3b:a6:74:03:6b:
b2:17:23:3f:ef:03:48:e0:75:f5:46:16:e5:fe:00:e7:f3:91:
0e:02:3c:c8:d4:2f:c6:93:cf:04:d4:97:a1:67:7b:f1:1f:ad:
a0:73:f5:d8:24:3b:fa:4a:67:89:ee:02:d1:9d:6c:97:61:4f:
31:9a:02:70:a4:95:43:27:b5:88:d4:7a:05:96:b0:57:64:ef:
76:89:21:e9:df:b2:49:6c:d7:a4:75:14:2c:6c:4b:f0:99:4f:
86:52:40:57:f3:09:fe:71:60:0d:0f:9b:cc:bd:d7:9b:cb:97:
d4:71:c6:87:fc:78:97:a7:da:b4:d4:9c:21:30:ff:cc:de:59:
bb:21:ac:5e:e7:9a:7b:d9:5f:95:66:14:dd:26:60:62:6d:f9:
6c:f5:8b:0d:17:c9:79:46:92:ec:3e:bd:58:8f:33:dc:2f:f6:
1a:0c:bc:de:a3:9f:80:0d:8d:d6:47:6f:50:a0:e9:0c:aa:f3:
0b:d8:4c:25:88:db:89:8c:72:53:fc:47:f9:79:6b:c9:2c:79:
6a:31:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org