Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/btipcp4_3blt-79fJSmd8jsBNqY.roa
File: btipcp4_3blt-79fJSmd8jsBNqY.roa (raw, json)
Hash identifier: 1X2qZ7YP+oh/ZVh+ubznOa1J7ia3tMEfXsNqZV2ZdlA=
Subject key identifier: 6E:D8:A9:72:9E:3F:DD:B9:6D:FB:BF:5F:25:29:9D:F2:3B:01:36:A6
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 0187E7334E6CAD845308C8B8F008D30221BC
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/btipcp4_3blt-79fJSmd8jsBNqY.roa
Signing time: Thu 04 May 2023 14:38:32 +0000
ROA not before: Thu 04 May 2023 14:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 217.73.68.0/24 maxlen: 24
217.73.70.0/24 maxlen: 24
217.73.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:33:4e:6c:ad:84:53:08:c8:b8:f0:08:d3:02:21:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: May 4 14:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ed8a9729e3fddb96dfbbf5f25299df23b0136a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:4c:69:19:29:0b:8a:c7:b5:b0:1b:b0:5b:
18:57:bb:36:fe:7e:77:52:fa:61:bd:45:1d:fe:13:
05:b0:ba:ab:b5:af:34:2c:4f:b6:4f:b3:5e:57:6c:
84:bf:52:f8:65:91:a0:db:aa:05:f3:71:d2:5e:3c:
73:fa:41:0d:a9:cd:a8:e4:be:71:27:b6:aa:c8:a3:
6a:f3:ad:a0:b8:78:60:1f:54:bd:05:da:f9:57:85:
98:0b:69:2b:f0:7f:62:b1:49:11:66:81:90:47:b9:
2d:e0:59:53:11:32:ea:2a:73:26:ea:81:ae:81:f7:
e0:3c:5e:04:3f:f6:e2:92:3a:bc:e1:14:6d:2a:5e:
92:3f:f9:80:27:9f:0b:44:0a:86:02:ca:c4:f0:74:
9e:eb:15:95:c7:df:bc:23:a0:94:2b:f4:cb:84:3a:
7d:56:43:b5:f8:0b:aa:f6:41:5e:6a:4a:b9:82:74:
ca:8e:65:18:23:5f:83:25:ab:1e:91:d9:99:4a:15:
f6:5a:2b:26:3a:ee:f4:24:8a:0a:32:28:34:5a:0e:
c6:c8:aa:25:c4:3a:96:0b:a5:66:42:7a:31:69:96:
ec:3e:8d:f6:7f:68:2d:22:c5:b3:1a:ef:42:3d:f2:
a7:fa:66:03:4d:ac:05:8e:e0:e8:5e:5e:7f:0d:d8:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:A9:72:9E:3F:DD:B9:6D:FB:BF:5F:25:29:9D:F2:3B:01:36:A6
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/btipcp4_3blt-79fJSmd8jsBNqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.68.0-217.73.70.255
Signature Algorithm: sha256WithRSAEncryption
54:50:c0:79:a1:57:e0:98:51:c9:0e:12:a0:a4:24:b2:63:10:
0f:7c:a4:36:73:88:8b:89:ec:87:0c:21:84:ec:4c:59:70:12:
51:e0:2c:00:6b:f9:f7:e6:16:95:c0:6e:3c:a3:32:49:1d:c3:
df:22:13:1c:da:b4:6a:dd:ba:c8:e9:64:78:d6:86:9a:52:f8:
83:78:10:f2:d2:cc:c5:9e:13:02:da:7d:f6:0f:13:62:11:4d:
c5:03:60:42:bc:29:fe:c4:b1:01:9c:df:05:cc:ea:d9:81:dd:
cc:59:6e:71:c7:75:7d:57:13:b3:4a:fd:4a:33:35:bc:c2:9f:
37:59:fc:08:43:2c:b9:ca:42:73:23:3b:80:10:19:22:7d:e5:
6c:fd:2a:0e:d8:6d:18:fd:7a:4a:5b:bd:6d:54:b1:b0:81:9a:
52:3c:6b:06:a5:bb:58:15:b4:75:8c:2b:73:3f:b8:32:a0:9a:
94:3a:9b:c7:45:db:8d:0e:ec:1f:3d:94:40:fa:4e:94:9c:00:
36:aa:b5:8a:e6:df:ce:f6:44:04:d2:af:3f:5e:58:73:d2:48:
66:cf:55:2d:e9:9f:f0:7a:74:fe:f7:03:16:d3:ef:ef:0b:d0:
40:9d:9b:d1:5c:0f:04:b8:5a:a2:4c:00:7e:c8:f8:cf:06:2b:
f3:9b:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:16 2024 by rpki-client on console-ams.rpki-client.org