Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/BrKsxCCKt2RqGbupB_8GGSdsE68.roa
File: BrKsxCCKt2RqGbupB_8GGSdsE68.roa (raw, json)
Hash identifier: CEGQznjnUry7vmhdb4x4rxr3nd5JULX31mK99x56l74=
Subject key identifier: 06:B2:AC:C4:20:8A:B7:64:6A:19:BB:A9:07:FF:06:19:27:6C:13:AF
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 018C1C97D4F96934321093FC11B8F83C2FC7
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/BrKsxCCKt2RqGbupB_8GGSdsE68.roa
Signing time: Wed 29 Nov 2023 19:39:21 +0000
ROA not before: Wed 29 Nov 2023 19:39:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211903
IP address blocks: 45.94.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:97:d4:f9:69:34:32:10:93:fc:11:b8:f8:3c:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Nov 29 19:39:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06b2acc4208ab7646a19bba907ff0619276c13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:3d:d8:26:93:35:1b:dc:a3:fb:f9:c3:0d:
12:37:6b:c0:8d:6b:1f:ff:68:b9:84:a5:b5:52:35:
2e:7d:7c:f7:92:d4:c6:46:10:1d:f4:41:13:0a:37:
8b:e1:64:62:2f:98:2d:8b:14:18:b4:08:ab:94:36:
17:66:43:f0:0a:37:d4:b7:75:ed:2f:6a:01:78:4c:
73:70:42:97:bb:c8:25:a3:4f:f5:eb:92:25:1f:b8:
97:83:1c:1c:9f:b6:e7:18:88:9c:9a:41:a6:a3:76:
f1:b3:1b:ce:4a:b1:e9:c0:c3:fa:80:f5:8c:d9:de:
83:ab:1f:09:c7:e5:9f:b6:6b:9d:a6:37:17:e1:42:
fc:69:b3:5d:78:7a:1b:c6:bd:0b:e8:d7:2b:36:66:
67:97:6a:17:5e:b2:bf:66:54:97:01:88:11:66:38:
9a:87:01:94:4e:8c:d9:22:e0:d4:0b:87:b8:ac:b6:
ef:25:7f:67:8f:b7:31:37:23:b6:7f:d0:b8:1d:63:
72:c6:b9:f8:bf:b5:43:1c:c0:94:86:13:9f:7e:35:
e1:28:a2:c7:47:c8:62:b6:bf:14:8d:a6:fe:10:f2:
bc:10:6b:9d:4c:36:32:a3:fe:8a:0b:c8:c7:52:15:
4e:58:a0:3d:72:51:8b:7f:3b:7f:22:a8:b5:25:5e:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:AC:C4:20:8A:B7:64:6A:19:BB:A9:07:FF:06:19:27:6C:13:AF
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/BrKsxCCKt2RqGbupB_8GGSdsE68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:71:09:9b:07:da:c8:41:1b:09:97:dc:68:ea:6d:97:45:1d:
44:4f:16:9e:27:0c:bc:c7:ae:95:5b:d7:8f:8a:32:3f:81:36:
0e:35:9f:0a:05:0b:d1:77:c7:47:fb:f0:b8:a3:bc:36:5e:c8:
0b:70:d1:de:8e:46:a6:33:28:3d:da:ff:d1:95:b2:7f:9b:78:
bf:9e:1e:bb:c1:6d:30:4c:52:68:27:a6:c8:7c:53:7a:8e:a9:
3d:bd:31:6a:ed:ea:2d:f6:22:72:e6:fb:a7:14:58:23:06:37:
14:7c:14:35:77:2f:7b:8a:7f:76:e5:f8:e5:e0:9f:27:e3:0b:
65:ca:18:d7:f9:f9:32:35:a9:bb:4f:a9:b9:27:be:86:41:f4:
44:79:c7:22:93:52:fc:7a:59:03:8b:cf:79:6d:69:6d:32:35:
a4:84:93:39:57:0c:c2:72:41:ba:54:96:c5:50:86:83:e9:2a:
6b:5f:d2:94:4e:9c:d7:da:f8:fa:d4:a4:bb:63:34:24:da:68:
7e:5d:93:d8:4a:da:90:76:58:de:b8:56:c5:e0:f5:62:c2:4c:
5c:7b:11:7e:99:85:4b:e9:17:80:3c:c1:10:2e:d6:d0:02:3d:
2e:30:cd:ae:45:1f:93:8b:fc:6c:37:e2:91:10:a2:05:f6:cd:
e9:74:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org