Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/BVH669ks2AXCsrp_XqG4O3l2QyU.roa
File: BVH669ks2AXCsrp_XqG4O3l2QyU.roa (raw, json)
Hash identifier: 4W06oHgmb7pE+n/SoIXJSvsbcxhFfRTA33AEcJhUOaw=
Subject key identifier: 05:51:FA:EB:D9:2C:D8:05:C2:B2:BA:7F:5E:A1:B8:3B:79:76:43:25
Certificate issuer: /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial: 01857315C217DE85B9D7B3F4C73867AB15F6
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/BVH669ks2AXCsrp_XqG4O3l2QyU.roa
Signing time: Mon 02 Jan 2023 15:24:43 +0000
ROA not before: Mon 02 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210938
IP address blocks: 185.211.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c2:17:de:85:b9:d7:b3:f4:c7:38:67:ab:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Validity
Not Before: Jan 2 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0551faebd92cd805c2b2ba7f5ea1b83b79764325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:1c:d2:e5:da:23:f8:9d:20:25:d8:9d:5f:
ff:a0:9d:4c:c6:2d:fc:6e:8c:d0:9d:9d:0f:15:0c:
64:5b:f4:bb:cc:02:5e:44:f3:cf:43:a7:fa:40:29:
af:45:ac:a6:1d:f1:94:cb:d4:64:9f:ff:ba:da:ae:
6a:9c:6e:12:d5:3e:f2:e6:42:5e:ba:90:f8:fc:26:
9d:79:9c:17:32:54:a6:53:4a:87:60:68:1e:03:0e:
d6:e4:80:7f:b5:7d:37:64:72:25:d2:5a:c8:5a:bc:
2b:1f:b5:d8:8c:bf:3e:36:75:59:b8:3e:9d:af:7c:
83:50:d7:ce:8e:fd:5f:dd:e1:29:3c:31:88:db:23:
27:b0:f6:7c:4c:93:18:cb:76:58:5c:ea:74:0d:17:
d0:19:96:32:f2:07:ec:eb:4e:51:17:a2:9d:95:24:
4d:89:c8:b7:05:b8:f2:0f:ac:e7:aa:94:11:42:81:
d8:df:f3:bb:f3:f6:e1:93:ca:8c:a1:64:06:da:88:
a8:70:bc:5f:6a:2c:d9:a2:45:e6:4a:21:0f:d0:bc:
e4:60:25:50:8e:e9:78:18:2f:43:dc:92:2f:08:7c:
5a:ee:9e:38:ce:39:92:e0:91:6b:6b:91:ef:c5:b4:
a0:9a:4a:b9:08:26:a8:10:3f:13:f3:35:01:31:e2:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:FA:EB:D9:2C:D8:05:C2:B2:BA:7F:5E:A1:B8:3B:79:76:43:25
X509v3 Authority Key Identifier:
keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/BVH669ks2AXCsrp_XqG4O3l2QyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1c:89:a7:d1:45:0d:3a:ed:0d:b3:b9:a9:d7:f1:5d:4d:62:
8e:15:9e:74:b5:ef:4b:57:21:70:f8:d4:2f:47:f4:aa:a4:37:
99:e7:5c:8c:17:e1:3a:24:d9:a6:1a:1a:f7:6f:cd:20:50:5f:
5d:58:6f:55:51:af:30:ac:0e:b8:31:2a:4d:62:ad:db:ed:e5:
41:c7:60:b0:90:3b:26:3c:ae:5f:4d:8b:75:4b:4d:e6:bf:90:
69:a9:1d:11:17:52:00:e3:0b:5c:9d:1c:55:ac:73:41:de:24:
be:6c:60:ca:b0:63:27:bf:34:32:6d:2f:72:9b:df:52:c4:58:
d0:d7:9a:da:26:f5:fc:c4:72:08:08:b6:8c:d5:3f:36:bb:ce:
96:ea:6c:53:e5:a3:19:32:60:40:bc:3b:71:31:4b:91:c4:2e:
40:c7:de:42:cd:5c:ca:8d:8d:51:89:4b:8f:d9:d1:bf:ba:46:
41:43:b3:31:dc:33:d4:fc:6a:71:ea:bc:f0:f8:36:52:2e:9a:
66:48:a7:00:dd:df:2b:0f:2f:6e:5f:ea:22:0f:58:eb:6d:a8:
92:eb:3f:84:16:0f:2b:83:f0:12:27:cf:1d:ca:ba:83:65:b4:
67:4d:b1:0b:db:3a:8c:4b:05:65:19:55:18:8a:d6:65:4f:97:
4e:a7:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:00 2024 by rpki-client on console-fra.rpki-client.org