Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/BoWTJO6-uMvEZtfmSJwbKCzQFIk.roa
File: BoWTJO6-uMvEZtfmSJwbKCzQFIk.roa (raw, json)
Hash identifier: wkdsdwkh3AnMwE8FVRTYghKPyW26QhI3H+7DsH5TjNY=
Subject key identifier: 06:85:93:24:EE:BE:B8:CB:C4:66:D7:E6:48:9C:1B:28:2C:D0:14:89
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E66746064A93C273B9317CF52C2C81F
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/BoWTJO6-uMvEZtfmSJwbKCzQFIk.roa
Signing time: Sun 01 Jan 2023 17:34:46 +0000
ROA not before: Sun 01 Jan 2023 17:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196984
IP address blocks: 194.30.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:74:60:64:a9:3c:27:3b:93:17:cf:52:c2:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06859324eebeb8cbc466d7e6489c1b282cd01489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:b5:59:b9:51:e8:d3:26:dc:dc:7d:97:5e:
62:34:2d:5d:5b:09:cf:17:3d:28:1e:49:38:ec:a0:
92:48:d8:01:38:ef:04:1a:0f:7b:2b:2a:82:5a:a6:
6e:7a:3a:1c:bc:dc:26:df:35:09:fc:b3:14:46:f0:
da:4f:cf:6c:99:38:85:28:d2:bc:37:5c:c3:86:56:
1a:c9:78:d4:36:6a:2d:1a:f0:86:3a:a2:25:6e:17:
ef:cc:cb:99:42:99:cc:0f:18:2a:ca:f9:0f:22:34:
19:65:ea:65:3d:b3:c0:01:2f:b9:85:28:79:6c:0a:
c3:95:36:12:8c:e3:c1:1b:39:c6:64:d4:5a:51:45:
93:38:49:c3:a7:d4:86:a8:f7:ea:a3:62:3d:5a:56:
43:2e:45:5c:08:7d:ef:08:fb:ed:22:15:b9:63:8c:
48:8e:09:15:34:fa:db:39:33:fa:e6:b3:15:cb:30:
11:75:45:f3:29:d6:47:bf:00:e9:64:b0:92:09:d4:
34:5a:93:62:dc:d0:ee:ce:09:04:6c:fe:1e:3c:ae:
74:6a:9e:8d:32:8b:9f:e0:ef:eb:f0:c8:f5:ea:f7:
19:04:75:70:e0:c0:12:d1:d6:22:d0:4a:9c:57:67:
f6:1f:d2:6b:f1:0b:a0:1e:42:2e:da:ba:35:f2:2f:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:93:24:EE:BE:B8:CB:C4:66:D7:E6:48:9C:1B:28:2C:D0:14:89
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/BoWTJO6-uMvEZtfmSJwbKCzQFIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:41:be:f2:8f:71:78:f8:98:da:a2:41:68:fe:b7:7b:55:85:
54:b0:f0:b7:05:b1:04:25:7f:3a:72:29:a3:b7:23:52:84:41:
32:b3:fc:93:1a:03:e4:a6:c0:26:0c:eb:12:1f:99:f6:34:af:
47:30:f0:22:8a:5d:77:4d:41:6b:1f:c7:31:14:f5:95:91:ec:
da:a5:a5:90:7f:45:66:e9:a4:28:15:a9:53:17:eb:1e:7a:69:
c7:c1:76:93:82:d1:b7:91:20:54:9e:5a:f8:45:9e:78:d7:f8:
93:fb:a4:98:a9:d5:45:f6:b1:a7:ff:e8:d8:d6:df:fd:96:06:
ef:64:f3:7f:d3:50:1f:8e:eb:9d:1b:e7:73:82:b4:41:40:37:
24:40:dc:f1:f0:71:11:0e:87:37:7d:19:a3:e9:ab:06:92:65:
23:16:95:8a:82:7b:19:69:12:12:0c:f5:a4:09:59:50:f0:a1:
54:eb:3c:aa:68:c9:5c:ba:9c:00:66:36:70:9c:64:18:47:b2:
46:26:43:3d:aa:8a:be:29:ce:9a:4d:4e:2a:d7:5e:b0:e5:74:
7d:55:b4:e2:41:20:6f:97:b0:73:6e:fe:70:d0:43:29:f0:18:
ef:c4:b6:1d:90:d5:3c:95:6f:da:9e:b7:20:71:86:4f:61:4a:
dd:c1:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:53 2024 by rpki-client on console-ams.rpki-client.org