Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/BUkGMIcBYzPalXfFhoT8gI8qw6Y.roa
File: BUkGMIcBYzPalXfFhoT8gI8qw6Y.roa (raw, json)
Hash identifier: EcuGdfbpVCHuIYbv1LyoV83xm2/rfOqFiosnKgqabWg=
Subject key identifier: 05:49:06:30:87:01:63:33:DA:95:77:C5:86:84:FC:80:8F:2A:C3:A6
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 0187A2AC1DE549BF6A6B6A585703BE330028
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/BUkGMIcBYzPalXfFhoT8gI8qw6Y.roa
Signing time: Fri 21 Apr 2023 07:16:41 +0000
ROA not before: Fri 21 Apr 2023 07:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 85.208.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:ac:1d:e5:49:bf:6a:6b:6a:58:57:03:be:33:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Apr 21 07:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0549063087016333da9577c58684fc808f2ac3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:47:51:01:d3:5e:71:d9:43:9a:f2:33:9c:
96:44:aa:37:8e:4e:a1:df:7f:0d:e1:47:d8:c4:bf:
9d:84:61:f4:f4:60:7f:c1:b8:cb:ce:7a:69:36:1b:
f3:aa:81:0e:52:ba:e3:9a:b9:a3:22:45:b6:96:87:
ca:28:61:8e:7a:a0:1a:0e:21:95:94:31:5d:f3:1e:
96:b6:93:92:d0:05:78:c3:97:3e:b6:8c:e7:44:33:
a9:ce:3d:5c:5c:6d:88:f2:df:29:ad:75:df:ac:9d:
f1:64:03:75:ad:1b:e5:2b:59:ed:a0:28:13:13:89:
d8:3f:9e:5e:77:0a:d1:89:3f:23:1c:65:46:ce:f1:
79:58:e8:b7:61:0c:5d:0e:6e:b8:b2:93:54:66:19:
e6:68:d8:6d:5c:42:6c:af:16:3e:ed:0a:ea:28:b4:
30:61:ab:dc:75:1e:d9:8f:64:46:cf:33:5f:dd:3e:
91:97:f3:fc:50:f5:d5:79:aa:18:15:78:55:92:df:
f6:ed:ce:e9:5c:c3:8e:be:a4:f5:4f:bf:fb:5e:2b:
29:42:35:47:fa:7b:94:93:3d:b7:7b:a2:d8:ef:e1:
dc:29:cd:27:57:c7:e8:fa:12:32:46:bd:5e:de:d1:
ba:84:3b:b4:61:69:21:2e:22:e4:f5:81:e7:ac:f2:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:06:30:87:01:63:33:DA:95:77:C5:86:84:FC:80:8F:2A:C3:A6
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/BUkGMIcBYzPalXfFhoT8gI8qw6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.16.0/22
Signature Algorithm: sha256WithRSAEncryption
20:c0:fc:49:2a:84:a2:ea:8c:15:c8:f4:e4:f3:35:27:b1:e0:
26:bf:0c:99:b4:c4:83:b2:cd:f8:65:44:ce:c2:58:e0:d5:d0:
7e:a7:dc:2c:ec:f3:5e:27:c4:bb:c4:c6:9f:cb:47:4a:ef:64:
56:97:b6:f5:1d:98:ab:13:f0:d4:89:29:4c:3f:bd:23:3e:60:
a9:82:f8:7e:3c:a9:b3:80:54:6d:91:5a:5a:ee:ec:7b:7c:c5:
78:f1:af:28:21:20:99:6e:b5:51:0b:47:72:7c:03:1b:eb:5b:
f2:a9:f3:12:c8:c3:3e:d5:e9:d6:c1:93:d0:3f:e2:a2:d6:24:
b2:11:d1:45:e3:b9:a7:8d:43:fc:70:b6:74:29:6f:af:5a:05:
8c:d4:58:68:7e:9e:01:f7:ff:84:14:4c:b0:e8:9a:26:08:fd:
ee:7b:4e:49:4f:c0:d5:39:dd:e2:55:92:fb:12:90:4a:70:23:
2d:79:ae:a6:bf:c5:40:86:ee:ec:11:49:91:03:dc:b0:13:81:
60:60:64:d7:ab:b6:12:02:e8:0c:55:e3:c4:a4:94:dc:27:c1:
53:4b:cc:82:7c:7c:24:43:19:e0:2b:ca:a1:78:da:bb:e7:6f:
c5:2a:c3:4f:5a:a9:34:c5:08:ca:fb:bb:6c:89:15:cd:70:4f:
4b:ce:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-fra.rpki-client.org