Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/bt3lc5gc4jZ18PSg_K4C2qlXS18.roa
File: bt3lc5gc4jZ18PSg_K4C2qlXS18.roa (raw, json)
Hash identifier: cBps4rYdPr7BvE2JvDNSA1NOX1NGiYZMorwpMBW6hFc=
Subject key identifier: 6E:DD:E5:73:98:1C:E2:36:75:F0:F4:A0:FC:AE:02:DA:A9:57:4B:5F
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01859C14617FD1AE86B8A37E0FB2B8F39D18
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/bt3lc5gc4jZ18PSg_K4C2qlXS18.roa
Signing time: Tue 10 Jan 2023 14:27:39 +0000
ROA not before: Tue 10 Jan 2023 14:27:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.176.112.0/23 maxlen: 23
193.176.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:14:61:7f:d1:ae:86:b8:a3:7e:0f:b2:b8:f3:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jan 10 14:27:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6edde573981ce23675f0f4a0fcae02daa9574b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6d:89:76:4b:34:89:1c:80:dc:12:02:e9:73:
f4:34:dc:49:64:d6:c0:38:3a:6c:78:03:6d:da:49:
a8:2c:8d:2a:ba:15:98:ed:74:65:fc:46:ef:4b:21:
6b:b6:70:91:1e:7a:b1:80:fa:3d:a4:52:f0:b9:6c:
40:5c:a7:a0:25:cc:77:03:c4:42:e5:96:af:cd:08:
33:5b:ef:f0:fc:a5:57:a3:db:3d:49:ee:8e:0e:9d:
8a:4c:d9:a5:68:26:33:b4:2a:0b:9d:9f:c2:8b:00:
18:c9:97:3c:6b:56:bc:10:34:0b:12:c6:2d:29:27:
1c:51:e9:dc:c0:34:73:26:21:3b:fc:60:67:68:cb:
2d:b7:5e:b1:01:2f:30:16:ab:63:98:60:e7:b6:19:
50:fe:17:d8:cf:8a:75:23:09:4a:a3:1a:76:47:50:
63:92:64:b9:8c:74:aa:06:ba:69:95:59:8e:ae:6d:
d6:be:ee:db:74:04:3d:f0:e4:75:29:67:a5:6d:f0:
c9:16:74:ef:df:fb:09:bb:de:1b:65:e2:8e:1d:22:
fe:55:7f:7f:d3:09:db:64:77:1d:80:37:74:7c:f3:
47:20:91:eb:d1:e1:a8:5f:f0:14:e3:4e:93:66:16:
91:d8:86:aa:1c:f8:4f:b0:c1:cc:1d:0c:af:b4:59:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:E5:73:98:1C:E2:36:75:F0:F4:A0:FC:AE:02:DA:A9:57:4B:5F
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/bt3lc5gc4jZ18PSg_K4C2qlXS18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:1e:97:60:1c:49:3f:44:47:a3:07:c4:06:b6:0d:15:f4:48:
e2:3c:ad:a9:d4:b3:76:b7:55:21:a0:69:f4:49:19:39:59:36:
16:96:2a:03:a5:66:2a:cd:58:aa:71:cf:2a:25:32:47:bc:bc:
89:94:bd:a1:db:63:bd:d9:3c:ca:6f:c9:91:9f:69:47:ce:53:
22:b6:ca:be:4b:0a:42:6d:5a:c7:96:41:d8:2f:bb:08:e0:59:
05:7e:9c:c7:4b:22:bd:b0:72:87:fd:1c:07:6d:96:32:14:65:
3a:01:10:ff:b1:3f:ad:2a:04:2c:72:7f:06:36:00:0d:ef:d6:
34:48:e5:37:2f:7f:f1:b2:1a:1f:93:62:4c:63:b1:fe:ab:0d:
56:5a:f9:e9:8f:50:15:d6:ce:86:13:85:d1:6a:35:95:8e:6f:
65:0f:80:24:50:e7:b6:bc:25:1f:9e:cd:5f:a6:eb:fc:ec:6d:
8d:86:d6:58:40:7a:7f:28:9c:ed:c3:ff:29:a2:f8:6b:3b:23:
76:35:8e:ef:e8:25:01:7f:2c:5f:47:a7:81:6d:28:58:7e:2d:
80:6c:58:3f:26:c8:d8:d8:50:83:eb:14:3e:15:64:5c:16:88:
01:68:44:63:90:bc:b5:06:1b:69:ad:d3:27:81:ab:95:73:d6:
da:87:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:43 2024 by rpki-client on console-ams.rpki-client.org