Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bvk1M6X05XU2bOB4u4_wyJebzSg.roa
File: Bvk1M6X05XU2bOB4u4_wyJebzSg.roa (raw, json)
Hash identifier: NImdnN0zFhTQUKFJurrqjfkZFCeuL2QsYrh8QlRE9Co=
Subject key identifier: 06:F9:35:33:A5:F4:E5:75:36:6C:E0:78:BB:8F:F0:C8:97:9B:CD:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E7447507BAAC2803A50D92B97942E108E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bvk1M6X05XU2bOB4u4_wyJebzSg.roa
Signing time: Mon 25 Mar 2024 06:23:34 +0000
ROA not before: Mon 25 Mar 2024 06:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 81.161.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 17:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:47:50:7b:aa:c2:80:3a:50:d9:2b:97:94:2e:10:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 06:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06f93533a5f4e575366ce078bb8ff0c8979bcd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:f8:81:69:d4:88:72:b1:37:c6:42:dd:cf:
c7:0a:78:0c:8d:c9:6a:a7:8d:04:1b:ff:4b:e0:2b:
5f:67:02:28:c0:7f:aa:0b:60:8b:d0:38:11:c9:d3:
08:c3:69:7a:d8:8b:53:c7:79:f4:b2:19:5d:3d:2c:
99:2c:e7:7a:1f:c7:db:ce:25:5a:7c:76:56:b3:96:
fd:81:7e:e2:74:31:cd:2e:e2:1b:62:06:95:90:43:
b6:51:e1:ff:41:34:db:a4:63:8d:6c:67:44:fa:2b:
2c:6f:2b:24:c8:c7:16:4d:f1:fc:c4:58:31:32:9d:
24:d7:3a:c6:6e:b6:c6:43:b1:77:67:ac:b3:a4:77:
9f:92:55:3a:38:55:cc:3f:3d:2e:d5:a0:0f:10:62:
84:bc:8f:99:9b:b4:57:c3:b2:89:2e:4f:f3:6b:10:
ce:9f:ca:7e:dd:bd:a5:aa:1b:0d:f0:eb:26:8b:83:
87:4c:55:8e:8e:0f:fa:35:76:8c:f8:77:10:75:9c:
6b:45:27:bf:c4:67:1f:c9:17:24:89:b5:d0:92:8e:
98:1e:ae:bd:fb:2d:04:8a:77:12:c5:c6:74:df:bc:
05:68:a1:3a:8f:ac:91:a4:e4:39:8e:93:b9:72:2e:
1a:f9:25:31:64:db:cb:95:1a:76:78:6b:bc:d6:cf:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:35:33:A5:F4:E5:75:36:6C:E0:78:BB:8F:F0:C8:97:9B:CD:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bvk1M6X05XU2bOB4u4_wyJebzSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:38:18:f7:fe:50:29:86:0f:67:6b:ce:8b:a8:f9:8c:fb:c8:
23:99:09:59:10:7b:a7:b9:3b:07:c4:5c:b9:e9:60:d3:ad:8c:
1c:c5:b7:12:0c:47:16:7d:34:2a:69:ff:15:2b:8d:cf:cf:19:
0b:a1:5b:e0:e4:65:b8:10:ce:9b:f9:6f:10:67:76:90:64:0c:
d4:e8:b6:40:af:f8:93:5c:13:d7:67:46:7c:82:e9:be:53:4b:
8d:42:13:ca:89:23:3d:60:c8:4a:bd:0b:8b:a8:c3:a6:cd:8e:
ae:69:0f:17:65:da:a8:91:f3:29:83:bb:76:e4:49:68:33:39:
94:ee:99:2f:30:51:e3:38:f8:82:ce:32:4a:d9:9c:90:08:76:
2e:f2:fa:29:b8:64:35:d2:dc:89:ec:57:9e:91:66:f2:97:ad:
ac:54:ad:dc:59:60:bc:27:e5:51:84:76:00:9b:2f:e8:8b:8c:
5a:06:db:4e:49:85:c5:5e:44:f0:09:8d:a1:71:8f:bd:28:89:
1a:01:1b:f2:a4:a5:d9:68:0b:7a:43:d8:b0:23:bd:c0:2e:bd:
b2:55:15:d6:fd:46:4c:ef:51:24:b6:a1:8f:48:bc:63:5c:25:
d5:bc:6a:16:68:ca:4a:dd:d9:e5:11:78:d2:cf:d4:a1:5e:87:
ee:06:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 20:37:21 2024 by rpki-client on console-fra.rpki-client.org