Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/BCqzZlv7IHzlyltU0H0RCztK0gA.roa
File: BCqzZlv7IHzlyltU0H0RCztK0gA.roa (raw, json)
Hash identifier: mEeUxrH4LugR7BrtR0AE+UIc14KPPFdUI4a7AERe5hc=
Subject key identifier: 04:2A:B3:66:5B:FB:20:7C:E5:CA:5B:54:D0:7D:11:0B:3B:4A:D2:00
Certificate issuer: /CN=f288c5c7e8a267dec91664428fd14784bc861ebc
Certificate serial: 0185720C675AAE36B6F0AE4B4DDE1598A54D
Authority key identifier: F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/BCqzZlv7IHzlyltU0H0RCztK0gA.roa
Signing time: Mon 02 Jan 2023 10:34:53 +0000
ROA not before: Mon 02 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:67:5a:ae:36:b6:f0:ae:4b:4d:de:15:98:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f288c5c7e8a267dec91664428fd14784bc861ebc
Validity
Not Before: Jan 2 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042ab3665bfb207ce5ca5b54d07d110b3b4ad200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:f4:9f:c9:c1:23:be:d4:5a:13:c0:9f:d3:
d9:cd:55:8c:d7:db:09:ff:57:c8:d3:c5:bc:3f:82:
74:f0:67:38:16:02:16:78:da:ed:67:fa:bd:5d:52:
07:1a:a0:41:c1:19:1b:a4:af:a9:61:f4:b4:8b:25:
91:75:e2:ac:82:53:63:f9:84:d4:70:dc:0a:e8:32:
3e:c4:39:1c:ed:43:02:f9:82:f7:05:77:8e:66:71:
ac:03:ea:5b:28:47:4b:c3:f1:f8:f6:83:ab:b2:9b:
36:8c:a2:e0:92:73:c7:fa:38:a1:08:54:81:ab:64:
57:ed:be:97:99:74:d1:16:77:ad:c9:e1:06:96:04:
9a:f2:71:04:99:26:bf:e3:f8:f1:c5:80:54:ad:6e:
aa:57:ff:46:c9:f9:b9:39:ad:f7:df:c1:8c:e8:92:
84:b3:5b:c9:dc:b2:25:92:44:cf:7f:4b:a4:05:92:
2f:f2:ee:6d:0a:64:40:6b:a9:56:3d:c3:40:2d:39:
8e:38:87:2a:b5:71:f9:10:d8:b6:f7:0b:e3:05:7a:
c0:fa:96:e0:a8:74:7b:62:61:fb:35:a0:94:d7:d5:
7e:82:f8:87:5a:e1:ca:e1:aa:d3:2d:ce:bb:37:ab:
a9:52:66:bf:94:1d:f7:a5:ef:d2:ca:d5:de:11:cd:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:B3:66:5B:FB:20:7C:E5:CA:5B:54:D0:7D:11:0B:3B:4A:D2:00
X509v3 Authority Key Identifier:
keyid:F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/BCqzZlv7IHzlyltU0H0RCztK0gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.176.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cc:e1:24:65:89:5d:25:aa:fe:de:90:93:cb:1a:1e:b1:d7:
4f:f1:bc:76:b3:65:d9:ac:fd:a0:b5:4c:9f:0f:b8:76:fa:1d:
ea:cd:e2:1f:0f:56:45:49:ce:63:9f:6f:79:05:30:64:f8:95:
a4:bc:62:6f:78:b3:93:a7:39:f4:86:a2:b7:21:50:9e:a0:85:
21:1d:d3:9a:88:65:4e:1c:d2:75:82:32:0d:69:76:f0:76:3f:
bc:25:8a:c4:e3:f9:7f:0e:1b:46:32:b4:25:dd:32:1f:29:f7:
f5:1e:e9:1c:98:e8:96:bc:8e:f1:c8:e8:fe:b4:1a:60:b0:02:
7d:cc:d3:11:5d:8c:5d:06:ec:4a:bf:b0:5b:4d:c7:86:77:ed:
5d:88:20:a2:02:14:0e:84:d8:30:ce:f3:47:c1:12:a9:8c:e5:
43:f8:5a:12:1d:9c:48:75:bd:ee:47:33:72:ca:57:6c:6a:d7:
68:cd:8f:bb:93:aa:36:fa:34:50:54:b7:4e:14:4b:00:f2:c7:
2d:c1:dc:cf:e7:51:1d:19:a4:c2:29:2b:49:53:12:4f:b6:1e:
8b:e8:68:a3:3c:22:ca:04:24:8c:e5:ea:48:18:dc:af:6a:c6:
28:d7:0d:36:4d:9c:20:a1:50:71:14:b2:e9:4e:e6:7c:65:68:
4b:86:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:40 2024 by rpki-client on console-ams.rpki-client.org