Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/BsLJet83Xrm1u7I3hvWylzcxv5I.roa
File: BsLJet83Xrm1u7I3hvWylzcxv5I.roa (raw, json)
Hash identifier: RBvPXSSShx+V7qbGkWyWv02silXtEBoK7lT/0Vuqy7A=
Subject key identifier: 06:C2:C9:7A:DF:37:5E:B9:B5:BB:B2:37:86:F5:B2:97:37:31:BF:92
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0186680EFAD188EE0442B9FCC2AD765C0DE7
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/BsLJet83Xrm1u7I3hvWylzcxv5I.roa
Signing time: Sun 19 Feb 2023 05:04:17 +0000
ROA not before: Sun 19 Feb 2023 05:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46450
IP address blocks: 185.213.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:0e:fa:d1:88:ee:04:42:b9:fc:c2:ad:76:5c:0d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Feb 19 05:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c2c97adf375eb9b5bbb23786f5b2973731bf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:6b:39:00:7c:d3:c8:09:5f:8e:da:a8:fb:
9b:a9:24:c3:c3:9a:92:26:f5:d6:74:41:ba:66:8e:
86:d2:33:9c:f5:ca:a9:fb:f4:d1:b8:eb:da:c8:0f:
85:54:7e:81:1b:21:df:46:0a:04:b9:90:de:5a:d0:
c6:bf:eb:41:ea:86:a4:9f:c4:f8:7a:93:13:85:bc:
30:18:66:3d:96:4a:03:b3:18:19:77:d9:79:b4:47:
85:12:38:55:92:de:77:90:48:65:be:76:4d:26:19:
70:a6:01:85:0e:3d:e6:2a:55:38:bc:f8:d4:10:51:
4c:8b:76:a1:21:89:6c:2f:4d:15:42:a8:99:8e:e5:
42:e0:c5:01:c1:ce:d9:f3:ea:aa:a4:02:87:2d:87:
57:02:43:6a:2c:25:fa:b4:96:f6:e9:d7:4f:b3:a7:
11:52:12:0f:41:f5:56:b8:2e:43:f7:27:58:27:a8:
88:b1:0f:cd:4c:a5:0f:8c:65:b4:ca:90:71:ec:f3:
30:7f:a7:86:ea:48:4e:f8:6a:94:4e:92:12:d0:e2:
5d:21:18:e0:08:71:61:45:98:15:4c:d6:42:f8:cc:
51:02:70:f4:bd:8b:37:95:2e:06:8b:8f:30:16:ec:
da:79:00:79:6b:a1:b5:49:e9:f9:c5:5a:aa:d8:28:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:C9:7A:DF:37:5E:B9:B5:BB:B2:37:86:F5:B2:97:37:31:BF:92
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/BsLJet83Xrm1u7I3hvWylzcxv5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:28:b1:04:2a:b5:a4:21:df:06:75:16:e4:c3:f6:c3:b9:ec:
af:30:d7:c2:81:3a:cb:89:56:73:51:8e:f3:ce:cf:91:58:8f:
35:56:1d:bd:af:0f:98:e2:3b:a5:19:bd:c8:57:61:cc:f2:f1:
8c:0b:3c:b7:e5:bc:48:09:84:8e:22:4a:7f:4c:1e:30:69:8c:
c8:4a:da:99:9a:b3:59:20:31:8d:b3:ab:f3:18:f8:17:4b:45:
dd:ee:b5:91:53:40:bb:75:44:04:2c:be:d3:c5:b7:60:ab:bf:
00:bc:c1:13:5b:13:b9:28:b9:e9:ba:56:a3:cb:67:12:de:cf:
8f:8c:7c:8e:c9:cc:ff:41:21:e0:77:4a:db:0e:66:a3:86:b1:
59:dd:16:7c:6a:8e:58:77:98:9c:14:b5:fe:e1:48:75:8d:73:
a7:64:93:3c:75:e1:55:e5:4a:31:4b:bb:94:b9:49:f0:4e:2c:
04:cb:66:cc:d8:aa:4a:54:aa:1d:60:f0:2d:fc:23:f7:28:5c:
80:e1:d2:30:88:7d:e7:57:e8:de:9b:cd:30:0c:58:b0:1e:87:
b6:e3:aa:d4:6b:fc:7a:53:eb:87:6c:f2:22:6f:b1:df:b5:b8:
e6:59:ab:cb:e4:e0:d4:bb:de:6b:19:6b:db:5f:b3:d8:d6:a0:
1c:01:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:46 2024 by rpki-client on console-fra.rpki-client.org