Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bC-5-p0KrxHW98AK4A1tY-Zw-UE.roa
File: bC-5-p0KrxHW98AK4A1tY-Zw-UE.roa (raw, json)
Hash identifier: kQmHOjw5bSySys43ilOtnEoO4X2VADOmf51GUQ1vZAw=
Subject key identifier: 6C:2F:B9:FA:9D:0A:AF:11:D6:F7:C0:0A:E0:0D:6D:63:E6:70:F9:41
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CEE395217FF04E8B704B16E96FC600537
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bC-5-p0KrxHW98AK4A1tY-Zw-UE.roa
Signing time: Tue 09 Jan 2024 12:36:23 +0000
ROA not before: Tue 09 Jan 2024 12:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62163
IP address blocks: 193.56.239.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 16:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:39:52:17:ff:04:e8:b7:04:b1:6e:96:fc:60:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 9 12:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2fb9fa9d0aaf11d6f7c00ae00d6d63e670f941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:51:56:bb:93:e4:15:6e:b4:8a:50:b1:8d:
17:30:5a:15:17:1f:c4:e7:47:c4:cd:78:a7:43:f1:
58:33:02:58:ff:5c:77:0b:02:b3:e5:5d:67:71:50:
f0:1e:e7:7c:00:57:f9:92:7c:2c:58:17:7f:6d:88:
6b:d9:22:71:74:d7:3a:39:37:cd:d9:7b:06:0e:58:
ae:32:bc:27:9d:d8:e4:5c:c2:c5:c7:16:40:74:41:
51:a7:b6:03:e3:ca:fc:38:fd:75:60:d8:fb:fd:45:
ea:37:f9:5f:13:79:74:e3:bf:52:f6:1f:e6:75:3d:
5a:0d:b8:2d:41:09:1a:9b:a3:fb:84:45:d5:fd:ea:
2e:7c:e9:2d:86:d5:52:b1:45:bc:a0:c5:ec:2d:14:
db:a9:bf:df:a7:b5:62:5d:23:a9:0e:35:8d:a6:6d:
39:c9:33:af:bf:b9:36:8f:70:e5:af:8b:b1:bd:58:
c7:70:57:27:7c:f2:34:60:bd:58:40:75:df:9b:ee:
3d:42:d5:cd:9e:83:30:4f:0d:6a:31:b3:7c:4b:be:
a8:cd:65:f8:30:58:95:5a:9c:d5:22:c5:c3:1b:0c:
49:28:d7:84:2c:6f:1e:04:8d:9e:f1:e8:c5:b0:2e:
16:f6:cd:61:db:cf:8c:6e:8d:e4:6c:c1:ee:8e:58:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:B9:FA:9D:0A:AF:11:D6:F7:C0:0A:E0:0D:6D:63:E6:70:F9:41
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bC-5-p0KrxHW98AK4A1tY-Zw-UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.217.0/24
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
40:20:d2:41:87:35:52:10:17:84:62:be:46:a3:f0:82:23:18:
07:a3:ae:1c:84:02:e0:4f:ee:0f:ca:3f:6e:be:7a:d2:a5:c6:
27:57:40:99:94:fc:41:21:a1:ea:bb:57:e7:88:a0:f4:62:19:
23:49:36:49:67:7f:41:4f:07:78:10:d6:38:91:ac:94:1b:b3:
af:77:6f:84:c3:be:50:45:46:64:ac:24:e1:f6:8f:fa:12:89:
88:dd:8a:49:5c:b3:3f:0f:84:a8:06:3c:20:c6:8d:91:a2:a1:
68:fb:b9:84:0c:3a:8e:21:5c:03:fe:81:af:04:ee:a1:43:d7:
74:81:8d:aa:2f:16:da:bb:54:bc:54:8b:fe:58:3c:33:23:e8:
df:aa:94:bc:c7:65:ef:ee:25:0a:bf:6d:3a:ac:81:30:c0:ce:
34:3e:e9:2d:97:7f:e0:2e:34:86:6b:c2:1b:76:60:59:c2:f2:
27:10:1d:c8:2c:91:35:30:85:76:aa:c2:38:b7:6f:96:e3:03:
3d:43:17:d3:f4:eb:b3:71:22:c1:b9:48:b6:57:08:c9:dc:26:
db:9a:43:e0:1e:f2:88:b9:1f:10:67:62:d6:3e:21:3a:c7:fd:
0f:83:f4:6b:7d:d3:85:8f:b3:9a:38:e3:71:a7:ed:24:23:01:
38:66:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org