Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/BOTZpjxSB-Oo-Yo53XlrqG85lZk.roa
File: BOTZpjxSB-Oo-Yo53XlrqG85lZk.roa (raw, json)
Hash identifier: j9pom2/EdGYIm8HsYuOUMthV0a5SYsWNa7UeF73aGeM=
Subject key identifier: 04:E4:D9:A6:3C:52:07:E3:A8:F9:8A:39:DD:79:6B:A8:6F:39:95:99
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F02394E71A6BA6B3A0DE77A7C0A5408
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/BOTZpjxSB-Oo-Yo53XlrqG85lZk.roa
Signing time: Sun 01 Jan 2023 20:24:54 +0000
ROA not before: Sun 01 Jan 2023 20:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21016
IP address blocks: 185.176.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:39:4e:71:a6:ba:6b:3a:0d:e7:7a:7c:0a:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04e4d9a63c5207e3a8f98a39dd796ba86f399599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:20:a2:1f:47:9d:ae:0a:f2:0d:f4:f7:26:
4d:52:b2:9d:70:95:88:14:3f:69:10:17:ba:1e:c8:
34:56:a5:af:8a:ca:b2:64:2e:53:4f:53:17:d7:c4:
53:10:57:8e:73:8a:9c:11:57:5a:d7:8f:c9:82:6c:
c9:d6:ca:a4:e2:d3:ed:28:87:2d:15:25:65:5d:c3:
11:8a:d8:69:49:6d:f4:27:98:63:4c:c5:ee:60:9e:
38:50:53:20:38:1f:eb:91:35:d5:6b:3d:79:06:7f:
ef:7b:6c:4e:61:f1:ac:01:eb:aa:ff:f8:0f:25:91:
b4:30:3e:e9:8d:a8:1b:8c:29:5f:76:b9:af:12:e8:
1d:5e:00:30:76:56:f7:2d:84:fc:0d:33:83:8f:f8:
11:9d:fc:1d:7a:37:19:25:e3:65:b5:12:83:fd:ce:
e5:6c:06:7a:fd:0a:6f:38:ac:b5:70:d7:5b:f7:aa:
69:95:22:1c:2e:f7:85:03:f3:2e:5b:1e:bb:e9:d8:
16:ae:8c:24:57:35:8e:d9:71:68:18:1a:74:82:54:
8b:b3:09:10:8e:cb:d2:c9:94:ae:7a:e4:e4:16:29:
44:7c:7a:69:8f:b4:f2:84:cf:1a:86:c9:88:ae:d4:
1a:e4:31:30:c0:59:11:19:16:6f:17:75:94:7c:e0:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:D9:A6:3C:52:07:E3:A8:F9:8A:39:DD:79:6B:A8:6F:39:95:99
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/BOTZpjxSB-Oo-Yo53XlrqG85lZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8f:23:56:e4:14:62:3e:63:06:e0:8e:f4:c6:c1:cb:6c:13:
f1:0b:ad:aa:0c:17:e1:3f:63:d0:d6:6a:c1:5b:83:7b:dc:e9:
cd:45:fd:85:16:44:92:a9:8d:17:5c:74:5b:1d:94:6f:49:fc:
99:a4:36:db:c2:14:27:ad:4b:f6:ef:65:1d:ed:bd:f0:d0:54:
43:99:f9:b9:00:e5:a4:81:54:dd:b8:1a:30:1e:da:3d:79:69:
63:72:73:d2:88:98:9e:03:ee:65:92:ee:97:6b:6f:7d:25:36:
c7:a2:7b:9b:ff:30:04:75:25:e0:9f:40:bc:c3:f0:e6:b7:c0:
5c:fe:c4:df:62:3d:b6:40:58:3b:0b:e2:34:11:00:56:c4:db:
8e:fd:f5:1c:14:e8:c3:53:b5:be:1b:3f:08:bb:36:74:47:1e:
e5:90:a4:35:2f:ec:6e:da:b5:c4:fb:42:91:01:c4:d6:5e:ae:
a7:66:b4:1e:03:35:58:58:6b:53:ce:fc:b3:da:d2:25:96:6f:
94:ff:c9:b0:6d:2a:ad:0b:ff:be:3f:58:34:14:6f:82:68:7a:
7d:3a:30:b7:0d:79:3a:30:33:ae:a6:b6:0c:bb:76:f9:d6:0e:
29:d8:c9:72:d5:65:d2:c6:a2:b4:51:a3:13:21:d4:1b:05:d8:
7b:ee:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org