Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/BT7oVk_ZKrRULd7B7IDo0aVrECw.roa
File: BT7oVk_ZKrRULd7B7IDo0aVrECw.roa (raw, json)
Hash identifier: tQU2VD3z49U1lYK+fkW+9vrsaGC9AshXIxVyfTN8j74=
Subject key identifier: 05:3E:E8:56:4F:D9:2A:B4:54:2D:DE:C1:EC:80:E8:D1:A5:6B:10:2C
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 0191E638D0991DD3656B716D0997FA15C1D3
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/BT7oVk_ZKrRULd7B7IDo0aVrECw.roa
Signing time: Thu 12 Sep 2024 12:32:48 +0000
ROA not before: Thu 12 Sep 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 185.246.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 26 Sep 2024 12:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:38:d0:99:1d:d3:65:6b:71:6d:09:97:fa:15:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Sep 12 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=053ee8564fd92ab4542ddec1ec80e8d1a56b102c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:73:94:67:c8:df:2f:41:70:dd:eb:3d:e0:
0d:b9:e6:e2:ec:6b:9c:14:eb:ae:21:7e:39:b9:8e:
48:77:bf:b8:e5:43:ca:97:6b:e7:45:9c:35:e1:0c:
71:8c:03:4c:78:10:62:32:fc:f6:0f:6b:67:49:82:
e3:77:e2:f7:b9:24:20:bd:ef:07:5b:09:aa:14:69:
0e:fb:c0:37:fd:f0:6f:fc:9d:71:53:13:c1:69:a6:
85:bf:f8:d6:6f:c2:5f:f5:99:4e:d9:a8:6f:8e:ce:
83:75:94:d0:20:4c:6e:d1:06:ed:b7:cf:12:bf:1d:
4a:20:4c:c0:6f:e6:8f:60:8c:be:61:41:51:1c:41:
00:f5:11:a0:25:53:8d:b9:57:bd:b1:66:3b:b5:eb:
63:0d:54:7f:27:f8:d8:1d:6a:1a:09:eb:56:fd:07:
f5:99:68:fb:ff:82:84:9d:0f:97:7b:1a:d9:fb:4c:
31:69:48:04:4b:78:2a:f8:37:40:2e:ba:c0:30:25:
df:d4:a3:32:15:e8:85:85:71:0e:31:42:ed:a3:4e:
d0:35:2e:20:3d:04:9b:b4:08:06:8a:54:d2:72:0e:
d6:51:98:e1:81:ee:d9:42:a7:0e:dc:a5:c9:dd:af:
1a:35:b2:b3:d3:af:45:a7:e2:39:3a:54:a1:48:24:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:E8:56:4F:D9:2A:B4:54:2D:DE:C1:EC:80:E8:D1:A5:6B:10:2C
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/BT7oVk_ZKrRULd7B7IDo0aVrECw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.80.0/22
Signature Algorithm: sha256WithRSAEncryption
58:bb:8c:a9:cb:b3:24:30:03:f8:02:90:06:c5:76:e4:07:6d:
3a:ce:6f:d6:b2:42:de:18:8d:f3:01:29:6d:6a:8a:03:d4:d2:
18:40:d9:f8:5f:be:a4:70:15:ee:3a:b0:3a:00:82:13:02:b6:
19:81:4a:78:07:df:eb:f4:d0:90:65:ef:73:29:7c:93:3a:7f:
b3:c1:33:e2:ae:b7:95:99:73:9a:aa:4c:33:bf:73:9a:dc:7f:
97:0b:1d:84:04:79:15:a3:84:93:bb:64:9a:48:89:ab:11:de:
e2:35:ee:e0:3b:43:84:f1:e0:91:ef:fc:14:c9:b2:2b:79:86:
2c:64:ba:11:02:72:d4:31:a9:8b:f7:8d:32:45:da:5b:a6:41:
dd:f9:e3:ea:6a:84:ab:bb:20:7b:4f:91:c0:64:7a:c3:83:a7:
89:47:3d:35:24:79:09:5b:80:0f:a2:81:03:7f:18:e3:1f:5d:
c0:11:c5:c6:14:c7:01:ac:33:f1:03:eb:bb:64:7f:e3:d8:ad:
27:d7:69:0c:24:af:85:1a:1f:47:29:24:c6:43:ad:5c:da:0d:
72:9d:ca:f3:fb:b7:47:bb:54:cd:73:cf:9c:f2:34:dd:66:50:
e6:27:b1:1d:2b:3f:dc:bd:88:a1:47:0e:9a:24:d9:4b:42:d1:
f7:3a:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org