Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/BLEJ4D1jjmz0hTvhwCYZwDKiiCQ.roa
File: BLEJ4D1jjmz0hTvhwCYZwDKiiCQ.roa (raw, json)
Hash identifier: lGlDkdpXVpbX1MluHGmafJFFehq4Nsv70vaMOueaUlw=
Subject key identifier: 04:B1:09:E0:3D:63:8E:6C:F4:85:3B:E1:C0:26:19:C0:32:A2:88:24
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01856D9D02DD88F6F29118F991CDE80D3994
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/BLEJ4D1jjmz0hTvhwCYZwDKiiCQ.roa
Signing time: Sun 01 Jan 2023 13:54:44 +0000
ROA not before: Sun 01 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.56.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:02:dd:88:f6:f2:91:18:f9:91:cd:e8:0d:39:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jan 1 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b109e03d638e6cf4853be1c02619c032a28824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:1a:ba:b5:1e:c1:a7:ed:8b:6f:37:fc:44:
09:b8:85:f1:6c:a4:ec:20:4c:fb:58:0e:07:b2:db:
47:72:54:0d:56:d9:42:8e:ad:0b:ea:7e:94:10:be:
06:93:5e:66:ec:5b:98:c2:b1:cb:48:d8:db:30:d4:
81:67:4e:39:ac:9e:82:37:0c:30:8b:2a:81:e3:7a:
3c:cf:92:71:d5:43:3d:fa:5b:e5:1d:87:9b:c1:91:
36:70:15:0a:3a:ff:37:d0:bf:16:c5:df:cf:0c:e2:
a9:4c:75:0b:50:ab:c0:5c:3f:cb:26:60:58:3c:83:
72:03:08:7d:1a:63:68:77:ee:a8:ff:30:99:31:91:
52:17:5f:36:4d:98:6f:c6:ec:cc:f3:72:47:be:c4:
13:d8:45:ed:1f:d6:67:3b:15:44:3b:4e:9c:ae:b0:
48:f8:d0:7e:ed:89:5f:66:d4:30:78:0a:59:c4:09:
b0:57:17:b2:bd:4e:ff:0e:82:a5:b0:7a:a5:dc:a0:
a9:2e:8f:35:d5:27:91:28:bc:60:93:07:5e:a0:b4:
c5:15:88:16:aa:7f:4f:39:30:06:4a:20:06:f3:e8:
5a:5c:22:12:84:0d:5a:b9:85:50:a4:f9:06:35:9e:
8d:11:b6:08:91:25:c3:d7:7a:9b:49:ba:d3:3f:ab:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:09:E0:3D:63:8E:6C:F4:85:3B:E1:C0:26:19:C0:32:A2:88:24
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/BLEJ4D1jjmz0hTvhwCYZwDKiiCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.234.0/24
Signature Algorithm: sha256WithRSAEncryption
78:aa:1a:1a:e3:eb:bb:10:2c:86:bc:6b:8b:96:3c:ef:a8:c6:
58:4d:6f:2a:5f:2d:ba:aa:60:dc:c9:03:08:90:17:94:67:45:
ec:07:27:f5:29:b2:d5:16:a2:84:77:ea:2a:7a:d8:e0:be:d0:
84:5b:78:be:2a:ed:9a:22:8c:a9:cf:88:8c:ac:81:74:4d:61:
31:76:b5:33:91:1c:dd:8b:f5:62:ea:1c:71:c9:5c:23:e3:6f:
24:73:0d:d6:03:05:fe:7c:8a:1c:b4:40:aa:97:9e:32:69:47:
0d:90:4d:e9:72:bc:c5:ac:4e:a3:6a:d4:ef:db:dc:5b:bc:a7:
24:bd:fa:2b:ce:59:da:78:65:52:a4:90:d8:8b:6d:6e:35:ae:
bf:53:fd:f7:63:e7:6b:d8:78:63:48:16:ef:cf:61:4a:a7:a0:
22:1d:49:0d:5c:df:90:de:e5:6d:43:b1:e8:35:5d:f2:6e:ed:
f3:7f:dd:2a:3d:8b:ae:69:2d:ae:9c:18:8b:bf:8c:01:45:2d:
05:5c:d0:c7:08:00:52:34:7d:ff:89:3e:7b:9f:71:11:8d:8c:
16:7e:a7:ec:3c:fa:a6:c4:e6:29:3a:41:bb:84:b2:f3:7b:f3:
1b:82:03:a7:32:da:a9:39:8f:15:41:25:47:4a:5c:81:b7:3d:
25:87:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org