Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/3baVAI5orc_lRBCfEejhwRKzulU.roa
File: 3baVAI5orc_lRBCfEejhwRKzulU.roa (raw, json)
Hash identifier: bEKt0YvCVMF4iCNZWBVawmYO8geF826UB/l5TUgHmpc=
Subject key identifier: DD:B6:95:00:8E:68:AD:CF:E5:44:10:9F:11:E8:E1:C1:12:B3:BA:55
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 018570428D2BC0D44C3C6587CB795070F5BD
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/3baVAI5orc_lRBCfEejhwRKzulU.roa
Signing time: Mon 02 Jan 2023 02:14:47 +0000
ROA not before: Mon 02 Jan 2023 02:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43754
IP address blocks: 185.128.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:8d:2b:c0:d4:4c:3c:65:87:cb:79:50:70:f5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 2 02:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddb695008e68adcfe544109f11e8e1c112b3ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:c2:da:d8:ac:f6:18:b7:7e:f6:85:e7:40:
c7:30:b0:88:6a:86:d4:47:63:9d:e0:0f:fc:a3:66:
5a:da:01:84:28:1e:94:a8:d3:a2:e3:d8:94:b5:07:
d8:14:d3:41:d8:5c:d0:0b:1a:32:35:03:43:bd:9c:
e4:cc:c2:f1:f0:61:2a:b6:48:dc:e2:21:2c:3e:38:
ed:2f:20:d2:25:89:ef:c0:37:5e:6e:cb:45:5e:f6:
ac:4d:d0:c4:5b:82:6a:cd:9f:18:ec:ff:f3:5e:44:
84:6b:45:b3:4d:60:dd:8d:c1:c9:5d:26:b3:09:58:
3d:93:22:6c:d4:21:cd:08:5a:52:3a:ee:6a:8e:77:
20:29:99:36:76:a0:59:74:86:c3:e9:2b:be:e6:87:
de:14:e1:15:33:62:e5:fe:82:6c:41:1f:40:cd:f3:
91:ff:8c:d4:ac:73:81:37:53:5f:54:6c:59:66:c7:
b6:5b:ab:45:40:5c:c7:fc:e8:a0:35:7a:ef:0b:39:
00:7b:bf:3c:33:f2:cf:ce:ce:98:f2:6b:69:01:e9:
01:6c:f5:0f:1f:06:45:fe:c0:73:ca:fb:a3:f6:10:
86:57:78:47:fc:21:21:2a:a3:93:f6:02:e7:5b:b4:
ec:40:22:0e:db:89:cb:0c:69:4b:29:20:4d:b0:8d:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:95:00:8E:68:AD:CF:E5:44:10:9F:11:E8:E1:C1:12:B3:BA:55
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/3baVAI5orc_lRBCfEejhwRKzulU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.167.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f8:62:9f:0e:4d:65:ab:a3:fa:fe:59:61:c4:23:0f:eb:6c:
12:23:7d:4d:22:00:2b:21:57:b3:fe:18:3d:7b:fc:a7:88:04:
1f:3e:f7:7d:04:77:73:2a:1c:4f:f2:ef:0f:c7:f6:6b:86:29:
c8:82:d1:c1:14:d0:8b:c0:03:87:07:04:71:7d:59:dc:cc:85:
0c:86:dc:48:10:a4:99:cc:0b:98:2c:01:94:a9:ba:9a:1c:2a:
6c:73:07:15:b1:9c:ba:a6:ef:33:7a:56:74:c6:b6:ac:97:0f:
b7:89:68:1f:44:00:ce:9c:9c:08:49:31:1d:7f:3e:35:71:15:
ad:1f:63:1e:91:64:f7:62:37:fe:09:f1:47:ad:53:9c:6b:25:
68:6b:2e:3f:75:a8:21:6e:63:bb:25:1d:7b:b0:55:ae:bd:da:
3f:c4:50:b7:f5:91:70:79:ce:72:7b:d2:9a:1d:f0:6b:b5:36:
50:33:95:46:6b:6d:2e:38:5f:ae:b6:57:91:27:fc:1a:31:08:
ff:94:ae:1c:55:4d:e3:9a:92:e5:eb:0c:cd:25:fc:c8:ef:95:
29:23:cc:cd:8b:a5:c4:19:37:56:f9:18:3c:2b:a0:92:25:d0:
66:f4:60:81:e0:a1:55:79:b3:eb:13:8c:4c:14:21:a3:23:50:
c4:29:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:28 2024 by rpki-client on console-ams.rpki-client.org