Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/B5LglF1bEve5YVXADRqNN2Xbf3E.roa
File: B5LglF1bEve5YVXADRqNN2Xbf3E.roa (raw, json)
Hash identifier: Wr6hKnHClTtfFOqCrwFxXhweFf0Vh+xx021GQhR4y7M=
Subject key identifier: 07:92:E0:94:5D:5B:12:F7:B9:61:55:C0:0D:1A:8D:37:65:DB:7F:71
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 018B70407D2AF88FC4470982E064CD2EB169
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/B5LglF1bEve5YVXADRqNN2Xbf3E.roa
Signing time: Fri 27 Oct 2023 08:29:16 +0000
ROA not before: Fri 27 Oct 2023 08:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198668
IP address blocks: 185.243.172.0/22 maxlen: 22
176.119.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:40:7d:2a:f8:8f:c4:47:09:82:e0:64:cd:2e:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Oct 27 08:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0792e0945d5b12f7b96155c00d1a8d3765db7f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:6b:4b:c3:07:10:07:90:1c:41:a4:ac:cc:
a1:77:35:33:07:dc:e9:6c:36:8b:22:ab:3f:f2:19:
5a:39:6e:db:39:25:20:4e:d1:49:7d:8e:a4:97:f9:
db:61:42:70:63:58:d6:29:4c:61:91:27:f5:39:95:
74:6e:2f:64:a0:88:b6:05:99:ac:38:60:a3:20:c9:
45:bf:d2:5e:28:85:79:b7:9b:24:77:62:51:2c:b8:
8d:77:88:9e:a4:8b:39:8f:d2:bf:7b:b9:6b:b4:e3:
29:98:3f:39:7c:8d:f5:18:b1:30:30:63:ff:96:d4:
cc:72:c9:26:77:2c:4c:66:e1:53:56:ca:58:aa:cb:
29:6a:c1:8a:65:68:52:f0:63:be:9f:24:6d:54:4c:
9b:ef:32:6e:d9:80:ee:79:59:c3:11:20:53:cc:83:
94:a1:c7:34:37:fe:3e:e7:30:1d:71:d6:50:9d:17:
de:63:a0:4c:97:f1:3d:ed:02:3a:55:01:ca:6d:a9:
53:38:c8:c5:99:ac:0a:d9:97:48:69:36:fc:bf:6a:
9b:01:4d:94:4a:24:6d:11:71:7e:bb:e3:cc:98:64:
9f:da:38:94:12:04:4d:42:84:bf:1c:8f:35:05:df:
37:81:f7:b6:8d:3d:df:8c:26:ba:c6:5b:af:55:46:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:E0:94:5D:5B:12:F7:B9:61:55:C0:0D:1A:8D:37:65:DB:7F:71
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/B5LglF1bEve5YVXADRqNN2Xbf3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.192.0/24
185.243.172.0/22
Signature Algorithm: sha256WithRSAEncryption
16:dc:ab:9e:77:bd:cf:ae:13:79:92:c3:0f:df:a1:7b:68:ea:
22:4f:56:56:51:bd:cf:47:a5:54:1e:96:1e:ce:db:44:ba:0a:
9f:bf:e5:4f:d7:70:bf:96:7e:4b:13:68:19:71:97:42:6c:f6:
7f:3f:cb:f9:cc:38:55:57:85:3c:07:65:c0:17:1d:56:17:f8:
75:8e:5c:56:61:f3:53:28:c2:93:2b:49:e5:2f:77:e7:f2:81:
7e:80:c7:27:c5:2f:36:9f:fe:63:3e:b3:90:9b:b7:45:4a:c8:
2c:bb:27:1c:37:33:52:03:57:18:c8:f1:fe:c3:06:e0:19:ac:
33:f6:ec:93:77:f3:1c:e1:9b:dd:70:1d:14:e7:c2:92:4b:a9:
69:a2:10:12:35:98:db:0a:2d:52:82:b9:24:51:70:04:91:2c:
6d:d9:bd:1a:9f:e4:b3:14:cd:54:a3:d5:47:09:b3:fa:09:cb:
b9:30:45:96:e1:67:dc:bc:9e:8a:bf:37:c3:1f:8e:a4:c6:83:
69:3c:82:02:82:a9:32:16:07:ad:4c:be:f4:ac:7f:71:a6:57:
31:fc:3f:89:44:75:40:ce:a6:e2:ae:d6:c1:c7:2e:24:85:a5:
90:4c:8e:5f:6e:bc:a6:69:d5:b8:bb:8c:f0:02:4b:65:85:5f:
64:93:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:44 2024 by rpki-client on console-ams.rpki-client.org