Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/blfixUvP9_IejeNcahBKROlmkWA.roa
File: blfixUvP9_IejeNcahBKROlmkWA.roa (raw, json)
Hash identifier: NxRR+O1DcaojWcisG5XY/cGKkUUFl111GBweNEGwaP4=
Subject key identifier: 6E:57:E2:C5:4B:CF:F7:F2:1E:8D:E3:5C:6A:10:4A:44:E9:66:91:60
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0188011885FF4EE63A4EB7AB58F39A89F846
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/blfixUvP9_IejeNcahBKROlmkWA.roa
Signing time: Tue 09 May 2023 15:19:24 +0000
ROA not before: Tue 09 May 2023 15:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198627
IP address blocks: 185.184.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:18:85:ff:4e:e6:3a:4e:b7:ab:58:f3:9a:89:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: May 9 15:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e57e2c54bcff7f21e8de35c6a104a44e9669160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:b5:fc:7e:92:d0:c2:12:92:f6:1d:ce:1e:
84:31:93:9f:ed:15:5d:e1:ba:62:53:51:1c:a6:cb:
04:51:ea:59:4e:06:ae:05:1e:94:48:82:93:b9:9a:
2c:96:82:7c:1f:59:58:4d:ab:ef:d9:ce:ef:90:71:
e3:b2:58:b6:1b:f8:f1:1c:77:f4:2a:6f:c0:9c:60:
1a:c7:94:dc:3e:92:d4:f3:aa:27:5b:8d:91:92:fe:
72:ff:c4:9e:79:dd:70:f4:e9:b1:d0:b2:9e:39:5c:
98:4c:8e:84:c2:1d:5e:2b:e4:ad:96:0e:3a:28:d6:
68:9f:2d:26:0f:07:7e:ad:78:4c:30:d9:ac:5e:4f:
25:ef:5a:34:f3:e0:89:b0:84:e4:05:f7:66:e4:be:
f2:d0:1c:ac:26:67:2d:54:31:9d:e5:61:86:8b:11:
84:02:e0:ff:6e:e4:71:60:8b:97:7f:d8:40:49:93:
80:34:a5:5f:2a:80:54:88:08:8d:4b:82:f6:b0:8f:
9a:8c:d0:1d:fe:06:dd:2b:f9:c9:f0:e8:6c:ab:6c:
db:05:66:7f:12:d0:b4:09:ab:77:4e:ab:2f:e7:ec:
92:21:65:7e:d3:33:8c:05:e8:57:45:6d:19:b2:34:
b2:40:2b:c3:3e:02:6f:a3:3b:44:ea:79:56:46:af:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:57:E2:C5:4B:CF:F7:F2:1E:8D:E3:5C:6A:10:4A:44:E9:66:91:60
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/blfixUvP9_IejeNcahBKROlmkWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:be:a4:4c:f4:fa:ab:f3:b1:6c:34:6a:e4:c1:3a:24:67:4f:
ba:8a:ef:fc:b4:43:90:c5:26:cd:40:58:3c:4e:df:b3:ea:81:
b0:7c:b1:2c:a2:42:fe:17:e5:72:24:f7:05:83:ca:b3:7c:24:
6e:35:08:be:19:2a:b3:19:db:f5:51:08:fb:71:96:cf:36:9f:
19:dc:d5:d9:27:c2:41:3c:82:70:40:3d:dc:0d:92:dd:18:d5:
f0:72:b3:30:70:7c:79:70:8c:d4:fe:2f:aa:5b:0f:df:c3:66:
37:57:58:6d:21:40:25:1f:5a:f1:a5:69:cd:d8:99:05:9d:76:
92:8b:99:1f:ca:d0:96:68:69:70:5a:03:1b:0a:e4:07:0c:01:
0c:66:92:6e:10:1f:08:f9:2f:a5:cc:3d:9d:3d:25:7b:5f:b0:
df:66:88:97:cd:59:6d:d6:51:4e:8c:de:a8:61:ee:94:09:40:
fc:dc:a2:7e:c4:dd:61:41:70:82:34:55:6d:b7:76:8d:0a:24:
04:df:c4:b8:8b:c8:dd:09:8f:13:52:9d:77:54:21:42:db:95:
31:c2:ce:bc:32:3f:a3:6e:da:61:db:55:f4:c4:79:d7:8d:ef:
20:20:6f:ce:e8:84:65:b9:9e:b6:93:7b:09:19:e3:e7:16:b6:
6d:64:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org