Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/0LyyVT_Gd0EF37WhfAalMVhKwBw.roa
File: 0LyyVT_Gd0EF37WhfAalMVhKwBw.roa (raw, json)
Hash identifier: y+k8OrBFBDZPXWW0i/Ayywav1Gcgw4vsswx2p3m2B8k=
Subject key identifier: D0:BC:B2:55:3F:C6:77:41:05:DF:B5:A1:7C:06:A5:31:58:4A:C0:1C
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E763AD4673946F4C0D44D5BEA64F3
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/0LyyVT_Gd0EF37WhfAalMVhKwBw.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34262
IP address blocks: 82.141.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:76:3a:d4:67:39:46:f4:c0:d4:4d:5b:ea:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0bcb2553fc6774105dfb5a17c06a531584ac01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:97:af:a9:5d:8b:7c:e8:cb:0d:dc:86:d3:d9:
88:e3:b8:4e:a6:a6:40:a6:9e:46:ca:98:5d:70:08:
5f:27:e1:aa:4d:e9:22:5e:fc:40:13:fc:4e:c4:a5:
00:67:2a:28:54:9e:3b:4b:98:29:c4:4d:0d:2d:a1:
9f:fc:d2:67:e0:7b:61:66:a1:36:6a:39:be:91:7e:
bd:39:ea:8d:9c:ab:e9:c7:08:a3:00:d7:4d:7a:fa:
47:02:e4:aa:e5:1d:f6:02:a6:97:17:2b:fa:67:2e:
e3:5a:3e:07:32:b1:0c:53:05:48:72:9f:11:c9:e9:
13:98:9c:06:63:10:33:7e:ac:f4:de:a8:4c:ce:bb:
44:1b:cc:90:11:a1:72:b1:d0:dd:cd:bd:c0:67:90:
47:d3:31:50:c8:6d:c4:10:f7:29:26:49:17:fe:4b:
20:bb:51:c7:d3:c0:f5:f9:05:73:99:a3:38:2b:37:
30:be:b0:06:59:fa:85:5e:1f:4d:05:06:c5:b8:78:
3b:a0:75:ab:a8:39:c9:ef:16:7e:bc:6b:98:78:ac:
1e:0e:79:cb:fd:7b:6c:ab:d9:31:1d:93:7f:e6:ac:
df:24:8d:b2:ca:43:58:5b:cd:0c:78:8e:8e:ac:8e:
fa:d2:24:1a:09:23:f3:1a:8d:0b:36:07:e5:7e:3f:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:B2:55:3F:C6:77:41:05:DF:B5:A1:7C:06:A5:31:58:4A:C0:1C
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/0LyyVT_Gd0EF37WhfAalMVhKwBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bc:a4:76:02:65:95:1d:ac:c1:05:03:64:e8:ed:ec:5f:1c:
1d:2a:36:78:d9:ce:94:31:6b:35:0d:0c:8d:01:28:55:18:7b:
91:5a:d7:e6:37:df:87:8d:25:fc:c6:a2:96:7c:40:1e:58:10:
55:8f:60:c0:99:2c:f5:a7:a8:3b:43:2a:68:70:61:38:04:59:
b8:d7:46:7a:3b:a9:3d:03:4c:d9:76:2d:29:49:d5:c5:a7:27:
a2:fd:0f:93:a7:b1:ae:bf:64:01:92:74:74:4f:fd:fb:97:6f:
d4:4c:7d:04:d2:cb:4d:79:a1:af:50:0c:98:23:88:8b:5a:9c:
f1:23:ad:54:8c:3d:55:e2:c9:0c:0c:00:5c:50:82:c0:be:90:
67:2b:fd:0e:6d:dc:10:de:8e:ad:3b:7c:c5:37:7e:9c:ac:ff:
4d:12:21:09:1b:ba:04:6c:99:15:ab:14:e3:cc:2a:99:a4:05:
7a:42:f2:2b:06:e6:25:4a:01:09:e4:ae:88:dc:67:92:51:81:
8a:f8:fb:0b:34:b1:2d:b7:b4:29:a3:24:4a:99:9f:63:c3:14:
8a:b4:ae:d8:4b:b7:88:81:80:4d:fa:35:72:0d:f1:69:a8:59:
85:51:f9:e8:77:18:bf:bf:ed:c1:59:dc:94:73:32:1a:40:93:
11:5a:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org