Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/BcZBSisW7LTrzTr9a7r9wcQtfKQ.roa
File: BcZBSisW7LTrzTr9a7r9wcQtfKQ.roa (raw, json)
Hash identifier: EOrINY7nJWnSyPMubtRUx4tN9jHc7VbPADx6iwT7qQk=
Subject key identifier: 05:C6:41:4A:2B:16:EC:B4:EB:CD:3A:FD:6B:BA:FD:C1:C4:2D:7C:A4
Certificate issuer: /CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Certificate serial: 018571152F72665A7CC8D85A096FFA4489B9
Authority key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/BcZBSisW7LTrzTr9a7r9wcQtfKQ.roa
Signing time: Mon 02 Jan 2023 06:04:51 +0000
ROA not before: Mon 02 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.118.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:2f:72:66:5a:7c:c8:d8:5a:09:6f:fa:44:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Validity
Not Before: Jan 2 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05c6414a2b16ecb4ebcd3afd6bbafdc1c42d7ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:4b:17:b3:21:ab:dc:c3:18:48:9d:a0:09:
5f:fc:02:a6:62:b2:11:37:da:48:04:38:93:a5:2e:
bd:b0:79:4b:62:0a:ab:f2:75:17:73:20:ed:2c:ef:
99:43:e5:e9:34:91:ad:5a:2d:d4:48:d6:1b:5f:36:
ad:0c:ce:0e:c6:74:b9:58:a3:ec:31:15:7c:2a:3a:
45:58:37:d4:f3:38:a9:83:8d:c7:81:c0:ac:af:32:
fc:95:01:24:87:a8:c3:f2:0a:3b:e8:35:cb:ae:1f:
34:1e:65:11:74:88:dd:77:03:49:f5:fe:5a:9c:ad:
9c:4d:3c:e6:b9:c4:e3:da:08:20:92:66:4d:0d:4e:
f8:b9:8d:ca:98:ca:4d:55:db:bc:ce:2f:50:20:80:
12:1b:57:a9:6b:67:44:6c:46:8f:09:f4:5a:d9:75:
97:2f:53:c8:65:87:e0:37:0f:28:3e:88:a2:ff:ee:
14:ad:ab:bd:b2:9a:af:a4:c8:05:70:87:4f:2d:1c:
0c:14:33:6e:d6:76:e9:a2:12:09:0e:12:b5:60:57:
f2:a5:c1:1a:01:68:21:68:24:49:c1:dc:f0:5f:ef:
f4:7a:ee:7a:dd:76:df:33:8b:8c:11:ce:ce:43:f0:
51:3f:ee:36:46:35:8e:97:df:69:b3:38:5e:a2:a9:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C6:41:4A:2B:16:EC:B4:EB:CD:3A:FD:6B:BA:FD:C1:C4:2D:7C:A4
X509v3 Authority Key Identifier:
keyid:3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/BcZBSisW7LTrzTr9a7r9wcQtfKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:67:f7:f6:ae:74:b4:72:10:51:42:b5:3e:cd:fb:82:81:22:
cd:b7:0f:70:b3:ae:c9:75:ea:67:8c:b1:cc:68:02:95:10:a1:
c3:97:18:04:35:bf:69:9f:d6:b1:6a:4d:06:9c:e3:fe:26:66:
18:75:82:7d:2e:08:85:98:2b:e2:17:02:0d:db:eb:45:1e:7f:
46:89:cc:a0:c7:bd:35:67:22:99:9e:b4:03:ae:3b:63:52:9b:
ec:30:87:1f:ae:97:aa:8b:cd:e8:47:de:2c:09:d3:c8:ef:80:
20:d9:9d:d0:cc:2d:38:0d:2b:6e:62:1c:a4:59:bf:ee:97:b8:
cf:5d:de:b1:07:78:11:23:06:a9:8a:b7:74:ac:59:c6:05:0b:
99:3f:b2:c0:76:93:6d:de:aa:f2:d2:a0:83:2d:e8:a0:1b:8f:
2d:f7:89:c6:50:28:a2:4b:00:6a:fa:25:6e:53:c3:02:70:28:
36:4f:33:32:6f:18:b7:d7:4b:c8:2e:c2:07:71:0f:c2:03:68:
39:e7:1d:fb:2a:37:98:42:25:d5:b9:e2:21:62:43:9c:53:ed:
db:61:99:a4:86:3a:9d:cc:50:db:c5:5a:1c:31:41:ae:1f:4c:
b2:65:56:17:d5:2c:b0:51:b1:4e:1b:4d:f7:99:98:ce:c8:40:
04:8b:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:23 2023 by rpki-client on console-ams.rpki-client.org