Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/BpHcMr2jbAm1YsqnuBtTdFN50kU.roa
File: BpHcMr2jbAm1YsqnuBtTdFN50kU.roa (raw, json)
Hash identifier: muRRoaHlfiApBHgswE2dzHaH2dA1kVwcwKLQjfuIjAs=
Subject key identifier: 06:91:DC:32:BD:A3:6C:09:B5:62:CA:A7:B8:1B:53:74:53:79:D2:45
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7DFC0F5F0BB84F9C1876720259DC6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/BpHcMr2jbAm1YsqnuBtTdFN50kU.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205786
IP address blocks: 178.253.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:df:c0:f5:f0:bb:84:f9:c1:87:67:20:25:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0691dc32bda36c09b562caa7b81b53745379d245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:cc:93:0d:27:99:cb:5b:07:c5:79:63:31:
0c:60:e5:18:7f:c6:a2:7f:e3:9c:b9:0a:67:5b:d6:
3f:d8:4b:ca:ae:a7:fd:2b:4e:90:82:de:ae:87:16:
81:57:3e:d2:50:1e:4a:cc:1b:3b:85:45:54:cd:0b:
3b:03:8a:13:52:3d:c0:d9:a6:7c:48:be:ce:4e:b9:
c0:62:58:74:82:e4:d0:66:22:f1:9c:a2:c7:6b:24:
ca:56:7c:2d:9d:77:45:af:12:e7:3f:ac:5a:20:4b:
57:28:09:f1:db:48:f9:bf:21:09:d5:72:c0:a2:3e:
3b:a3:5a:08:0d:e5:e4:3d:10:1b:32:b2:68:d6:6c:
77:13:66:35:c7:6d:89:cc:ae:eb:8c:8f:73:11:d9:
2d:5f:d5:f4:00:d2:61:8d:29:32:36:ed:92:29:e1:
33:a4:30:ed:b3:ee:63:db:a3:72:b4:7e:0e:91:7d:
8d:b4:0c:42:0a:84:e9:03:d7:b0:91:3b:9c:3b:5a:
6e:41:5a:88:2b:4e:11:81:1a:ba:4e:d8:0c:01:26:
53:df:f5:b9:46:9d:da:41:4e:4f:fd:ce:4f:14:b5:
bc:58:09:e8:f1:04:65:a5:1d:ef:57:43:4a:0d:17:
51:ac:e3:f5:05:5d:b0:27:f3:ae:e0:78:48:b5:85:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:DC:32:BD:A3:6C:09:B5:62:CA:A7:B8:1B:53:74:53:79:D2:45
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/BpHcMr2jbAm1YsqnuBtTdFN50kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.247.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b2:dc:90:b4:92:c3:7b:2b:17:4b:09:5f:69:96:55:4f:7a:
b5:93:1f:61:07:1c:6b:22:98:6c:dd:e6:ac:b9:41:22:b3:e1:
9b:25:6c:6b:56:00:00:71:74:b6:2a:24:53:eb:6e:d9:89:a3:
72:0c:67:ff:25:93:61:e6:47:83:0f:b7:e7:94:e0:d8:ca:71:
73:57:d6:f5:68:e6:cc:63:5b:34:53:e3:36:17:e5:56:60:c2:
a9:ca:14:be:56:64:e3:49:12:ee:56:43:4f:b7:35:fd:79:25:
92:65:a6:63:31:54:bc:a2:3a:5c:35:e5:1a:93:d5:75:f6:ca:
e7:bb:43:12:96:7a:c1:b7:5c:95:19:df:66:0d:61:69:7e:02:
70:6a:94:77:36:cb:30:6f:d4:cb:6f:f2:48:63:22:70:49:3b:
7c:e3:08:70:ad:dd:b5:54:81:31:30:63:c9:28:58:7e:a9:4e:
85:b7:9f:15:df:bf:9e:2b:b6:5a:b6:48:db:8c:00:ce:9d:e8:
90:e3:0a:a9:3b:ea:63:b6:95:38:54:da:9f:52:b9:59:4a:81:
45:c1:30:35:0d:15:28:0f:f8:7c:5b:f5:61:8b:2d:4a:9e:af:
3d:96:47:b7:6c:3a:b2:62:84:41:17:cf:51:cf:43:93:68:89:
cd:45:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org