Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Bxksqe7JEym1-TrgpwgdYr2zS8g.roa
File: Bxksqe7JEym1-TrgpwgdYr2zS8g.roa (raw, json)
Hash identifier: V5rVhuptHM0d71bTjW4HSKOHsMuPmH98240j89eVsCg=
Subject key identifier: 07:19:2C:A9:EE:C9:13:29:B5:F9:3A:E0:A7:08:1D:62:BD:B3:4B:C8
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A9950DD400575B165450088E8176FC3
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Bxksqe7JEym1-TrgpwgdYr2zS8g.roa
Signing time: Sat 25 Mar 2023 21:07:47 +0000
ROA not before: Sat 25 Mar 2023 21:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 194.53.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:99:50:dd:40:05:75:b1:65:45:00:88:e8:17:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 21:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07192ca9eec91329b5f93ae0a7081d62bdb34bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:43:a4:31:67:9f:13:3b:89:03:69:51:f3:
48:a3:8d:e4:68:98:46:5f:45:ab:7c:aa:8b:97:99:
44:13:1b:ea:ac:df:ad:3c:bb:11:6e:8d:d9:a7:23:
06:19:b6:3f:f8:49:4a:98:36:7d:5d:98:dd:c4:77:
0f:09:a1:02:4c:b7:e5:10:3f:63:35:f8:f8:6c:4c:
e7:5f:44:3a:b0:2f:28:ca:f7:66:c7:de:ee:3b:3b:
e8:0d:48:16:6c:c2:d8:40:59:80:78:24:b1:de:4b:
f4:a6:c2:df:18:8f:36:2a:01:04:45:45:89:93:55:
cf:a3:9e:a5:4f:21:fc:bf:41:19:11:0a:ff:91:fd:
1b:48:94:e4:31:2e:45:9c:b5:78:d7:4c:e5:06:7e:
6a:79:a7:9e:37:23:a4:39:d2:b6:d5:34:4a:d0:34:
c4:61:f8:ca:ed:10:a1:aa:90:dc:0a:4d:40:25:cd:
e8:a2:52:9b:6f:c1:98:42:cc:0b:92:81:2c:77:c8:
fc:69:2b:96:f4:05:7d:01:e2:ea:d1:05:41:19:60:
b9:6f:99:92:34:84:d6:f4:65:42:de:81:74:e9:07:
81:b6:81:77:83:ee:26:44:ef:da:ab:df:03:e2:8d:
de:8e:9e:92:fe:7f:6e:89:a1:7b:9b:f0:5d:e1:86:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:2C:A9:EE:C9:13:29:B5:F9:3A:E0:A7:08:1D:62:BD:B3:4B:C8
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Bxksqe7JEym1-TrgpwgdYr2zS8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
21:34:58:7d:2e:71:df:2b:1d:d2:64:49:4e:9a:72:98:b8:a2:
15:43:15:4f:6f:6a:4c:6b:c3:75:f7:ab:b8:ab:86:11:ac:38:
d6:ef:be:58:6a:5f:1d:9f:26:1d:19:ff:b4:4a:c6:d1:0c:29:
6b:0c:57:c0:d4:01:ed:a9:e7:e7:7f:61:86:33:c0:df:d5:84:
ba:3d:59:28:c2:2d:1e:58:4a:25:c3:4f:5c:a0:68:8c:3e:c1:
4b:69:6e:8d:99:61:25:06:57:ba:4a:30:04:3f:f6:51:cf:02:
cf:35:cd:44:10:ef:4b:9f:64:a1:a6:9f:bf:e1:c1:10:dc:d8:
ed:67:1f:95:3c:82:c1:84:a7:dd:f9:70:43:bc:2a:58:1a:b5:
c2:12:93:56:fb:d9:f7:2a:7b:54:f9:10:41:8e:5c:35:23:c0:
27:46:2c:76:df:c8:cc:3f:f0:aa:7a:52:d1:d7:cf:f5:29:64:
a4:f9:2c:ec:6d:ba:f1:84:92:4a:bf:b9:13:77:83:48:58:10:
da:f9:7f:f3:a3:44:4d:a6:84:4b:b9:b7:46:56:fd:28:9e:9e:
5b:ab:6e:11:22:8f:f2:27:ea:73:07:3d:46:ed:50:35:1c:ff:
97:61:16:df:47:9d:f3:5b:85:86:79:3d:cf:ab:4c:83:86:94:
c7:34:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org