Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Bvd6kx_1iu8FEpqkjscgouZgzus.roa
File: Bvd6kx_1iu8FEpqkjscgouZgzus.roa (raw, json)
Hash identifier: L7WrfBzJr1TWeTC00zB7qgLcpbbCpbBUryTYJ/bj8jM=
Subject key identifier: 06:F7:7A:93:1F:F5:8A:EF:05:12:9A:A4:8E:C7:20:A2:E6:60:CE:EB
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018571556CD939CCC688FA357741F7DC7300
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Bvd6kx_1iu8FEpqkjscgouZgzus.roa
Signing time: Mon 02 Jan 2023 07:15:01 +0000
ROA not before: Mon 02 Jan 2023 07:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 158.46.179.0/24 maxlen: 24
158.46.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:6c:d9:39:cc:c6:88:fa:35:77:41:f7:dc:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 07:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f77a931ff58aef05129aa48ec720a2e660ceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:85:76:34:22:0f:68:43:26:91:e1:9e:bf:
71:ec:90:7c:77:ec:a9:39:e9:58:b0:b6:3a:b7:ab:
ef:47:54:7b:5a:c1:7b:38:39:72:58:5d:40:58:c5:
68:09:34:2c:7a:85:0d:3e:8a:34:52:a5:cb:7f:0b:
dd:27:17:77:49:00:15:bf:7c:ec:f1:f1:0e:97:20:
9e:2c:5a:f2:b2:35:a7:20:29:cd:9d:88:72:6e:15:
e2:f6:20:9d:8f:73:6a:31:f7:5e:c0:cd:8d:71:fd:
b9:f0:a7:20:22:f2:ad:de:aa:bc:e1:5d:97:94:52:
9a:a6:38:42:e6:20:b0:1a:80:28:9a:f4:67:55:4d:
5c:53:4f:5c:05:e7:24:9c:02:95:be:b3:9b:93:20:
9d:8b:5a:e0:fa:d2:fa:57:5c:da:65:13:1d:ac:95:
c7:9b:fe:74:75:1e:84:32:09:f9:7a:0d:11:c6:d4:
1b:41:c1:40:6a:86:89:a0:4b:56:3d:65:9c:4d:a1:
56:eb:eb:de:85:d8:dc:94:40:30:51:68:85:a5:7d:
4a:2f:12:24:6f:b9:5b:03:d1:31:75:94:56:b7:41:
1c:5e:3a:9e:9f:cd:71:1c:73:76:56:71:7f:14:9c:
ae:1b:a5:87:0b:ca:6c:31:13:31:a6:f7:08:3c:d6:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:7A:93:1F:F5:8A:EF:05:12:9A:A4:8E:C7:20:A2:E6:60:CE:EB
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Bvd6kx_1iu8FEpqkjscgouZgzus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.178.0/23
Signature Algorithm: sha256WithRSAEncryption
68:4f:7b:ce:a8:63:a0:98:27:76:9f:fd:52:1d:a0:5f:36:04:
33:22:1f:4b:f1:8b:8a:ee:cb:8a:7c:7c:4b:30:23:07:55:cf:
37:7b:e2:0a:35:ea:03:42:dd:21:3e:65:46:98:74:89:ca:59:
5b:af:7d:a2:31:6d:e1:0e:29:dc:8b:61:b5:e9:fe:71:ab:0e:
51:c4:44:d5:f3:15:e6:e5:36:2c:ec:f7:ce:4d:f5:22:91:a7:
16:d2:d4:09:2e:7a:30:82:f2:ec:24:39:7c:9c:a8:64:b0:a2:
d2:81:0b:36:ae:48:82:15:cb:89:65:49:14:25:4f:65:e9:4c:
37:11:2e:12:87:4f:54:06:35:fc:3f:6e:6f:df:76:c2:f3:f9:
4a:ba:bb:4e:78:5a:e8:f4:f4:b5:76:6e:d6:42:7f:3c:74:69:
c5:cd:0a:d8:d5:e7:f4:79:34:ce:5b:a5:27:dd:b9:25:f1:4e:
44:18:01:ef:c4:e5:bc:91:0f:89:4e:f9:9a:1c:2c:0e:4e:51:
42:40:2d:a2:c1:5e:90:00:46:a9:53:ad:53:55:aa:d8:d6:73:
64:e8:66:3e:f2:81:1f:9a:b8:75:f3:d6:cf:3f:e5:cb:64:16:
9e:47:81:4e:a4:76:46:cb:24:52:51:93:a5:ba:d4:b5:0b:0f:
85:ca:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:37 2024 by rpki-client on console-fra.rpki-client.org