Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/bLUMdBr3tnkMXrIHfyRPkpT5s_s.roa
File: bLUMdBr3tnkMXrIHfyRPkpT5s_s.roa (raw, json)
Hash identifier: iVmQlj7M4P1UvySAIszlfadHqiN2+4WgqoQP/marFnM=
Subject key identifier: 6C:B5:0C:74:1A:F7:B6:79:0C:5E:B2:07:7F:24:4F:92:94:F9:B3:FB
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01856FCBBAC8B927977B1C0260BFDEAFDE9E
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/bLUMdBr3tnkMXrIHfyRPkpT5s_s.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 178.159.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 18:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ba:c8:b9:27:97:7b:1c:02:60:bf:de:af:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb50c741af7b6790c5eb2077f244f9294f9b3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:5a:ff:91:1b:aa:75:13:8d:be:ee:c1:44:
47:9e:f4:e8:af:5c:c1:bd:8a:27:8f:65:3e:1c:2d:
b0:91:dc:50:8f:71:e1:f5:4f:7e:77:87:5e:cf:a6:
5f:3f:83:6d:08:de:d2:a6:b9:59:c4:16:33:e5:55:
3d:68:db:fb:c4:7f:86:9a:72:82:61:65:23:9e:b4:
a6:08:cf:1c:86:44:09:c5:02:06:3a:a9:7a:a8:ab:
c2:4d:8a:b9:87:5b:45:02:2c:9e:ac:61:e8:65:69:
14:c6:62:b6:2e:c0:4d:cd:de:fd:74:88:f9:36:64:
96:b5:c2:63:e0:b0:3b:04:0d:d1:94:31:a2:bc:dc:
12:64:f6:22:3d:fa:04:22:08:ee:e8:b9:19:81:5a:
9e:8f:6e:98:67:4b:36:c2:05:be:26:d2:da:1f:71:
c9:5f:a7:1d:ca:68:71:11:15:84:72:a4:da:b5:4b:
67:d2:02:1b:90:b2:f7:99:7a:d1:f1:17:a9:5a:53:
84:62:88:34:03:d1:a3:b8:c8:d4:1d:31:07:cc:26:
c2:47:ee:88:d3:3a:80:bf:59:41:a0:85:74:63:18:
4c:26:d7:24:6d:97:88:38:39:15:e6:fd:bd:2c:36:
19:af:f2:22:d2:87:65:cb:1e:39:78:75:77:16:3a:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B5:0C:74:1A:F7:B6:79:0C:5E:B2:07:7F:24:4F:92:94:F9:B3:FB
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/bLUMdBr3tnkMXrIHfyRPkpT5s_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.100.0/24
Signature Algorithm: sha256WithRSAEncryption
43:36:52:b1:86:0d:67:b9:16:45:95:72:af:3e:c2:d6:67:02:
90:50:4a:01:d3:7d:b7:5b:4b:6b:63:66:bd:e5:43:34:1c:8f:
1b:f5:b1:22:4b:9f:34:ee:f7:5e:b8:be:37:3b:7f:19:3f:42:
46:cb:73:92:cc:f1:02:e3:a4:38:39:be:8e:f7:49:ff:2f:bc:
5d:ec:fe:d6:ee:c8:c3:85:c2:76:37:dd:51:15:8b:b4:57:2c:
c9:32:6d:99:35:d3:ac:dd:bb:9f:62:cd:43:be:9a:23:dc:fa:
9a:18:f0:bc:4d:f6:79:6a:4a:62:a6:a2:de:ec:c9:34:91:90:
8d:92:ed:f9:ed:4c:1d:93:6f:d0:d7:36:67:e3:0d:9e:b1:9d:
17:02:9b:6c:d6:0a:5c:a1:5f:1b:6d:10:54:29:f5:e0:25:a1:
17:86:11:72:1d:ad:cc:c8:3a:5c:53:16:18:ed:90:48:39:0b:
55:2e:87:d4:a5:b6:f6:88:af:c2:52:90:45:68:e4:9a:7f:91:
0d:07:1a:92:f9:37:bc:42:38:45:45:66:92:23:b6:5c:55:56:
8b:d5:83:a5:0d:5b:48:20:1e:57:93:ec:27:1c:be:79:94:aa:
24:62:95:85:5e:5f:56:e4:6e:01:c7:31:c4:39:63:21:00:69:
fd:d4:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:17 2024 by rpki-client on console-ams.rpki-client.org