Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/bumKUbUS9MVUcy7AH2r_uRSXUfc.roa
File: bumKUbUS9MVUcy7AH2r_uRSXUfc.roa (raw, json)
Hash identifier: c4iCn/0vy7+nm+ozDBBRPsOtuClRHp1eq22B6PX9qXA=
Subject key identifier: 6E:E9:8A:51:B5:12:F4:C5:54:73:2E:C0:1F:6A:FF:B9:14:97:51:F7
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018BF3C081AFC8396EC0C1E2C46695E0662F
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/bumKUbUS9MVUcy7AH2r_uRSXUfc.roa
Signing time: Tue 21 Nov 2023 21:19:21 +0000
ROA not before: Tue 21 Nov 2023 21:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202265
IP address blocks: 94.199.1.0/24 maxlen: 24
45.87.162.0/23 maxlen: 23
45.87.161.0/24 maxlen: 24
2a04:5b81:1fff::/48 maxlen: 48
2a04:5b80:53::/48 maxlen: 48
2a04:5b86:1::/48 maxlen: 48
2a04:5b81:1000::/40 maxlen: 40
2a04:5b87:1::/48 maxlen: 48
2a04:5b80:202::/48 maxlen: 48
2a04:5b84:1::/48 maxlen: 48
2a04:5b81:2010::/44 maxlen: 44
2a04:5b81:2060::/44 maxlen: 44
2a04:5b82::/44 maxlen: 44
2a04:5b82:8::/48 maxlen: 48
2a04:5b80::/48 maxlen: 48
2a04:5b80:200::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:c0:81:af:c8:39:6e:c0:c1:e2:c4:66:95:e0:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Nov 21 21:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ee98a51b512f4c554732ec01f6affb9149751f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:9d:e6:ba:8a:a6:30:f7:4b:69:00:4c:cf:
cd:62:11:a5:fa:64:3a:b0:61:12:c7:0f:ed:79:f0:
9c:03:87:f7:51:dc:e6:cb:d3:d8:f2:b6:a4:e5:28:
a4:b3:bd:30:c2:34:26:e3:66:c1:2a:52:f1:49:e9:
69:ae:5f:9c:51:2e:ea:ac:bb:50:2c:fb:d0:c4:57:
4f:b8:05:7a:25:94:42:a1:da:4b:e2:43:c1:9f:58:
3d:d5:85:f8:e1:ab:24:9e:a4:83:16:04:8a:e5:06:
6e:ec:2f:f0:83:a8:ff:95:c5:a4:d1:e1:9d:d2:47:
82:14:0e:9c:a4:f1:10:a8:fe:17:0b:2b:a6:cf:da:
17:87:09:ae:33:00:e0:52:85:9a:7a:87:ed:a8:93:
cb:a2:ea:e7:84:2b:a9:28:d3:53:dc:f5:52:3e:27:
37:07:a9:9a:1f:04:80:ab:e5:61:58:89:da:c8:73:
4d:e6:d4:ba:cd:a4:99:3a:b4:9d:7c:47:3b:d0:da:
fb:0c:33:9c:01:73:8c:e1:5f:48:39:66:af:ac:da:
b3:e6:ab:c7:5e:84:d7:6b:41:09:3b:b6:39:0d:b0:
60:b5:7f:1f:92:d6:12:4b:e8:98:3e:ec:3a:93:6e:
9d:13:a7:e8:19:84:af:c8:b0:f0:e6:e4:98:86:29:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:8A:51:B5:12:F4:C5:54:73:2E:C0:1F:6A:FF:B9:14:97:51:F7
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/bumKUbUS9MVUcy7AH2r_uRSXUfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0-45.87.163.255
94.199.1.0/24
IPv6:
2a04:5b80::/48
2a04:5b80:53::/48
2a04:5b80:200::/48
2a04:5b80:202::/48
2a04:5b81:1000::/40
2a04:5b81:1fff::/48
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b82::/44
2a04:5b84:1::/48
2a04:5b86:1::/48
2a04:5b87:1::/48
Signature Algorithm: sha256WithRSAEncryption
b8:60:6d:95:9c:1d:41:c2:e1:9f:e5:0b:37:8b:cc:ec:ed:d7:
37:d0:33:5d:a8:a4:79:9e:21:c3:0e:27:f4:74:1d:64:78:0c:
56:c7:81:28:05:af:e7:0f:a1:d6:d8:60:66:f1:e3:52:8f:f7:
7e:50:35:f3:5e:77:47:62:17:d3:c2:4c:11:85:82:6e:a2:fc:
ab:76:52:2e:9e:51:8a:c6:c7:8c:30:de:28:0f:71:01:ba:f2:
d1:a8:d3:fe:29:a7:29:57:3f:7b:c6:b0:a2:31:e9:be:e6:d4:
50:33:dd:5a:7c:1b:01:79:19:75:2e:8c:29:c0:75:39:f4:22:
9f:63:bf:04:9c:7c:23:9f:d1:2a:cb:9c:60:85:ca:06:2f:dc:
cb:76:76:02:31:12:26:b4:80:36:da:a7:3b:76:5f:9a:40:f6:
6d:ac:47:36:5d:72:ab:0b:d0:14:56:69:f2:05:09:fb:de:c8:
a3:11:74:92:bb:40:67:26:89:31:d6:af:56:a3:c0:6d:ae:3c:
bf:53:c0:dc:3b:ce:12:be:aa:5e:92:99:89:04:f3:ee:3c:a8:
ad:47:83:04:da:da:51:74:a5:2c:be:7e:c6:76:e2:f8:dc:7b:
d3:07:25:f8:81:05:38:98:70:26:52:b0:e9:d4:54:8c:23:4a:
da:62:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 15:30:37 2023 by rpki-client on console-fra.rpki-client.org