Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/bOTXN_T2t3SYj5iKkNiCjZF73cU.roa
File: bOTXN_T2t3SYj5iKkNiCjZF73cU.roa (raw, json)
Hash identifier: qShBjLcHp2kVEWJuSMQuugnvGeecCj/ZCUsvi2+1QCk=
Subject key identifier: 6C:E4:D7:37:F4:F6:B7:74:98:8F:98:8A:90:D8:82:8D:91:7B:DD:C5
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018CC492E6F5F25AD5DF3C2B6490EFB62194
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/bOTXN_T2t3SYj5iKkNiCjZF73cU.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.138.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e6:f5:f2:5a:d5:df:3c:2b:64:90:ef:b6:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ce4d737f4f6b774988f988a90d8828d917bddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:26:c6:cc:b6:bb:4b:c1:01:09:4e:f0:34:
65:fe:b2:51:63:07:59:24:97:1a:ff:3b:be:27:7c:
4f:bc:9b:6d:8b:2d:be:a3:80:5b:e1:31:63:db:b6:
9b:ec:8d:71:37:38:1e:c7:d5:53:c8:3b:77:3b:34:
c7:21:6c:ec:34:e9:fc:05:1e:86:e6:9d:7e:31:ef:
c8:0b:88:4f:fd:65:a1:03:fa:3a:08:35:88:8c:29:
0d:70:38:d9:53:0c:9b:a4:e0:17:2e:d6:6d:f0:4c:
24:fe:71:5b:b8:5d:b3:cf:33:85:ba:e5:b4:c1:23:
f6:6a:71:3b:50:b3:b5:85:71:e5:28:6f:4e:85:b4:
6a:b3:e5:93:11:b0:cf:90:72:49:a2:5d:e0:31:c0:
b1:e6:cb:9a:7b:1d:f2:9c:45:a1:3a:ce:f3:af:04:
1b:ab:1d:6d:eb:35:30:80:da:d2:96:05:35:5e:50:
a4:45:74:ef:36:bd:ba:7b:6f:ea:f5:c4:bc:17:e6:
5b:b0:3c:a6:fb:1d:e7:3b:6e:b4:e6:63:50:c6:50:
cb:7f:7b:2c:43:32:7c:df:e6:d6:92:53:ad:0a:1f:
d8:1d:85:be:14:d4:d8:a3:53:68:7e:11:39:db:fe:
eb:38:80:c4:62:7b:19:38:91:db:0d:a2:14:7d:51:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:D7:37:F4:F6:B7:74:98:8F:98:8A:90:D8:82:8D:91:7B:DD:C5
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/bOTXN_T2t3SYj5iKkNiCjZF73cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
22:69:52:e4:3c:3a:24:bd:95:80:dd:d0:ea:fd:4d:d7:b3:e5:
c4:c3:2a:5d:1f:9a:3c:f9:b1:96:33:ac:a6:17:63:87:01:94:
b1:87:55:de:4e:22:e8:3c:90:f6:12:35:72:53:94:34:f5:78:
b5:98:a5:15:40:18:ee:fc:7a:ec:de:c6:f4:e9:af:aa:db:73:
8b:f3:9d:26:f5:59:08:56:48:cc:bb:c2:fd:d7:2c:f0:46:5f:
5b:b8:83:8a:28:0d:a7:e3:fa:43:2f:b1:38:03:50:65:36:9f:
5c:62:0d:6c:9f:46:46:e2:d3:48:df:db:99:e3:c0:4e:9d:03:
c1:e1:2b:34:0f:ca:31:f1:4e:45:1e:80:6f:83:1e:fa:a1:d5:
e5:9d:0f:1e:88:a5:54:f3:f4:4f:c9:1a:41:ca:92:f4:2e:bb:
61:42:46:af:3c:92:a0:46:09:84:50:7c:b7:aa:9f:f3:9b:d0:
22:f1:50:ec:df:2e:99:cd:16:f5:d7:ae:c4:fa:11:d3:62:b8:
10:f1:cb:5c:27:ac:05:f5:4f:c7:35:9c:a8:96:e0:55:da:f3:
a2:57:c1:93:1c:98:b9:d0:01:57:d5:6c:6e:e6:7d:69:d9:2a:
2b:bb:27:d5:b5:e1:bb:28:14:04:b2:d9:af:44:0b:f5:1a:b5:
77:f2:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 16:51:20 2024 by rpki-client on console-ams.rpki-client.org