Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/BvA5q-Vl2zYTYKUrZletILsD2I4.roa
File: BvA5q-Vl2zYTYKUrZletILsD2I4.roa (raw, json)
Hash identifier: xe6Ht65Ieyrda0dR5VHVI77Iiw9phd1M1O5vLGrb6hU=
Subject key identifier: 06:F0:39:AB:E5:65:DB:36:13:60:A5:2B:66:57:AD:20:BB:03:D8:8E
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 0185708CDCD31E3253E398317666F94E8887
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/BvA5q-Vl2zYTYKUrZletILsD2I4.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212727
IP address blocks: 164.153.132.0/24 maxlen: 24
164.153.134.0/24 maxlen: 24
164.153.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dc:d3:1e:32:53:e3:98:31:76:66:f9:4e:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f039abe565db361360a52b6657ad20bb03d88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:17:6a:a0:71:95:ae:63:66:2b:46:3e:94:
fe:4a:9e:10:4d:e6:04:2a:d1:3a:6c:30:c5:47:e9:
0a:2a:ad:c7:5f:0a:5b:95:f3:ad:3c:56:94:ce:53:
8a:de:85:3d:7f:09:14:58:fe:a7:a6:6a:ee:1e:8e:
72:96:6e:5b:88:b7:b3:eb:fd:54:92:9c:5a:e3:54:
f6:8a:f2:ff:ff:2b:69:91:7e:5e:4e:ed:52:e4:33:
57:01:3a:52:4b:70:75:65:c7:f2:f3:9f:b6:ca:58:
97:a6:28:c0:59:2d:fc:7d:37:56:f1:6d:4a:03:1d:
6f:f7:1b:9a:f2:0a:2c:b1:b7:04:38:f9:05:f3:52:
fb:b1:67:e6:e3:40:0a:f5:9a:49:37:38:a2:4e:e4:
e3:1d:29:3c:58:f7:7f:75:ac:ea:8f:fb:c5:ab:a2:
51:93:72:fa:09:be:9d:e9:57:27:3f:6b:45:12:5e:
d7:bf:e1:39:4a:88:c9:41:1c:c8:78:eb:15:16:0b:
c1:7d:53:01:9d:11:51:d3:50:d7:71:91:e4:85:58:
69:38:b1:ad:40:04:f3:d2:ff:d8:98:86:7b:ba:44:
8d:59:d0:69:a8:40:54:cd:75:53:08:fe:5b:bb:92:
ef:3a:a8:05:78:c9:06:30:0e:8e:68:4f:21:2f:bd:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:39:AB:E5:65:DB:36:13:60:A5:2B:66:57:AD:20:BB:03:D8:8E
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/BvA5q-Vl2zYTYKUrZletILsD2I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.153.132.0-164.153.134.255
Signature Algorithm: sha256WithRSAEncryption
86:7b:6d:d3:ad:59:16:93:32:cf:67:e0:bf:43:e6:2a:41:d8:
14:9a:a4:31:fc:a2:a6:98:07:49:64:63:9d:43:5e:17:15:b5:
84:88:1d:eb:3f:a7:f0:22:73:9e:dc:ae:88:c5:d6:ca:29:68:
96:14:7e:11:25:83:97:84:03:5f:93:12:99:60:bf:d6:97:bc:
54:f0:95:a8:51:1a:1a:47:a1:9a:3b:48:6c:93:70:c1:5d:3f:
9a:32:cf:e8:3c:d0:6f:d9:a3:74:8a:83:8e:ce:21:29:7c:e7:
8e:83:5f:4f:83:65:ab:33:dc:a8:5f:db:ad:c5:30:0f:08:23:
65:dd:db:c1:97:75:67:ae:16:57:2d:25:5f:a7:83:c9:e7:5f:
84:82:2b:2e:22:68:3a:cf:ba:16:32:07:10:69:61:99:ed:43:
20:9b:03:5f:15:38:42:fd:b1:36:20:ce:88:b0:00:f5:2a:3f:
b9:21:39:1e:1f:d8:e8:4f:8d:73:d3:59:1c:a8:f4:f5:e2:ac:
4c:12:84:46:c8:42:12:42:c4:14:4a:4d:47:06:24:2c:6f:f3:
aa:35:ae:51:e2:18:43:1b:92:76:82:0a:5e:8a:d6:36:23:85:
67:41:e2:26:7a:6c:36:93:e5:39:15:cb:6e:fd:3d:b5:f7:32:
04:46:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org