Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/K3EfppmLSvp6crcLjqPay9SKkSQ.roa
File: K3EfppmLSvp6crcLjqPay9SKkSQ.roa (raw, json)
Hash identifier: SK+nDOvXZTRssMwOAKjwjhz+2Gwt9kSdHQtR/Ixi0sQ=
Subject key identifier: 2B:71:1F:A6:99:8B:4A:FA:7A:72:B7:0B:8E:A3:DA:CB:D4:8A:91:24
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 01856F8B643C14EBB885637503C1D7BB6689
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/K3EfppmLSvp6crcLjqPay9SKkSQ.roa
Signing time: Sun 01 Jan 2023 22:54:44 +0000
ROA not before: Sun 01 Jan 2023 22:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39274
IP address blocks: 195.250.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:64:3c:14:eb:b8:85:63:75:03:c1:d7:bb:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Jan 1 22:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b711fa6998b4afa7a72b70b8ea3dacbd48a9124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:33:38:d4:d0:01:63:ba:73:26:d8:46:6a:
0e:80:67:63:0b:ca:92:1a:aa:f3:95:c9:5b:d2:c5:
eb:92:bf:0f:ca:55:aa:9b:26:95:f3:b1:bf:b9:1c:
75:a0:be:3e:26:3f:b4:7d:75:8b:c1:99:b6:51:81:
9c:7b:64:f3:a3:51:2f:40:56:ba:83:52:97:94:b0:
66:d1:8f:f4:ee:e7:df:06:79:9b:4c:a9:68:f4:16:
a0:ce:c7:3a:f4:96:f6:01:fb:d2:77:5b:2f:dc:18:
82:d3:1a:3a:08:d0:65:10:23:5b:01:63:14:6d:f9:
70:8b:43:9c:86:0f:bf:21:ad:d1:fc:4a:b1:3b:3a:
4e:21:88:04:cd:63:a7:f3:1c:c1:b0:bc:96:10:2c:
14:cc:98:20:78:60:e9:15:46:20:7f:c8:72:7a:76:
13:83:09:6f:27:eb:54:73:43:60:19:60:39:10:9b:
05:40:1a:f2:03:13:e1:d5:23:3f:b3:aa:dd:3d:40:
0a:54:e5:ee:22:6c:11:e5:e7:3f:ff:f3:a3:d2:b8:
ba:d3:2b:8a:0e:7e:52:c0:d1:8b:98:fd:8b:52:c9:
b5:2a:11:0f:6e:d8:f9:09:ab:1e:75:42:e6:3d:19:
14:ed:8d:4e:3e:17:a3:33:dd:a7:90:a3:f6:a2:93:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:1F:A6:99:8B:4A:FA:7A:72:B7:0B:8E:A3:DA:CB:D4:8A:91:24
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/K3EfppmLSvp6crcLjqPay9SKkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.33.0/24
Signature Algorithm: sha256WithRSAEncryption
85:53:6f:7e:c8:fb:96:32:4d:7c:b4:f8:f9:ce:16:c8:44:d2:
f9:b0:60:c5:9c:9c:28:23:e6:b4:90:29:0e:65:06:0b:b0:fb:
e8:27:43:28:60:2f:51:69:bc:92:44:62:f6:34:e3:36:f2:c6:
00:2c:b4:b1:2c:96:cb:07:6b:a4:17:3f:c3:19:c1:1d:74:cc:
69:99:37:4a:e6:5b:f0:14:4d:82:6d:1c:89:95:e3:57:2c:71:
48:bd:4c:e3:f5:f6:a3:79:50:6a:0a:ef:da:df:9a:ee:d6:c0:
df:fc:f7:22:cc:79:bf:58:6f:f3:f7:17:c7:47:1c:41:fa:f2:
e8:8f:cc:a5:96:16:1e:e0:7c:f7:49:e2:43:12:b6:a1:1e:7e:
00:f8:20:ee:76:6c:38:11:71:74:2f:de:24:7e:5f:2d:59:38:
55:a1:85:ba:13:08:51:d8:50:b3:5f:c5:f9:37:48:24:72:4b:
6e:02:74:89:16:1c:14:17:3e:ac:1c:5d:e8:c7:1a:fc:5e:3a:
4a:85:7d:02:3e:37:4d:65:62:98:d6:c2:aa:4f:6e:8d:1e:c4:
5b:0d:2f:b0:01:ad:1c:32:d7:83:d9:b0:7e:b9:3a:ae:31:a4:
73:6d:6c:29:c8:cb:16:00:70:5a:ef:33:e0:b5:16:d1:98:0e:
ab:3e:5d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:54 2024 by rpki-client on console-ams.rpki-client.org