Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/B_FYllmRtrwPkv831G_q2WjtdPo.roa
File: B_FYllmRtrwPkv831G_q2WjtdPo.roa (raw, json)
Hash identifier: bchbbJ2lPiQ2ALMHYO34ACca0QXmhrry+ni3vlcTSNE=
Subject key identifier: 07:F1:58:96:59:91:B6:BC:0F:92:FF:37:D4:6F:EA:D9:68:ED:74:FA
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018AEF897DBC8EF3E32B68F9A627FA558A43
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/B_FYllmRtrwPkv831G_q2WjtdPo.roa
Signing time: Mon 02 Oct 2023 08:37:59 +0000
ROA not before: Mon 02 Oct 2023 08:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:89:7d:bc:8e:f3:e3:2b:68:f9:a6:27:fa:55:8a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Oct 2 08:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f158965991b6bc0f92ff37d46fead968ed74fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:4d:55:10:5f:83:12:61:86:c6:42:92:52:
d7:a4:7e:72:e9:27:44:a9:d1:34:c3:57:5f:02:ff:
fd:cc:58:eb:d4:b3:5e:60:5c:c2:2f:62:c5:ff:fe:
a1:14:17:7c:28:a0:52:f8:fe:dc:1e:c2:db:25:25:
3b:7b:da:2c:f7:06:52:02:11:02:0c:39:19:81:ce:
43:52:21:3a:e1:a6:c3:34:4f:be:ab:92:05:e7:bf:
cc:f8:72:8a:29:82:c3:cc:ae:85:71:bc:b7:0b:cf:
86:79:14:9a:bb:ba:24:89:94:bd:b1:87:f7:3e:77:
bc:3e:1d:84:5d:b1:53:2c:8b:5b:f4:8a:69:79:55:
75:5f:18:fc:f2:ad:71:02:15:a9:78:d5:95:2c:92:
e1:df:3b:cd:07:74:53:a5:de:87:e3:21:15:b3:b7:
a5:69:0b:fd:c3:5a:1a:8c:45:6a:b9:78:63:c0:39:
0a:5d:cb:ea:a8:d9:f5:54:fb:2a:10:53:ce:cc:06:
02:a0:79:86:55:aa:32:7d:1e:1a:b9:cc:40:f4:02:
ff:41:2c:12:1e:ac:8b:91:c3:aa:0b:6c:73:34:f3:
20:d8:38:33:de:d1:6c:c8:4b:96:a4:a4:cb:20:36:
6e:0c:59:51:8d:da:28:9d:0b:8b:a1:a1:f1:fa:e6:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F1:58:96:59:91:B6:BC:0F:92:FF:37:D4:6F:EA:D9:68:ED:74:FA
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/B_FYllmRtrwPkv831G_q2WjtdPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
34:79:1f:2b:c8:ef:c9:eb:29:c6:51:e4:8a:65:2f:63:0e:53:
ae:27:45:e3:b2:96:da:fe:82:3f:46:13:2b:9a:c2:85:b5:a3:
ef:4a:17:8c:26:12:0c:85:96:41:04:9b:87:79:13:68:07:59:
72:5e:0b:64:50:22:5e:7a:ba:9b:06:c3:d6:f4:d0:8a:cb:89:
77:ea:02:c3:88:6a:5b:20:5b:3e:65:71:fc:ed:d2:48:04:c8:
f6:06:e2:09:f3:52:5a:ae:3c:b2:e5:63:71:66:24:a5:ee:a0:
c9:19:8c:ad:10:fa:aa:09:6a:ed:90:b8:9c:25:ad:05:1c:97:
26:1c:86:8e:a0:21:94:5c:15:0e:cc:06:39:39:d9:a4:5e:0b:
26:57:ae:83:4c:aa:4c:f9:e6:01:44:d5:fa:da:8b:0a:14:40:
9e:10:98:70:56:10:4c:d5:71:17:98:4f:a4:3c:4f:3c:8e:01:
70:79:b3:e8:b0:a7:0d:ea:39:51:2d:44:b3:02:f7:b2:1b:63:
a0:bd:1a:68:9b:c7:ff:c1:b5:c0:41:7b:78:3f:2e:26:bd:c3:
8e:11:0e:f5:5a:b1:a1:43:0e:e0:0b:d3:fd:15:dc:62:64:47:
ca:30:84:65:01:72:40:42:92:04:79:d4:dd:68:93:2e:0f:d4:
47:1d:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org