Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/bc6dWGqOBagq0Ms8tC6bKvesV3U.roa
File: bc6dWGqOBagq0Ms8tC6bKvesV3U.roa (raw, json)
Hash identifier: eYzz9g/gsKh49JEmQdXtQNQuMBwI+anKLl7LJfrCkAI=
Subject key identifier: 6D:CE:9D:58:6A:8E:05:A8:2A:D0:CB:3C:B4:2E:9B:2A:F7:AC:57:75
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01856F94D2E25256D0F4E83B2C683B601E58
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/bc6dWGqOBagq0Ms8tC6bKvesV3U.roa
Signing time: Sun 01 Jan 2023 23:05:02 +0000
ROA not before: Sun 01 Jan 2023 23:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203499
IP address blocks: 2.59.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d2:e2:52:56:d0:f4:e8:3b:2c:68:3b:60:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dce9d586a8e05a82ad0cb3cb42e9b2af7ac5775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:a9:a0:fd:a4:2b:5e:13:af:a4:b4:32:f3:
29:e8:9f:9c:67:d7:2a:21:36:3b:e4:ee:55:88:1d:
c2:2d:ce:21:27:14:bf:f7:a1:68:93:31:6d:cf:af:
99:2e:a6:31:80:a6:29:59:d6:02:1a:4a:11:cc:bb:
4d:5c:74:80:fb:81:2a:79:c1:ea:56:3a:4e:f7:af:
7e:f5:ad:ba:7e:68:8e:b4:c7:22:19:77:30:78:27:
98:57:26:64:a2:8c:62:91:da:f6:ee:e6:0e:ab:86:
57:09:f8:13:5e:fe:9e:38:16:1d:3d:07:6e:80:c8:
1f:65:f2:22:8b:11:99:3a:a5:4e:e9:1f:0c:cd:09:
25:f6:f2:50:c9:af:b4:2a:a1:d1:a1:76:90:a9:fc:
9f:3e:04:9e:49:50:54:39:8d:0f:61:8d:b9:bd:3c:
ca:75:a4:ce:4e:a6:98:0b:c8:35:2c:72:fa:ed:34:
42:fc:5d:c0:a5:25:46:60:b9:35:8d:b5:81:9c:a0:
a8:c9:ab:05:71:29:13:ed:a0:c6:60:2c:df:40:8f:
0b:38:7b:7c:5d:cd:c8:ac:d8:8a:67:78:82:60:80:
ac:37:53:64:65:16:c6:a6:9a:d5:f8:5f:ea:d1:02:
06:fa:a3:40:16:39:04:47:86:19:e0:87:63:55:3d:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:9D:58:6A:8E:05:A8:2A:D0:CB:3C:B4:2E:9B:2A:F7:AC:57:75
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/bc6dWGqOBagq0Ms8tC6bKvesV3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:4a:9d:6b:bd:6a:17:04:e2:0c:fb:4e:c8:43:71:93:19:74:
6e:2a:00:d5:41:f9:b2:b1:55:fc:fc:1c:d9:99:55:05:ef:69:
f0:82:ca:c7:9a:1c:29:a6:29:20:8d:eb:35:84:e0:28:f7:23:
4c:be:5b:71:6d:d0:47:72:62:50:db:d5:bc:3d:a2:3b:68:11:
dd:6c:b7:d8:54:7a:bf:a9:5a:52:80:03:60:32:fc:6b:ed:52:
52:40:c7:df:ad:99:38:65:19:97:c4:43:78:4b:21:cc:0c:09:
08:a4:c4:a6:c9:e8:1b:08:ed:d9:87:2a:82:a9:2b:6d:a0:9c:
d4:7d:1c:60:e9:c3:eb:16:76:6a:f9:16:29:60:a6:87:f5:e8:
61:02:e0:eb:c5:4d:a8:6b:3d:76:15:d9:a3:92:b3:1b:52:24:
ee:25:a3:8e:49:2d:68:f0:bd:21:17:74:a4:55:ef:f8:ce:0c:
e5:04:63:6d:00:57:03:5c:68:f1:74:58:9e:ef:52:80:17:f5:
32:56:7b:da:3d:7d:7c:d8:30:86:2a:17:30:18:70:a9:cf:b8:
76:ce:8a:75:b7:24:3f:20:72:54:53:9f:1b:71:12:11:33:5f:
8e:5a:71:09:9e:c4:a5:61:4c:bd:a9:02:15:cf:a3:d8:38:45:
3b:2d:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org