Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/B4uBvs7MZ9y4Km_62cHpbuRGPCQ.roa
File: B4uBvs7MZ9y4Km_62cHpbuRGPCQ.roa (raw, json)
Hash identifier: t1IAummDFeM5odbp5bsi38mSQyn+ARrENEVHRyZuGsk=
Subject key identifier: 07:8B:81:BE:CE:CC:67:DC:B8:2A:6F:FA:D9:C1:E9:6E:E4:46:3C:24
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 0187F69CD2B3EBB0300754521757815549C6
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/B4uBvs7MZ9y4Km_62cHpbuRGPCQ.roa
Signing time: Sun 07 May 2023 14:28:05 +0000
ROA not before: Sun 07 May 2023 14:28:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 132.74.0.0/16 maxlen: 16
132.75.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:9c:d2:b3:eb:b0:30:07:54:52:17:57:81:55:49:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: May 7 14:28:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078b81bececc67dcb82a6ffad9c1e96ee4463c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:da:d7:0b:6e:fd:9c:a7:b0:b2:4f:d3:93:
d4:44:1f:84:ff:0d:9b:e2:ba:e8:dc:d4:c7:7c:a1:
b5:1b:36:f0:1d:7c:fd:c4:88:c7:56:11:80:f4:d3:
00:2f:87:45:b3:6b:ec:14:47:78:85:8c:b9:f9:69:
c5:60:f4:34:8a:44:3a:d7:e5:8d:38:26:64:03:b6:
36:9c:70:51:3e:3d:fd:68:54:a4:a2:00:3c:e3:98:
02:06:6d:49:16:0b:c7:34:70:ee:e7:e5:12:d6:a7:
90:b8:69:0c:f4:d8:f8:4c:59:62:27:71:5a:05:58:
ae:55:c6:ce:9a:33:01:ae:cc:6c:03:01:d4:14:57:
30:df:60:31:34:86:72:35:9c:5f:6a:42:5b:81:1a:
96:60:64:93:dd:ca:20:82:7b:53:3d:d0:f0:08:8c:
42:33:32:7d:bf:6e:c0:4d:4b:d5:1a:f3:b7:a4:0e:
5b:9e:97:fd:a0:4d:30:79:f9:97:17:99:79:4d:e4:
bc:ce:23:54:54:54:56:a4:38:55:a5:ec:b9:83:38:
4a:eb:45:f4:ff:a7:60:54:79:b9:4a:cb:c9:d4:21:
9d:f2:4a:c4:88:16:c7:0c:95:83:a5:d8:29:66:34:
ec:34:52:e7:14:9b:55:8d:91:6d:16:6e:04:1a:5e:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8B:81:BE:CE:CC:67:DC:B8:2A:6F:FA:D9:C1:E9:6E:E4:46:3C:24
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/B4uBvs7MZ9y4Km_62cHpbuRGPCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2e:c0:60:3a:f9:e0:96:04:e4:ee:19:eb:06:43:93:b0:1f:ca:
5c:1d:5d:f8:56:1f:37:9b:14:80:7d:f7:14:b9:2e:a4:73:f9:
0d:4f:0c:14:47:fa:63:55:d3:b3:9f:4a:b4:61:24:d3:2e:c5:
38:e3:50:4c:82:de:a7:6e:1c:29:99:dd:16:49:ae:ed:06:90:
48:28:ee:54:d2:f9:4f:1f:aa:b7:55:84:65:e0:35:01:9c:29:
f3:63:7d:82:18:77:b7:57:14:84:33:cf:1d:28:a2:5d:b1:88:
bc:46:4e:17:63:b0:38:c2:b9:96:f2:0f:72:50:9d:65:1b:b2:
7d:fd:5a:fe:6d:89:cf:ab:4c:60:cb:cb:a0:4a:2f:15:24:1e:
03:2a:5b:4c:12:fc:82:33:aa:13:73:96:bd:6c:05:15:8c:76:
b8:a5:55:31:8e:da:f3:6e:b2:2b:fa:a8:97:2d:8f:9d:ad:4a:
96:c3:5b:ec:31:a8:d9:d6:b4:3d:9a:f7:05:96:66:f3:88:00:
fa:94:36:b9:e5:fd:1f:ad:d5:d7:3e:4f:8e:f6:f8:33:3a:35:
c0:58:42:98:8f:67:67:53:73:84:12:4b:fb:e5:d7:fa:31:65:
78:2c:88:11:01:71:61:87:ac:cb:2a:e4:12:2b:71:cb:27:6e:
9e:68:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:35 2024 by rpki-client on console-fra.rpki-client.org