Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/BQbYiJx6byHJheZvQP4mVz8aI44.roa
File: BQbYiJx6byHJheZvQP4mVz8aI44.roa (raw, json)
Hash identifier: n/byW4F3QFHCNwOMitsbl4zNN5Itib8w1K4GxrZappM=
Subject key identifier: 05:06:D8:88:9C:7A:6F:21:C9:85:E6:6F:40:FE:26:57:3F:1A:23:8E
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 01857227D9AE440748050E8C128629BF52CB
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/BQbYiJx6byHJheZvQP4mVz8aI44.roa
Signing time: Mon 02 Jan 2023 11:04:52 +0000
ROA not before: Mon 02 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 132.75.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:d9:ae:44:07:48:05:0e:8c:12:86:29:bf:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Jan 2 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0506d8889c7a6f21c985e66f40fe26573f1a238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:3a:90:73:66:5a:2d:11:01:6c:5f:ad:66:
11:83:06:53:ce:0d:2d:7f:21:fa:ef:7f:19:bb:51:
f6:64:1e:fe:53:81:1b:9b:86:d0:fa:6e:4e:3e:14:
3e:ce:1f:4a:e7:5a:59:23:5c:26:df:41:c3:23:df:
69:f0:df:87:bd:5a:29:ac:26:ca:8e:25:e9:18:82:
72:c1:07:e9:44:07:07:bc:f3:4d:39:d7:d6:5b:5e:
c4:ff:3e:76:4e:bd:d6:ab:41:c1:6a:85:af:cb:f0:
90:b7:01:e0:a0:fa:56:b4:fe:b7:28:e6:1f:e2:e2:
98:91:48:b1:26:44:7f:a4:9f:a5:f9:d2:09:d1:55:
31:f8:5e:f2:8a:52:af:8b:6f:51:58:86:a5:c7:52:
cf:e8:75:b0:cf:33:b6:6c:8e:70:94:c0:68:fe:83:
39:81:ad:ad:56:a1:b3:2d:24:82:3f:4f:98:63:80:
d7:b1:ed:a2:16:a8:af:97:7f:91:ed:12:fb:ad:5f:
97:f7:bb:13:00:a7:c7:af:77:86:3e:c1:06:45:ce:
b3:c5:77:f7:aa:f1:69:ab:c4:97:1b:aa:02:a8:34:
10:4a:67:21:ea:5e:e0:4f:94:da:90:61:af:6d:a0:
6d:7e:5d:d2:ab:9d:49:9c:ff:6f:59:04:b6:74:d6:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:D8:88:9C:7A:6F:21:C9:85:E6:6F:40:FE:26:57:3F:1A:23:8E
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/BQbYiJx6byHJheZvQP4mVz8aI44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.75.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:02:44:8e:75:2c:58:be:a8:52:b6:27:93:bc:4b:37:29:d7:
6b:b5:06:f5:e9:79:0b:7f:60:4b:9e:c4:16:cc:b8:f7:b4:f6:
5e:ce:f2:9f:e4:aa:3c:90:4a:f8:23:3b:56:3d:2c:8c:b1:a7:
32:f0:6a:5c:26:8d:ec:67:3c:a7:81:dc:29:f1:fd:95:bb:6d:
54:39:59:cd:00:32:75:30:fe:ee:c1:00:0e:34:f4:38:e5:1c:
2f:23:95:70:ad:7e:42:6f:21:ae:3d:06:c0:7f:3c:0a:7a:96:
f1:3a:2b:e4:5a:13:31:b4:6a:0d:53:a9:5a:76:dc:d3:51:c0:
a4:71:03:7d:d0:d7:25:33:ef:33:f3:c3:3b:5e:59:b5:dd:77:
e3:72:7e:e9:d9:05:79:b7:60:f9:dd:73:21:c8:ca:e6:83:a6:
6d:9a:38:62:07:f9:d0:ba:c0:5b:d5:e5:e7:72:db:f2:fd:3d:
68:f2:5b:80:16:c3:9e:c7:45:5e:56:70:5a:0c:d3:e8:a3:0b:
ec:21:49:d7:00:20:c1:a4:7e:9e:f3:ec:90:5f:b5:76:15:cf:
96:06:ae:4e:b6:de:9c:06:c6:d2:18:7a:9a:3a:99:be:bb:b3:
38:43:e5:80:33:72:6e:df:d4:d1:86:7e:93:8a:33:a8:34:8c:
99:58:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org