Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/Bc0KROfwu432LSU5mmG4abH6_Hw.roa
File: Bc0KROfwu432LSU5mmG4abH6_Hw.roa (raw, json)
Hash identifier: GDfkDjis9rvLSZ5dFt2+hoD7/oNZW/6NQC3sFV1Q+/g=
Subject key identifier: 05:CD:0A:44:E7:F0:BB:8D:F6:2D:25:39:9A:61:B8:69:B1:FA:FC:7C
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 01874EA80EA236A8F1D79986715A12CAA3B2
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/Bc0KROfwu432LSU5mmG4abH6_Hw.roa
Signing time: Tue 04 Apr 2023 23:44:09 +0000
ROA not before: Tue 04 Apr 2023 23:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 132.74.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 13:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:a8:0e:a2:36:a8:f1:d7:99:86:71:5a:12:ca:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Apr 4 23:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05cd0a44e7f0bb8df62d25399a61b869b1fafc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3e:4e:b6:4c:cf:89:52:a9:c6:07:b8:a3:da:
51:7c:50:67:22:e4:36:de:74:e9:69:fe:c8:9a:24:
5b:d8:c0:7f:99:81:30:1a:ce:24:39:38:d6:49:72:
50:16:ce:38:74:0e:85:07:89:76:a5:d6:f8:16:b0:
87:a3:08:52:1f:9a:11:7e:e8:b1:48:3e:e9:0e:3d:
45:22:0e:1f:79:80:f3:11:a7:91:39:73:c1:c0:38:
f2:aa:25:ff:b0:38:ad:47:32:94:0c:6a:de:d6:a7:
2e:a5:39:59:83:ce:4d:a6:20:b4:77:2d:16:89:55:
c0:21:b0:d4:a9:57:7e:59:1f:f3:d9:a7:fb:7c:8e:
28:b8:c3:48:8a:a0:b2:f4:bd:fb:76:16:da:70:1a:
8b:37:6d:83:5f:57:d7:63:22:1c:d1:3f:b1:52:aa:
e6:85:5f:b9:88:9a:d7:f6:a7:0f:c9:fe:61:35:25:
3c:d7:99:01:43:44:1f:d6:37:38:17:29:60:81:26:
11:b6:54:48:30:5f:e5:b8:b5:fd:50:4f:57:29:26:
16:88:e3:ce:6a:f3:10:9e:bf:b9:7d:33:43:37:32:
d0:8e:48:a2:f8:78:a8:04:1c:69:32:07:f5:a9:96:
7e:1e:fb:38:2a:d3:29:bf:68:c0:b6:4c:14:6d:4d:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:0A:44:E7:F0:BB:8D:F6:2D:25:39:9A:61:B8:69:B1:FA:FC:7C
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/Bc0KROfwu432LSU5mmG4abH6_Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.189.0/24
Signature Algorithm: sha256WithRSAEncryption
58:43:6c:ec:79:33:59:29:7f:a0:1c:5f:04:4b:de:4c:dd:04:
78:b7:68:21:80:f0:38:60:0c:5f:55:86:98:fa:12:ad:a8:09:
49:64:b3:7f:68:71:69:76:e5:73:57:ab:d8:08:49:73:ec:51:
6e:13:4b:38:b8:eb:43:87:ae:85:c9:aa:58:59:b8:a4:c4:95:
6f:99:e3:97:e3:16:60:59:e9:15:b6:a3:5b:6d:fb:92:c9:98:
71:b7:32:fe:fa:14:2f:1c:75:98:53:bb:1c:a6:8b:c5:07:dd:
c5:1a:eb:45:a5:63:d8:1d:33:64:94:3f:44:ef:42:7b:5e:6e:
27:df:7f:a4:ca:a5:df:bc:01:2e:34:8b:a1:e0:cd:7b:ed:76:
a7:a0:25:24:9b:e7:46:7f:62:40:35:af:f9:77:1a:7f:4c:53:
3a:bc:c8:7a:d4:25:d6:71:fa:be:d6:70:b1:05:7a:43:1d:93:
14:7b:87:61:46:29:cf:47:bc:a7:fe:fe:f1:88:12:f1:29:55:
dc:cc:2c:5d:53:f7:99:3e:70:5c:ce:92:4e:3d:2b:fa:18:1d:
df:a7:79:ee:90:ff:7f:52:5c:fb:38:52:df:42:96:ec:3f:e3:
c2:80:7a:9f:55:15:dc:b8:20:e6:cf:9e:26:4b:c3:d8:be:0d:
19:9e:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org