Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/bHX6M-Z0bOwwJqVHLbTZbFzE964.roa
File: bHX6M-Z0bOwwJqVHLbTZbFzE964.roa (raw, json)
Hash identifier: 12lcqjgP0MkD+HZgH1fdXcPC/a1q7OSRRUdsI7OevPs=
Subject key identifier: 6C:75:FA:33:E6:74:6C:EC:30:26:A5:47:2D:B4:D9:6C:5C:C4:F7:AE
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 018571954824C6ACC1DE069C1CA072552AA9
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/bHX6M-Z0bOwwJqVHLbTZbFzE964.roa
Signing time: Mon 02 Jan 2023 08:24:46 +0000
ROA not before: Mon 02 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41768
IP address blocks: 193.37.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:48:24:c6:ac:c1:de:06:9c:1c:a0:72:55:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Jan 2 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c75fa33e6746cec3026a5472db4d96c5cc4f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:ff:f4:3c:bb:83:b7:88:ce:02:85:de:ba:
42:73:08:1e:32:92:ae:30:24:b8:6c:e5:19:55:d5:
af:3f:e7:0d:eb:c9:e5:ea:3c:1f:67:44:90:90:c1:
18:c7:ff:ad:db:7d:80:e6:a4:fd:d0:de:84:ca:21:
59:55:e0:cd:b9:6e:33:d9:8c:fe:8a:76:f5:c8:df:
5e:66:cc:29:6e:9a:ea:d9:52:15:7a:20:55:1f:23:
db:99:d0:0e:cb:c7:05:06:4a:be:61:05:52:28:65:
11:3e:ee:5f:83:0d:be:10:2c:7f:e9:65:f6:28:9e:
0b:20:9a:88:3a:e7:ed:0a:b0:b5:17:78:13:c7:d5:
98:3c:2d:f9:0f:8a:7a:fb:47:43:b5:a1:ac:4a:27:
a7:a8:35:89:67:c8:3c:53:03:ee:57:77:de:4f:16:
ab:da:41:69:41:7c:31:f5:ba:6c:56:73:af:e3:50:
61:5c:c8:18:25:af:4a:57:46:7b:fd:df:de:e7:d7:
a6:12:bb:ba:b8:94:ce:3a:84:fa:bf:4a:d1:07:aa:
22:de:03:ca:44:6d:59:00:f6:12:9b:88:00:be:f5:
4d:e3:ca:c6:19:17:67:58:8e:8f:7d:8f:8e:96:0e:
27:b4:a8:b7:63:36:5b:82:df:a9:11:a9:75:5e:23:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:75:FA:33:E6:74:6C:EC:30:26:A5:47:2D:B4:D9:6C:5C:C4:F7:AE
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/bHX6M-Z0bOwwJqVHLbTZbFzE964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.159.0/24
Signature Algorithm: sha256WithRSAEncryption
07:59:c4:a7:68:29:d6:93:31:07:1a:d7:90:7f:ae:ae:95:9c:
7e:b2:32:b2:97:69:72:56:99:9d:cf:89:ad:d3:05:34:df:52:
2b:1f:89:7d:7b:17:43:21:9a:1c:7c:d4:7e:8e:8d:55:78:9d:
97:76:d1:80:0e:3a:56:14:51:50:d2:c4:cf:bf:13:c9:41:44:
43:c5:1e:2b:ce:6f:39:f4:e2:d5:b3:e0:d2:7a:8e:a3:b9:02:
d3:2c:28:d3:0e:45:df:83:a2:06:8c:3e:1a:b9:f4:ed:de:19:
d0:ce:83:9c:44:ed:f2:ec:88:e4:e5:ea:d1:f2:01:20:91:74:
a2:26:e2:da:b9:50:bd:9d:7f:a6:08:f5:81:0c:9a:57:3c:e8:
94:cd:c5:40:d7:88:0b:04:61:85:bb:b0:20:e3:54:d2:4a:6d:
48:77:35:8d:8a:63:1a:bf:b7:9b:6c:f2:9c:40:03:18:5d:57:
0d:c1:c2:65:73:40:0e:0e:36:93:3f:84:90:3b:79:13:a8:2e:
11:b4:66:b3:61:21:97:6d:49:2c:d2:ac:6d:b2:e0:53:b9:16:
c5:4c:7b:86:b7:77:5b:59:34:a0:00:a5:4a:06:55:bd:65:96:
ab:01:b5:70:7c:13:6b:69:eb:13:f6:3d:97:7b:76:ba:ee:96:
22:86:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:05 2024 by rpki-client on console-fra.rpki-client.org