Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/bcOahuc1ST26WJ1ixhlgy2PA24w.roa
File: bcOahuc1ST26WJ1ixhlgy2PA24w.roa (raw, json)
Hash identifier: OPYwRkihpBs8hSuy1ujCxuS8yVaHQKBAQSY7WnQ/xXE=
Subject key identifier: 6D:C3:9A:86:E7:35:49:3D:BA:58:9D:62:C6:19:60:CB:63:C0:DB:8C
Certificate issuer: /CN=8700f9b5eb465d46396e60ca0afd4b0226f561c7
Certificate serial: 018571275D9C3D1FE5422B947EB35CFDF9EE
Authority key identifier: 87:00:F9:B5:EB:46:5D:46:39:6E:60:CA:0A:FD:4B:02:26:F5:61:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwD5tetGXUY5bmDKCv1LAib1Ycc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/bcOahuc1ST26WJ1ixhlgy2PA24w.roa
Signing time: Mon 02 Jan 2023 06:24:43 +0000
ROA not before: Mon 02 Jan 2023 06:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 195.234.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 25 Apr 2023 08:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:5d:9c:3d:1f:e5:42:2b:94:7e:b3:5c:fd:f9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8700f9b5eb465d46396e60ca0afd4b0226f561c7
Validity
Not Before: Jan 2 06:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc39a86e735493dba589d62c61960cb63c0db8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:c5:af:9e:d4:32:a4:66:71:77:8f:a3:04:
76:a8:3f:1f:50:91:c0:72:dd:c1:ef:4a:2f:e2:d8:
c1:d0:d6:bb:86:f0:b1:ef:73:1e:eb:3f:5a:86:26:
3d:66:a8:dc:83:80:f3:83:21:08:cc:75:64:fa:05:
b0:af:70:9e:bb:30:46:ba:6d:dc:9d:69:0d:36:93:
aa:30:82:f3:dc:bb:a1:8f:f5:c3:33:c6:81:11:fc:
cd:f1:5e:be:84:34:c4:c7:55:2a:bd:58:40:c0:04:
5f:8c:9a:0e:f2:c1:4e:49:3d:5f:03:f9:0f:e0:a8:
ff:0c:64:a4:8d:0c:43:5c:4f:c9:32:b0:99:fc:2a:
23:6a:13:35:21:ed:92:ac:45:16:0d:41:da:12:46:
dd:cc:dc:21:b4:94:f7:21:bb:0b:f2:d4:da:e9:9c:
a9:cb:4a:3d:80:6c:6e:96:1f:5a:7e:d6:1c:dd:ab:
52:07:25:3f:f6:e4:95:d9:4f:d2:b7:a6:c9:e8:33:
81:b6:ae:20:13:db:66:0a:3b:97:3d:d8:2d:f1:51:
ac:d8:4c:1c:ce:ab:35:61:54:9b:55:01:30:2b:69:
9c:4e:92:a6:ee:32:b4:ed:15:48:0e:67:5c:0a:36:
53:8c:5d:e1:f0:41:27:2c:d8:30:d2:51:eb:74:5a:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C3:9A:86:E7:35:49:3D:BA:58:9D:62:C6:19:60:CB:63:C0:DB:8C
X509v3 Authority Key Identifier:
keyid:87:00:F9:B5:EB:46:5D:46:39:6E:60:CA:0A:FD:4B:02:26:F5:61:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwD5tetGXUY5bmDKCv1LAib1Ycc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/bcOahuc1ST26WJ1ixhlgy2PA24w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b13fdb-3718-4db5-9c08-7679cac56460/1/hwD5tetGXUY5bmDKCv1LAib1Ycc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.192.0/22
Signature Algorithm: sha256WithRSAEncryption
51:8d:d0:08:a4:35:ea:fc:54:04:bc:2d:92:54:6b:3a:2c:77:
d8:86:7b:80:96:fa:f4:11:d0:c5:f5:bc:53:fb:93:71:f5:e3:
91:ae:b0:75:7c:e5:d6:a0:4d:d5:56:61:e5:f4:d6:35:5d:f1:
d0:18:4c:4e:ba:45:d3:c5:f1:74:0a:b3:a6:6e:ef:45:db:7e:
ab:8f:2a:c6:dc:a9:f7:5f:7f:86:18:75:78:9f:81:d9:10:ea:
2a:e9:10:4f:76:ec:80:ff:90:6b:6f:02:7a:98:61:18:48:3c:
4d:52:53:05:5c:61:9e:70:c1:d7:e1:3a:7b:a3:b8:be:f1:de:
56:43:44:74:4d:6e:f8:67:93:2a:43:cd:72:c2:e2:a2:da:58:
d0:d8:08:cb:88:2d:2b:fb:3f:1e:20:ad:4b:47:c2:ca:e7:e2:
fa:6c:4a:54:70:da:7a:6c:d4:1f:81:6f:49:2c:09:1d:ac:c4:
d5:23:40:51:dc:e4:c8:3d:6a:e0:14:82:f6:b1:1a:85:a0:53:
83:05:37:db:27:be:1c:ba:07:22:2e:e1:da:9b:10:0b:c6:ca:
d5:3a:a6:a2:42:37:db:96:90:b0:bb:82:bf:76:e4:cf:ca:cb:
32:0d:48:23:dc:06:c5:2a:b4:a2:e5:28:35:e3:4b:b6:3b:b7:
c0:86:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:58 2024 by rpki-client on console-ams.rpki-client.org