Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ByBWX7dNI-4L61F457KlYWW0ZJQ.roa
File: ByBWX7dNI-4L61F457KlYWW0ZJQ.roa (raw, json)
Hash identifier: Op+6i3OFnaCJkbYQXgWTTd1Js1WrZOppjHi80nBynxE=
Subject key identifier: 07:20:56:5F:B7:4D:23:EE:0B:EB:51:78:E7:B2:A5:61:65:B4:64:94
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D812F2DDD8C89519DE5EB0E56B5D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ByBWX7dNI-4L61F457KlYWW0ZJQ.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207766
IP address blocks: 178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d8:12:f2:dd:d8:c8:95:19:de:5e:b0:e5:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0720565fb74d23ee0beb5178e7b2a56165b46494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:64:78:ad:d4:f1:13:dd:74:a5:87:a1:ce:
a2:4f:57:a2:d1:9b:17:b7:3f:5f:7b:57:4a:af:42:
81:69:de:ae:bc:ed:d0:74:98:78:ca:15:a7:2f:69:
9b:a2:8b:31:b9:32:ea:84:f9:38:63:2c:cd:18:73:
45:e0:eb:47:19:93:60:24:1a:e9:14:ff:a9:9c:04:
d9:4a:e2:dd:1c:21:2c:49:87:d0:dd:c7:27:79:65:
fc:2e:45:19:90:c7:83:db:e6:25:68:84:63:04:d0:
59:20:d4:5d:9d:46:f7:1c:13:98:96:66:d2:c7:08:
02:22:e2:32:37:f4:2c:32:9a:93:44:9c:46:9c:28:
a7:e6:c4:e1:15:39:3f:af:33:4f:5f:a6:f5:2a:61:
bd:fc:3f:4e:c9:87:d0:87:1c:b6:2d:21:2f:ed:1a:
08:f7:fe:c0:9d:50:af:3a:71:75:66:e1:e8:78:47:
af:ac:0e:e6:26:ba:e1:dd:28:c2:1d:7f:00:01:f1:
12:70:40:35:46:3b:e8:03:2e:49:01:7c:c0:a2:56:
c8:21:28:18:52:c6:0f:a1:c4:a8:5d:7e:4b:eb:3d:
7c:1d:33:f1:69:f5:a4:b6:59:24:69:91:08:7e:cb:
d8:f0:93:55:f9:c0:4d:77:30:81:44:94:2e:d4:60:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:20:56:5F:B7:4D:23:EE:0B:EB:51:78:E7:B2:A5:61:65:B4:64:94
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ByBWX7dNI-4L61F457KlYWW0ZJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.32.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a8:4e:ca:2b:0b:16:7e:7a:85:19:d4:e3:ab:67:d4:ee:ef:
88:fc:02:be:87:11:a4:a1:05:fd:b3:43:ea:dd:ea:30:c0:4f:
eb:7f:67:fc:36:29:f1:4e:3a:c6:35:8d:66:ac:e8:99:88:55:
db:ce:0c:ab:71:d4:48:b1:a4:35:7f:b4:73:88:81:db:0f:9d:
22:be:ff:ff:a0:3b:27:fc:42:3c:70:dc:76:10:ae:e3:6c:a0:
2a:a2:75:0f:df:5d:45:ed:7e:e9:75:c1:26:5d:ce:40:76:a0:
06:4e:eb:68:e5:f3:d9:9b:51:ca:55:63:ec:5b:79:62:4e:75:
b7:62:60:cc:f6:cf:44:f8:ad:ec:ce:0c:66:e2:45:e8:7f:f8:
88:4e:c9:d0:7a:c0:cd:9a:38:db:7d:32:d8:2c:f3:e3:9c:e2:
dc:c9:f7:ce:67:98:c1:ea:b6:09:f6:b0:bb:a3:6f:e3:de:02:
a4:90:c8:7a:62:77:1c:03:1d:da:5a:56:dc:8b:64:c2:e9:92:
8e:2c:fa:16:82:1c:98:09:87:d5:68:78:9a:cb:99:41:b6:7a:
a1:d8:2c:a5:a1:cc:3f:54:3a:1e:63:a9:0b:e0:0d:42:1e:1e:
fd:02:8d:d6:53:1f:f4:88:8b:13:b5:90:9f:ac:88:90:90:2a:
d7:79:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org