Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bP1q41XZmPjhP3KI6jZXHz6AZyI.roa
File: bP1q41XZmPjhP3KI6jZXHz6AZyI.roa (raw, json)
Hash identifier: NTDJYSiQPL/T6yCcrKaMFCOrVH1Mz8LhSXaosEQBoas=
Subject key identifier: 6C:FD:6A:E3:55:D9:98:F8:E1:3F:72:88:EA:36:57:1F:3E:80:67:22
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018DA1904016B1FFF8E1DCE558FFBCB4775F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bP1q41XZmPjhP3KI6jZXHz6AZyI.roa
Signing time: Tue 13 Feb 2024 08:23:21 +0000
ROA not before: Tue 13 Feb 2024 08:23:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31479
IP address blocks: 185.28.48.0/23 maxlen: 23
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:90:40:16:b1:ff:f8:e1:dc:e5:58:ff:bc:b4:77:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 13 08:23:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cfd6ae355d998f8e13f7288ea36571f3e806722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:22:bd:91:f7:39:37:7f:f5:6b:24:4b:a7:e9:
f8:13:c2:ca:c5:2d:db:54:39:67:21:25:fc:7c:d9:
93:15:f1:69:80:2b:43:f3:79:8e:3c:a0:dd:a3:3d:
32:ab:be:8e:55:37:83:39:76:5a:5b:9e:ac:b2:e7:
95:a7:8f:a3:4d:62:c7:0a:82:6e:80:58:78:fc:7b:
d1:16:9d:de:bf:44:dc:31:71:3f:85:fe:89:65:25:
87:7b:f4:76:e3:e8:1e:c6:88:eb:d8:ba:07:70:ab:
ba:61:71:b4:97:7f:a0:dc:ea:42:8e:ee:36:97:46:
0e:ed:b5:d3:2a:b2:a7:7c:cd:b4:81:b7:63:eb:57:
c7:a4:8c:23:13:db:3a:cb:82:4c:1a:8d:68:73:f1:
71:e3:d3:41:9a:72:6f:72:c0:3f:99:d9:d9:bf:a7:
6a:70:62:52:a1:00:1b:2a:4a:11:ff:b3:02:c5:21:
99:65:6f:99:88:ad:d6:2f:a5:da:1b:52:03:3c:d9:
13:2b:3a:01:ad:f9:5d:20:e0:d7:00:52:ff:bd:c6:
be:a0:fa:10:37:59:14:73:68:c8:40:56:bf:6a:03:
75:67:b0:19:61:96:00:6b:6e:7c:0d:b0:90:a9:be:
a4:9e:38:e3:e8:2f:fe:b0:6b:64:ab:dd:c9:92:ab:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:6A:E3:55:D9:98:F8:E1:3F:72:88:EA:36:57:1F:3E:80:67:22
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bP1q41XZmPjhP3KI6jZXHz6AZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.48.0/23
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
5b:1b:bc:fa:59:ee:2a:e2:20:80:b7:35:5c:ef:dc:90:b9:5a:
4b:31:96:74:19:74:b7:a5:8c:a3:ba:7f:e4:03:f9:f4:4f:da:
4f:6d:22:10:cc:37:fe:36:74:f2:8a:8b:95:85:75:c2:84:e0:
fe:13:3c:aa:0e:87:42:f4:1e:ab:83:5f:5e:5c:11:40:0a:82:
7a:82:76:f2:5e:e2:19:57:78:61:07:f3:e4:f9:89:33:89:9d:
be:c2:8e:ad:12:e9:af:d6:27:9c:e5:20:c1:15:8d:66:93:de:
d6:c6:6c:a3:a9:a0:41:c0:27:92:cb:6b:e0:66:0b:d5:ff:82:
5d:18:bf:97:66:c5:d1:aa:55:95:9b:a8:02:25:c9:bc:69:6d:
2f:ce:2a:ed:aa:1b:0c:5e:19:e9:f2:a8:58:22:eb:d1:ed:88:
82:ba:3f:9c:45:fe:02:c9:e4:71:e1:67:9f:3a:ac:5c:0c:44:
cd:0a:a0:fe:e5:e3:97:7e:eb:90:5e:f8:16:8b:6e:28:cd:4a:
47:fd:86:30:de:4d:4f:bf:25:24:48:24:81:ac:11:e1:f6:62:
25:d2:f0:40:05:6d:9c:a5:48:ad:ff:94:7f:28:d7:15:0b:8c:
57:35:55:57:34:c8:b6:31:0f:da:33:b9:2e:a0:4b:fe:0d:3f:
0a:0f:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:56 2024 by rpki-client on console-fra.rpki-client.org