Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/sBpZ-tbtwkPJzYtJcBqlmlFSgI0.roa
File: sBpZ-tbtwkPJzYtJcBqlmlFSgI0.roa (raw, json)
Hash identifier: 12uBl/JSnpLdr71zUce+DKHZLtFYjg8Hr2JRfIriHuU=
Subject key identifier: B0:1A:59:FA:D6:ED:C2:43:C9:CD:8B:49:70:1A:A5:9A:51:52:80:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 018571D794138980F0BFAB1848A058ADCC72
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/sBpZ-tbtwkPJzYtJcBqlmlFSgI0.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208860
IP address blocks: 185.52.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:94:13:89:80:f0:bf:ab:18:48:a0:58:ad:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b01a59fad6edc243c9cd8b49701aa59a5152808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:79:31:ac:02:32:cf:41:c4:c1:d6:21:67:
76:2a:79:14:47:0d:41:07:7a:73:80:b8:7e:0c:49:
19:74:be:c0:e6:5a:3d:62:17:3a:1b:83:11:ad:9c:
3a:2f:85:75:c8:17:e4:2f:f4:bc:2e:c1:fd:74:12:
26:32:d3:5d:2e:1d:08:c1:70:88:5f:69:74:96:ba:
71:c9:31:f7:c6:58:08:85:28:40:3f:fb:fc:0f:e3:
6c:49:ec:f0:8c:fd:6f:e1:26:a4:5b:04:2d:ba:fe:
d6:e3:85:11:31:5a:80:90:be:df:2f:b9:a3:9e:da:
e0:86:95:77:05:29:36:f6:eb:26:52:9d:76:e4:c0:
41:2f:db:3c:ea:21:0f:9e:a9:78:ec:a9:25:f8:59:
44:b7:12:52:74:8e:49:3e:40:48:af:ed:c2:07:a6:
a3:95:63:e2:a1:46:d4:4a:2b:6a:2f:28:bd:48:1b:
26:ce:3a:f1:f4:45:73:24:73:7c:55:fe:82:b9:74:
66:dc:be:a1:52:36:a1:89:1a:1d:d0:72:3a:07:66:
5f:2f:3f:ea:ea:52:f9:44:93:1e:da:f8:bd:76:a1:
39:f4:1f:a3:1f:c7:99:e4:4e:bc:8e:b1:da:11:5c:
d9:4f:a0:47:30:61:8b:c4:b9:85:a6:fe:87:c3:7f:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:59:FA:D6:ED:C2:43:C9:CD:8B:49:70:1A:A5:9A:51:52:80:8D
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/sBpZ-tbtwkPJzYtJcBqlmlFSgI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.48.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:f7:dc:fb:66:d3:81:d0:70:5d:28:8c:fd:9d:c0:f9:22:65:
e0:4f:38:6a:f8:1a:e7:54:88:6e:96:b5:74:83:4c:7c:9f:35:
06:72:29:c5:f1:28:0a:ff:f6:00:60:81:8f:a8:96:ef:4a:6d:
2e:7d:b9:5c:65:9c:43:f9:f9:0f:cc:4f:a9:38:f0:ad:cb:cc:
b1:ab:c7:d4:7b:40:43:80:a4:bd:e4:ca:87:e4:29:b6:4c:ff:
13:90:4e:cf:6d:63:f7:ea:7e:65:50:af:64:6b:cf:9f:4e:05:
13:15:86:93:e7:d5:14:4f:49:9d:cd:c5:c5:2a:09:d6:e0:ab:
0c:bf:79:5d:9b:fd:5f:99:d6:44:e5:08:73:13:72:da:bd:66:
38:f7:57:05:a9:70:cf:ff:b7:4f:80:90:8f:a9:df:f8:73:62:
d8:31:26:09:6f:3d:bf:75:ea:87:ba:61:67:18:70:8f:ab:a7:
04:29:d1:93:5f:3a:72:3b:e6:73:e1:79:ac:ca:56:51:8d:14:
81:41:8b:9e:0a:fd:36:f0:84:31:b7:0a:a8:10:cb:6a:ad:8c:
56:a7:90:a3:11:9c:a8:78:ba:11:d8:01:81:af:06:66:dd:ab:
a8:2f:34:df:cb:90:04:96:1e:87:48:47:58:a9:d4:ac:da:a9:
c4:70:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org