Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BTke-cebhoFa6_mXAN94pg5mN9U.roa
File: BTke-cebhoFa6_mXAN94pg5mN9U.roa (raw, json)
Hash identifier: sNlY0P9ASq4ixyH7vDXBjmcf5bAEZ6yjuvWzxy7U4/8=
Subject key identifier: 05:39:1E:F9:C7:9B:86:81:5A:EB:F9:97:00:DF:78:A6:0E:66:37:D5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018D6535BB6468AFF744D9F828B8B4E82F47
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BTke-cebhoFa6_mXAN94pg5mN9U.roa
Signing time: Thu 01 Feb 2024 15:07:16 +0000
ROA not before: Thu 01 Feb 2024 15:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60707
IP address blocks: 46.38.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 14:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:35:bb:64:68:af:f7:44:d9:f8:28:b8:b4:e8:2f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 1 15:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05391ef9c79b86815aebf99700df78a60e6637d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:2a:ed:42:f5:64:dd:a0:61:68:a5:75:95:
e3:50:db:50:ae:31:74:35:88:6b:93:60:fb:84:af:
42:97:27:8c:88:d0:ab:87:e9:61:36:66:c9:ee:60:
29:1b:16:b8:c8:37:93:8a:69:e2:9a:83:62:53:1c:
f9:d4:1e:b9:08:d2:92:a1:a3:49:5e:57:86:66:68:
91:d4:3b:a7:54:de:a3:ca:7f:fd:78:99:82:c3:70:
2d:8c:f9:e3:0b:0a:9b:e5:bc:5e:cf:64:9f:ce:8c:
e0:96:91:76:33:24:80:1b:12:1e:52:27:45:ff:53:
30:c2:e0:39:13:f2:16:37:bf:51:79:59:dc:26:87:
2b:04:27:a1:90:b2:fc:41:76:1c:e1:aa:77:8a:90:
df:d3:94:62:20:cb:79:77:f2:63:b4:77:2e:ec:1b:
45:46:ce:c7:22:00:09:56:03:66:74:9d:ed:d4:6a:
02:35:cc:af:a0:3a:d8:0c:8c:d1:bf:bf:18:7f:26:
56:4e:75:14:cd:44:e3:40:c6:53:91:b6:6e:f0:10:
f3:8f:d6:5a:76:54:cf:13:2e:f5:30:99:49:1c:55:
8f:6c:b4:6e:0b:d7:f8:52:ee:9a:57:bd:13:75:1e:
08:f5:d6:d1:d5:a2:96:a7:14:74:d0:59:97:98:1a:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:1E:F9:C7:9B:86:81:5A:EB:F9:97:00:DF:78:A6:0E:66:37:D5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BTke-cebhoFa6_mXAN94pg5mN9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e8:63:8e:79:4f:d7:66:6f:4b:33:16:ab:ad:5b:78:ec:a3:
9a:fd:be:9d:6c:57:7d:3b:ae:6b:2e:dc:36:97:43:02:52:7c:
ea:85:0a:21:98:8d:85:19:eb:80:33:ac:0f:9a:bf:52:52:0b:
26:16:25:b1:71:fb:81:e7:fb:cc:cc:8d:a3:b3:d1:b9:05:5b:
ea:5a:33:ab:b9:a7:fe:66:be:f8:77:68:34:fe:aa:86:03:7e:
80:06:b7:24:2d:e7:21:9a:58:62:69:9f:fd:89:fe:ab:4d:17:
fa:82:53:be:71:6f:4d:74:53:38:d8:2e:4d:5a:84:59:d7:f3:
f2:6a:7d:5a:fc:68:9b:6a:07:26:41:c4:5f:2d:6c:3a:71:1e:
1a:12:a0:a6:a2:9c:20:66:64:cb:1d:97:24:b7:ac:c2:9f:31:
a0:0f:5a:ef:e7:35:4f:9d:a8:36:b0:7f:11:4e:23:60:2b:87:
01:a9:5b:1a:92:03:5a:12:36:1a:85:ae:64:a7:91:82:db:3e:
12:22:31:09:b6:3d:8c:c2:20:ad:d5:8d:e3:95:9e:98:0a:36:
5f:da:a1:e2:ae:47:7b:63:93:1e:54:b6:25:76:70:73:dd:c6:
c3:7e:15:a4:e6:c4:63:3b:84:3c:1a:51:7f:60:25:ee:43:4f:
88:54:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org