Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/BJw9e-q_-Q61BMhZpuLoAkYJDb4.roa
File: BJw9e-q_-Q61BMhZpuLoAkYJDb4.roa (raw, json)
Hash identifier: xQK3ZgZ/kxLg2HTNmxz8bED1O5ngfjE+H6GNhl9oeJY=
Subject key identifier: 04:9C:3D:7B:EA:BF:F9:0E:B5:04:C8:59:A6:E2:E8:02:46:09:0D:BE
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 01856C65B2A8664F7DA06F0893FD1D9ABD5E
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/BJw9e-q_-Q61BMhZpuLoAkYJDb4.roa
Signing time: Sun 01 Jan 2023 08:14:42 +0000
ROA not before: Sun 01 Jan 2023 08:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39036
IP address blocks: 193.151.226.0/24 maxlen: 24
2001:67c:2bf4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b2:a8:66:4f:7d:a0:6f:08:93:fd:1d:9a:bd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Jan 1 08:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=049c3d7beabff90eb504c859a6e2e80246090dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:c0:9b:ff:7b:5a:a5:ce:5b:59:19:fe:94:
e0:d6:1c:4b:ab:ef:6d:c5:a5:34:2b:2d:43:82:e3:
51:97:6e:1d:b5:79:4d:93:90:27:f4:84:b1:ab:e0:
d2:c1:15:7d:a6:9d:a1:1e:b3:a6:27:4d:e9:28:00:
d4:d1:31:20:05:78:4b:78:ba:31:6a:41:e6:8c:a8:
ef:cb:7e:8e:d5:73:09:91:b9:ed:3f:a3:b6:47:e4:
5c:86:5b:46:5c:59:d2:4e:fa:c2:df:88:8e:e1:bc:
c1:8a:10:f8:14:45:e2:3c:ac:40:e4:22:9f:54:95:
7a:5e:11:dc:80:00:c1:73:f1:cc:37:7e:6f:71:06:
9a:45:fc:f2:6d:c2:3d:7f:32:ed:5e:93:c5:f9:b2:
d4:38:f9:be:7d:a6:e9:f2:14:71:28:a5:8e:9e:dd:
77:94:45:85:de:37:8b:bf:8d:23:58:a6:3d:ea:97:
74:c2:84:1f:ec:1b:19:9a:af:15:c2:db:c9:82:10:
74:17:2e:4d:c4:d7:9a:19:32:d7:03:06:ad:7f:6c:
1d:46:6d:10:32:88:5d:3f:42:dc:09:11:99:37:38:
6c:23:97:ac:cf:4f:ad:8c:f3:5f:fe:fd:9b:c8:05:
52:43:17:cb:02:71:5e:75:c3:e1:9b:92:4a:79:dc:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:3D:7B:EA:BF:F9:0E:B5:04:C8:59:A6:E2:E8:02:46:09:0D:BE
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/BJw9e-q_-Q61BMhZpuLoAkYJDb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.226.0/24
IPv6:
2001:67c:2bf4::/48
Signature Algorithm: sha256WithRSAEncryption
63:9e:e2:20:31:a9:d1:38:9e:e6:5a:cc:2b:eb:26:47:91:06:
73:2b:b3:d7:ab:02:aa:11:54:be:56:e5:6a:2b:af:0c:8c:6a:
bf:a5:7f:be:4b:80:da:f4:02:f2:51:6b:18:83:47:4c:1c:2f:
f0:c1:40:5d:23:ab:8b:af:e9:49:cf:ae:7d:08:8a:24:cc:cd:
32:e8:79:bd:5c:03:d3:ad:b6:28:39:81:5f:6b:d1:0e:c2:ce:
56:8d:aa:75:9d:bf:67:3d:9b:48:bf:12:57:85:19:af:88:38:
73:03:5e:bc:ee:a9:b3:8e:77:90:98:40:73:60:82:b8:1d:5d:
e2:a2:0a:7e:8d:f3:c9:7f:a9:ba:ce:2d:59:de:a5:61:f6:cd:
4f:aa:20:8f:6d:1f:af:74:2f:f4:41:45:e4:10:b0:5b:d7:21:
b3:04:3b:7e:49:48:c9:f2:ad:83:ff:d7:68:7d:c5:16:f2:d6:
68:c5:c8:20:e2:1d:f2:9b:5d:b6:97:f3:96:85:7c:5c:0e:54:
9f:42:ce:17:a9:0c:c0:d0:ed:90:9b:81:db:ad:d4:a5:b2:5f:
39:3b:cc:01:f1:88:6d:2b:1a:bb:15:dc:d9:3e:df:30:6b:fd:
e8:ee:9c:bd:bf:d4:c9:e0:76:21:f7:db:8d:bf:22:45:2a:9f:
68:e2:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:57 2024 by rpki-client on console-fra.rpki-client.org