Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/bPt7ihZBrOv25FhKTu1V0oJqUmM.roa
File: bPt7ihZBrOv25FhKTu1V0oJqUmM.roa (raw, json)
Hash identifier: sQdXOQWYVuDCYfy2VTnXqdFs1Kg5lwtmDLdG4y9ZeME=
Subject key identifier: 6C:FB:7B:8A:16:41:AC:EB:F6:E4:58:4A:4E:ED:55:D2:82:6A:52:63
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 01856D53D78006DF0888053BBDECA7A9CDE8
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/bPt7ihZBrOv25FhKTu1V0oJqUmM.roa
Signing time: Sun 01 Jan 2023 12:34:49 +0000
ROA not before: Sun 01 Jan 2023 12:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 194.59.170.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d7:80:06:df:08:88:05:3b:bd:ec:a7:a9:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 12:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cfb7b8a1641acebf6e4584a4eed55d2826a5263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:60:87:75:71:97:5f:ee:52:73:a5:88:19:
97:f9:32:b2:3c:21:f9:3a:5a:dc:f2:c3:24:63:50:
8d:7a:45:f5:09:16:d4:0c:5b:04:31:fa:1c:40:3f:
79:4e:19:4c:34:71:71:c3:d3:7d:16:12:4e:25:85:
ac:7a:2f:c5:bb:a7:ed:db:e7:5a:39:99:ab:a8:56:
9b:a6:9d:c9:74:8d:b2:9c:03:fa:71:80:e4:2b:3b:
f2:84:9c:82:9b:24:e3:44:73:08:e9:2b:3c:09:2d:
77:5f:6c:7c:df:73:78:42:a0:09:ca:11:97:42:8d:
d5:cc:7b:c1:3b:a0:44:cc:1e:53:36:f0:bb:8b:07:
8a:7c:3e:ea:0f:94:78:ef:91:9b:5a:57:a6:c0:e2:
c8:65:d9:72:a9:c8:47:0d:fa:6d:2e:62:5e:bd:71:
eb:e3:79:96:28:72:fc:e9:31:55:cc:c1:5f:a4:a7:
54:3d:a8:d0:53:30:73:94:9a:ce:ab:7e:c9:5c:ac:
70:8c:44:ec:b7:11:f0:6f:d3:aa:85:12:2f:fa:d6:
9d:24:ca:27:86:e5:75:e9:6c:20:2c:6e:e7:bc:9a:
9d:15:1e:b2:db:a3:f3:65:3e:f0:8f:e7:12:a8:e5:
10:27:52:b3:0e:10:76:11:72:73:ab:29:30:01:a5:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:7B:8A:16:41:AC:EB:F6:E4:58:4A:4E:ED:55:D2:82:6A:52:63
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/bPt7ihZBrOv25FhKTu1V0oJqUmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.97.0/24
194.59.170.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1b:65:ad:51:08:ff:49:38:30:66:e7:f4:3b:c0:54:05:a2:
b1:9b:bb:8b:f2:1b:16:39:f2:60:70:cc:cd:2c:1e:92:e7:77:
28:8e:7a:ff:4f:56:ab:a2:41:7b:6f:bf:3a:3f:7a:26:c8:a3:
ae:90:6d:8b:a1:07:fc:92:88:5c:7b:9a:6c:17:63:7a:31:af:
37:c2:0d:b1:a3:42:86:d4:71:c9:1a:61:a5:cc:10:d6:2b:e1:
65:0c:0b:05:f5:05:58:54:d1:2f:ca:7d:3f:e3:a0:f0:1b:d6:
ed:05:42:d3:78:c0:9f:2c:38:7e:92:b1:3d:c3:2d:68:34:27:
bf:12:c1:68:4c:43:d9:1b:00:00:2e:06:d8:61:4a:b4:73:70:
1a:00:d9:9c:77:1f:78:8e:ba:02:93:aa:f3:f3:17:d5:83:36:
3e:c3:7e:9e:44:02:5e:d3:a0:2c:db:8e:81:8d:3d:17:1c:bc:
fc:fe:62:8c:99:d7:f1:8f:89:6a:a8:e8:ab:a5:81:b4:d3:d6:
4c:1c:c3:26:7b:eb:0c:f3:e4:3f:9d:4a:3b:ad:bc:ef:09:b4:
95:52:87:64:0a:1a:4a:b8:2f:46:91:47:f0:df:01:a7:9f:14:
7a:74:1e:e3:c2:d0:1a:bb:f0:23:07:c5:1d:f7:b3:0c:07:f6:
0a:1b:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:49 2024 by rpki-client on console-fra.rpki-client.org