Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/boAer4ghbGybgov1jxVJo1EKeLU.roa
File: boAer4ghbGybgov1jxVJo1EKeLU.roa (raw, json)
Hash identifier: 65LyO8+GpMb4DBbqgzrmEfOMPWm2YUGUbYdOchhJfpM=
Subject key identifier: 6E:80:1E:AF:88:21:6C:6C:9B:82:8B:F5:8F:15:49:A3:51:0A:78:B5
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 018C693E17D3EE9CDD953F55B52C987F1340
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/boAer4ghbGybgov1jxVJo1EKeLU.roa
Signing time: Thu 14 Dec 2023 16:52:06 +0000
ROA not before: Thu 14 Dec 2023 16:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64458
IP address blocks: 194.59.170.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
45.90.75.0/24 maxlen: 24
45.90.73.0/24 maxlen: 24
45.90.74.0/24 maxlen: 24
45.90.72.0/24 maxlen: 24
2a05:8640::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:3e:17:d3:ee:9c:dd:95:3f:55:b5:2c:98:7f:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Dec 14 16:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e801eaf88216c6c9b828bf58f1549a3510a78b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:aa:a4:33:69:16:c4:c0:e3:3c:9c:f9:34:
8f:7a:92:80:ac:36:59:f4:99:76:2f:f6:6b:55:f4:
6d:1c:80:51:24:90:f7:39:55:aa:39:43:eb:2c:c5:
02:43:a1:6d:53:3f:04:fc:8c:84:54:be:b2:ee:e4:
a0:e3:e8:3e:4e:be:19:7f:9f:15:7d:76:3d:3e:01:
68:8b:94:7d:5c:98:57:4f:f1:8a:54:48:bb:43:fc:
59:1a:0c:d5:64:ec:15:ae:8e:30:02:e0:23:4d:67:
67:fc:55:21:14:0b:f0:82:88:1e:c3:dc:b5:90:13:
2e:3f:a1:1f:55:d1:a1:01:4b:91:67:9e:e1:08:b2:
07:62:e3:c3:82:3b:96:62:cb:40:94:52:5a:f4:f7:
89:4b:24:ae:35:27:62:2b:53:24:97:95:56:d7:d9:
34:da:82:90:1b:92:6e:46:48:b7:e2:15:9e:65:04:
78:e5:b9:83:7c:cb:56:54:16:59:ba:4b:d2:f1:69:
94:ab:84:c7:5f:1f:70:46:9b:cf:65:9f:20:40:24:
1f:cf:f3:25:9d:e0:65:b2:2a:bb:4b:d5:36:1a:dc:
7f:bc:8f:7d:40:ee:fd:fa:c3:6f:c4:e2:ae:f2:bd:
df:4e:81:34:f6:0c:4d:76:fa:27:3e:c2:af:85:b5:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:80:1E:AF:88:21:6C:6C:9B:82:8B:F5:8F:15:49:A3:51:0A:78:B5
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/boAer4ghbGybgov1jxVJo1EKeLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.72.0/22
185.81.97.0/24
194.59.170.0/24
IPv6:
2a05:8640::/29
Signature Algorithm: sha256WithRSAEncryption
5d:0a:e7:91:45:f1:0f:bf:76:b4:d3:f5:e3:55:a8:70:8e:d0:
40:92:d0:a3:46:b2:e7:9b:35:34:5a:a5:32:9e:c5:09:17:d4:
77:8d:c9:42:62:11:8b:6b:67:2e:36:79:36:b6:ff:66:68:85:
5a:33:6e:07:c5:22:9e:c6:b4:3b:5c:c5:9f:eb:a2:e0:9f:c3:
57:76:97:99:ad:0b:dc:4d:05:8b:84:0b:6f:d6:99:60:a8:8f:
2f:9b:b4:c1:11:c7:c4:ac:ea:aa:29:4d:11:69:f6:ce:54:8e:
47:01:e8:23:94:f1:18:a9:59:53:f7:7a:c8:a8:c6:ba:0e:db:
d5:6d:cf:2f:ff:06:6c:57:fe:3b:7a:18:09:45:cf:40:e2:47:
b0:a9:2d:08:ff:2b:5f:54:fd:0c:52:3c:bc:8a:75:0b:0a:14:
92:b1:77:71:d3:2b:db:4c:40:08:d0:07:b0:37:86:ec:e7:d1:
a3:c2:e6:d9:1e:83:80:6c:91:c1:b8:69:ca:b9:a5:d8:10:d2:
17:62:c1:e5:46:5b:7a:14:7f:51:f8:80:98:28:dd:ad:da:b5:
4f:96:ba:42:0f:05:32:03:0b:02:a0:97:3b:32:fa:7a:84:ab:
35:6b:37:43:71:1b:7a:39:fd:32:de:50:f3:c2:86:c2:68:33:
80:57:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 30 19:54:34 2023 by rpki-client on console-fra.rpki-client.org