Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/BzwLOLlc-_i601FreTD0wBSqemc.roa
File: BzwLOLlc-_i601FreTD0wBSqemc.roa (raw, json)
Hash identifier: 9a7x4EPCQhGEq8Ie9sZlmzqsRWorbxwVBofESEXkHiI=
Subject key identifier: 07:3C:0B:38:B9:5C:FB:F8:BA:D3:51:6B:79:30:F4:C0:14:AA:7A:67
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01857042A7BFBD9E456294FD089A78661824
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/BzwLOLlc-_i601FreTD0wBSqemc.roa
Signing time: Mon 02 Jan 2023 02:14:54 +0000
ROA not before: Mon 02 Jan 2023 02:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 194.169.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a7:bf:bd:9e:45:62:94:fd:08:9a:78:66:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 2 02:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=073c0b38b95cfbf8bad3516b7930f4c014aa7a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f9:a6:a3:2a:02:29:8e:64:1a:74:6a:da:3a:
8c:56:7f:ea:d8:43:99:36:0b:25:59:73:23:b5:01:
01:22:47:f4:8f:4d:cb:48:73:21:1c:62:2e:f5:ce:
82:27:64:03:a6:07:43:83:d0:b9:5a:84:a9:d0:b2:
21:06:af:d6:72:08:6a:47:e8:ef:a0:d4:da:f7:c9:
07:29:98:b9:b1:35:8d:05:d3:77:88:2b:94:c4:4f:
ec:32:49:9c:95:05:01:2d:37:56:31:7f:81:0c:a5:
f7:6c:05:4c:f1:5b:bb:73:e6:8a:f9:77:4a:aa:d3:
78:f7:6e:5e:94:97:07:a0:2d:22:11:a9:ab:71:82:
b0:e5:de:eb:3e:a6:d7:5c:26:0c:91:d0:2e:23:3a:
1b:6c:cb:c4:4d:21:f9:41:33:49:64:e1:fd:d8:e2:
0a:02:76:61:1c:66:39:21:72:56:90:5c:41:8d:ff:
8a:30:aa:1c:ac:89:61:93:4f:ef:76:4c:49:77:52:
86:36:23:13:47:e3:95:ea:8a:96:89:18:0b:7b:6d:
07:2c:be:ed:c3:31:7d:41:6b:f1:80:46:0c:b5:46:
f4:27:c6:5d:93:8b:00:3f:69:4d:c6:ac:8c:da:13:
94:b2:a9:97:a4:d8:d7:1e:37:5e:dd:93:e3:70:00:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:0B:38:B9:5C:FB:F8:BA:D3:51:6B:79:30:F4:C0:14:AA:7A:67
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/BzwLOLlc-_i601FreTD0wBSqemc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.198.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b2:96:53:d4:74:05:cc:52:14:cf:40:e2:5c:5f:d4:1c:23:
66:ae:fd:71:36:da:a4:f3:4f:9d:46:34:ee:2d:c4:14:3a:00:
97:de:34:0a:84:72:e1:d1:af:d5:11:a2:49:a5:b4:a6:6e:f7:
f8:4e:93:e5:7a:4e:dd:04:7e:c5:77:73:ce:d3:ac:03:8e:9c:
47:b6:85:df:1c:08:5f:c3:b6:ea:2b:7d:6a:50:9a:c6:b4:bb:
de:fa:b2:b5:c8:a3:75:bd:75:23:7f:d8:11:02:e8:82:ab:58:
73:5e:66:03:d3:8e:48:02:1e:ab:83:da:cd:eb:56:d4:53:7e:
ef:40:11:ab:a2:03:21:ea:64:f4:67:2a:c6:6f:03:f9:37:5a:
45:5d:a3:b9:70:31:b1:f6:40:88:4c:95:a5:80:b9:34:db:7c:
3a:27:b3:2d:f6:d7:d5:77:51:58:34:f4:08:f4:ba:75:73:36:
52:f3:95:14:e0:3e:1d:d7:5e:74:d1:26:c8:00:ed:1f:95:d7:
51:8b:1e:a4:d3:42:8e:b8:80:50:4e:15:c0:4d:69:79:b3:0b:
bc:3e:f9:82:c0:09:3f:cb:1a:a1:36:c8:75:48:ae:f8:44:3d:
94:a0:c6:92:94:88:88:80:53:88:00:6c:16:2e:f9:b3:2d:00:
b7:26:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:01 2024 by rpki-client on console-ams.rpki-client.org