Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/BFqfMjMGNV8XY84HNbhGjBJbg-s.roa
File: BFqfMjMGNV8XY84HNbhGjBJbg-s.roa (raw, json)
Hash identifier: CPB76p+bob/eg4FmBvQm36te3ZE+8uvcJ1r3DxvxnOc=
Subject key identifier: 04:5A:9F:32:33:06:35:5F:17:63:CE:07:35:B8:46:8C:12:5B:83:EB
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 018572CCAA5D3C0816CC2FC162FA3A02A628
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/BFqfMjMGNV8XY84HNbhGjBJbg-s.roa
Signing time: Mon 02 Jan 2023 14:04:53 +0000
ROA not before: Mon 02 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.253.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:aa:5d:3c:08:16:cc:2f:c1:62:fa:3a:02:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 2 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=045a9f323306355f1763ce0735b8468c125b83eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:c3:00:d6:8f:da:a3:b4:62:95:9e:69:e1:
ac:5b:c4:6d:67:7e:ee:dd:e6:52:d3:e9:6e:f1:98:
e5:9f:c0:85:b8:93:00:39:2a:65:2c:42:05:1a:b4:
4e:89:c8:6d:9a:c3:77:b4:47:b5:67:1e:7d:db:52:
25:fc:67:e2:f2:f9:a4:d1:71:53:23:30:c8:27:c0:
ea:ff:77:c1:1f:eb:e5:88:f6:07:59:4b:ad:c0:df:
08:9c:5b:7c:91:6a:88:2f:a5:b8:8e:98:65:fe:69:
05:58:ec:54:3a:6c:e5:22:7e:d0:a6:df:45:d0:90:
0a:c3:cd:29:4f:7b:e6:88:79:3f:c0:8b:90:30:60:
b6:46:7e:a5:20:20:bc:12:0a:5e:07:ce:72:81:fe:
04:ca:aa:8a:f6:39:b6:63:7b:31:6d:ae:d2:c2:31:
07:69:c0:ec:de:d6:ea:90:ed:f6:ac:97:55:21:28:
6b:28:37:51:87:aa:a9:91:a1:8a:93:24:ca:91:12:
c7:b3:58:b9:f2:7a:71:cd:8a:5f:17:e8:ac:59:9f:
31:41:42:4b:c1:58:74:dd:f3:41:b4:3e:21:3b:c5:
03:f0:ed:f6:8d:49:0d:ca:4f:82:0d:9f:09:24:43:
7f:09:32:39:40:d0:49:8f:00:09:6c:8e:d3:6e:1c:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:9F:32:33:06:35:5F:17:63:CE:07:35:B8:46:8C:12:5B:83:EB
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/BFqfMjMGNV8XY84HNbhGjBJbg-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
df:a3:c3:3d:de:8c:1a:d2:70:48:b7:0a:60:53:c4:8a:26:6b:
a0:4b:b8:16:fd:aa:d0:3e:50:80:ce:32:17:40:4b:b2:16:81:
10:1a:b1:a1:c7:0c:69:d0:35:1b:b3:45:b0:45:d2:8c:2e:54:
1f:55:cd:de:a6:c3:75:2e:60:0e:31:9f:fe:79:53:34:d6:a3:
83:e2:d8:62:29:07:1f:d3:69:14:92:69:4e:7e:69:60:df:83:
f5:ce:85:63:5d:2b:a2:9f:5e:7f:b0:70:f5:3e:4d:ad:c6:6c:
bd:17:bd:f7:4b:03:0c:0a:d8:b8:df:7e:de:36:c2:16:ff:6a:
1d:be:a6:23:ed:3b:78:7d:84:b6:0a:2a:bf:57:1d:2e:a0:2b:
ad:ae:7d:11:56:73:b6:26:51:16:ea:0e:bd:cc:bc:72:32:98:
4b:3a:f6:d5:94:a2:de:5f:be:e4:fc:68:d9:3d:c7:f4:8a:ec:
18:28:18:62:c4:5e:bd:70:25:c5:cb:52:8e:fd:11:13:86:a7:
d7:a0:d7:79:67:8e:16:1a:82:5c:73:fd:84:c3:90:74:63:16:
97:00:67:06:ef:27:c7:d0:ca:a3:85:4f:cb:16:3f:78:22:01:
c1:61:ec:54:0b:b9:c4:62:5c:c4:b5:a8:88:0f:ef:e0:a4:55:
7f:d9:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:35 2024 by rpki-client on console-ams.rpki-client.org