Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/B0ZtcBw6-jGqjabotVTnUayNUI8.roa
File: B0ZtcBw6-jGqjabotVTnUayNUI8.roa (raw, json)
Hash identifier: KwGwi0pAVoJoc8nzEP1Dzmc199CCRxYGXHpnLHUdHv4=
Subject key identifier: 07:46:6D:70:1C:3A:FA:31:AA:8D:A6:E8:B5:54:E7:51:AC:8D:50:8F
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 01856D4AB00D9BE5511CD54CBFA0B39C1197
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/B0ZtcBw6-jGqjabotVTnUayNUI8.roa
Signing time: Sun 01 Jan 2023 12:24:49 +0000
ROA not before: Sun 01 Jan 2023 12:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21373
IP address blocks: 193.53.50.0/24 maxlen: 24
193.53.49.0/24 maxlen: 24
193.53.48.0/24 maxlen: 24
193.53.51.0/24 maxlen: 24
193.53.56.0/23 maxlen: 24
193.53.55.0/24 maxlen: 24
193.53.54.0/24 maxlen: 24
193.53.53.0/24 maxlen: 24
193.53.52.0/24 maxlen: 24
193.53.58.0/23 maxlen: 24
193.53.63.0/24 maxlen: 24
193.53.62.0/24 maxlen: 24
193.53.61.0/24 maxlen: 24
193.53.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b0:0d:9b:e5:51:1c:d5:4c:bf:a0:b3:9c:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Jan 1 12:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07466d701c3afa31aa8da6e8b554e751ac8d508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:26:7b:de:3e:a3:22:14:b6:e3:5b:75:af:
b1:a9:bd:1f:14:82:24:47:ba:5c:f5:46:57:b3:07:
70:f1:12:bc:dd:ee:83:08:2e:a1:4e:e4:39:e6:2f:
5a:85:60:f2:4a:eb:6c:6b:92:bb:5c:76:fd:db:61:
e3:42:11:bb:16:ce:6a:56:bd:47:69:e2:c4:b3:1b:
ea:c5:01:16:b0:a5:d7:e5:a8:e2:1b:0b:01:80:00:
82:5e:c7:e0:12:29:4c:dd:4e:69:2d:54:7a:a7:f7:
ab:e5:ad:e2:d3:9a:97:41:e9:46:f3:fd:a1:4c:16:
2c:81:fd:59:49:ef:55:79:85:8d:f0:0c:e7:58:16:
cc:2e:29:d7:7d:4e:4e:4d:39:0f:0e:ea:3d:5c:0b:
2d:c6:ad:76:11:0c:06:68:ca:6f:7a:bd:a8:28:ff:
2c:8c:37:a9:40:04:8d:47:94:13:a9:91:9d:52:3f:
ce:44:87:4a:c8:64:35:0a:cc:1b:64:a0:93:0b:60:
b8:bb:10:ec:77:0e:0b:b7:30:6a:eb:e2:cf:cb:49:
de:54:53:1d:df:51:b0:c8:75:ca:15:e0:7e:c4:a8:
1d:92:01:c1:f9:01:02:a7:55:dc:08:aa:ed:f0:51:
3f:f2:f1:93:c1:45:d2:56:0b:9b:0d:10:12:8b:84:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:46:6D:70:1C:3A:FA:31:AA:8D:A6:E8:B5:54:E7:51:AC:8D:50:8F
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/B0ZtcBw6-jGqjabotVTnUayNUI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.48.0/20
Signature Algorithm: sha256WithRSAEncryption
37:f6:ba:d1:f3:57:0e:1a:f5:2f:c6:94:91:33:fe:87:bb:0b:
c1:2d:b1:1d:1e:8a:3a:d6:9a:fb:f5:59:0c:ef:27:ef:34:ad:
0e:63:ee:ec:0d:85:aa:86:9c:4d:56:45:60:f1:8e:c8:03:a3:
9d:7d:48:7a:b3:bd:e2:ac:77:5c:5e:d5:f5:39:6a:b9:cd:95:
b2:8b:f6:61:f0:7f:4a:5f:11:df:e3:78:63:86:bb:bb:f5:ed:
6d:63:bf:b6:6f:44:7a:74:9d:0e:c8:5b:4c:6d:a1:b5:2c:b0:
b8:69:3d:20:33:52:32:ee:9e:c2:73:9b:b2:93:a5:3b:e3:c5:
2c:65:c7:90:02:eb:80:9c:c9:cb:85:66:a7:b1:c4:d2:bd:e2:
ec:1f:df:92:ad:2a:c9:c5:4c:a6:2e:7a:76:8b:0c:ac:a4:34:
61:62:ba:0d:86:94:a9:a8:93:a8:3c:9b:fa:d6:8b:cf:ad:dc:
93:f1:98:5f:37:74:18:77:3a:69:f3:78:14:05:1b:b7:1c:75:
16:62:06:88:56:b4:05:33:c7:f4:c3:46:f4:ca:86:0e:ef:6b:
58:c6:3b:46:40:02:e9:c5:c1:31:79:64:59:f7:5f:cb:ff:8c:
a5:db:ce:82:27:d6:38:1d:a3:4b:33:43:dd:26:d8:f2:9d:f6:
90:e5:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org