Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/BKeKEzcuKD9A_fHIPPWRGzN9tlg.roa
File: BKeKEzcuKD9A_fHIPPWRGzN9tlg.roa (raw, json)
Hash identifier: X4c37CTtPpdceS3lF6ssNgJofmjR0Vegwg5cnDacosM=
Subject key identifier: 04:A7:8A:13:37:2E:28:3F:40:FD:F1:C8:3C:F5:91:1B:33:7D:B6:58
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 018B9E1E1F29CC6085A0340099CF568C7B77
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/BKeKEzcuKD9A_fHIPPWRGzN9tlg.roa
Signing time: Sun 05 Nov 2023 06:14:16 +0000
ROA not before: Sun 05 Nov 2023 06:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.138.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:1e:1f:29:cc:60:85:a0:34:00:99:cf:56:8c:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Nov 5 06:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04a78a13372e283f40fdf1c83cf5911b337db658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:eb:a7:97:3f:26:ef:be:d5:b3:67:d1:a1:
d5:52:31:74:51:32:f9:7c:29:8b:95:e9:18:1c:d7:
2f:e1:f3:18:4f:7b:30:c3:05:85:63:a8:82:2c:d8:
79:be:b8:4b:0a:03:88:fc:5e:e2:75:a2:82:2c:92:
cb:c7:d9:aa:23:a9:aa:01:05:d5:18:e6:77:94:11:
51:bf:4d:3e:17:48:9e:cc:85:12:00:d2:32:8c:d1:
c8:b0:34:58:a8:40:55:61:f0:84:0f:57:50:e4:fd:
b1:39:b9:42:9e:fc:bf:bd:07:98:01:66:03:79:59:
2c:8c:16:f5:4c:cb:b1:f2:34:9a:78:43:fe:ce:df:
2d:fe:93:57:fb:c3:a0:47:7c:0d:a2:40:f8:3a:dd:
ae:93:ff:12:95:43:c4:bb:8d:21:a1:80:ba:1e:74:
43:6f:1c:18:a3:c4:f2:11:69:c5:4e:b6:03:ad:3e:
69:57:b0:bb:1a:39:ef:0d:5a:34:d5:9e:17:c0:9f:
54:78:1f:c0:da:bc:17:27:fb:0b:16:77:2f:16:1c:
e4:e6:e3:3e:38:36:0a:f2:7c:09:5d:d5:ca:9f:a6:
a7:90:39:6f:18:c9:6b:46:83:54:e0:97:22:3f:03:
dd:34:d1:bf:3d:02:af:5f:31:29:ae:9b:58:8a:5c:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:8A:13:37:2E:28:3F:40:FD:F1:C8:3C:F5:91:1B:33:7D:B6:58
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/BKeKEzcuKD9A_fHIPPWRGzN9tlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.234.0/24
Signature Algorithm: sha256WithRSAEncryption
17:86:6f:18:b7:f6:66:3f:32:12:85:82:a3:22:ec:d8:15:fb:
8f:be:57:ca:1c:89:89:a7:37:1e:f2:49:60:28:35:dd:dc:f8:
95:24:fd:9c:27:c2:13:ef:a1:25:06:ad:d7:b7:75:de:76:79:
dc:13:f7:1a:e0:c7:84:3c:4a:c5:38:b6:92:76:b7:32:78:1d:
24:4b:4b:a2:ee:bc:91:83:2b:24:15:d3:ab:a6:1b:0e:5d:04:
e0:11:98:b4:d1:31:7d:1d:ad:4a:d2:f5:4c:f4:32:fa:c0:15:
2e:43:f1:8c:35:43:d8:ac:66:2f:7e:cd:16:29:e8:fe:0e:93:
2d:f9:99:d5:8e:d5:bf:2e:a8:fa:b9:2e:a6:7b:42:8c:37:13:
b8:cd:82:28:e1:21:22:57:f1:6b:40:48:26:ee:1b:39:1f:29:
64:bb:32:cc:33:7f:f6:96:b3:a8:3b:3e:cd:9f:5b:49:dd:ed:
d6:2e:94:2b:e6:62:c2:51:12:c9:f9:24:bf:68:8d:bd:fa:17:
cc:9f:da:30:c4:cc:52:b6:57:57:d4:90:a9:67:f1:33:b5:1f:
58:9c:a8:86:06:54:f4:e2:4a:d2:f4:aa:da:22:03:14:f5:0d:
57:40:4c:05:06:b1:90:25:5f:73:0c:b0:76:48:47:74:dc:1e:
58:ef:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:28 2024 by rpki-client on console-ams.rpki-client.org