Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/BzoCXjE03fcGN6HPhKuypmFNxds.roa
File: BzoCXjE03fcGN6HPhKuypmFNxds.roa (raw, json)
Hash identifier: VmbX7EnJ8O2wSp1mnVW/PEbP69Rp2we2v771Hovqw8Q=
Subject key identifier: 07:3A:02:5E:31:34:DD:F7:06:37:A1:CF:84:AB:B2:A6:61:4D:C5:DB
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01856FCBB114F18051AD93A7452B3A658383
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/BzoCXjE03fcGN6HPhKuypmFNxds.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 185.143.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b1:14:f1:80:51:ad:93:a7:45:2b:3a:65:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=073a025e3134ddf70637a1cf84abb2a6614dc5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:1b:2d:03:92:bd:3f:11:b0:ff:c4:23:33:
b2:37:63:dc:29:f3:73:3e:7c:e2:73:3c:e6:27:8b:
3a:8e:b6:78:9d:ee:5d:11:f8:58:3f:05:1c:b7:79:
9d:72:0d:5b:bf:89:f0:24:83:0e:88:3d:36:0d:4f:
6c:e4:e8:7c:47:1f:ef:5e:7a:70:10:c1:f0:54:50:
61:f2:8c:78:fb:8d:1f:1f:e6:e5:3d:7b:ff:08:3a:
51:1a:a3:7e:ec:29:d5:57:df:d5:01:8e:42:c3:7b:
14:ff:55:19:ef:d3:ac:59:88:27:d7:27:d3:63:d7:
fe:60:73:1e:c2:93:9e:77:3a:5e:fb:1e:24:03:51:
73:33:bb:88:fb:40:b2:f8:f2:b7:a7:84:c6:83:83:
e9:36:86:f9:81:4e:07:4d:14:c1:9c:ba:3c:4e:02:
13:34:e8:ad:65:c2:c6:41:b9:cc:12:50:68:8e:5c:
1e:10:f6:4b:fa:6f:ca:6d:74:7d:f3:ec:11:a9:66:
1f:42:94:e3:49:24:d4:0d:61:8b:28:65:e6:2c:15:
39:f1:2c:27:16:fd:3c:57:55:75:45:d0:88:0a:0f:
37:fb:f6:6e:aa:10:a1:bf:40:6f:3d:98:32:fd:58:
a0:c6:ac:28:2c:01:be:92:b2:e6:b3:27:c5:4f:f7:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:02:5E:31:34:DD:F7:06:37:A1:CF:84:AB:B2:A6:61:4D:C5:DB
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/BzoCXjE03fcGN6HPhKuypmFNxds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:82:61:66:63:cc:7f:93:30:9c:ed:61:e7:3d:5a:41:e0:14:
59:b1:f5:df:4e:cc:31:b7:98:3f:ad:3c:00:5a:6d:29:3a:09:
cd:36:bc:e9:62:e5:13:51:fd:b4:bd:58:be:56:66:78:cb:ea:
40:6c:f3:db:4f:35:4c:64:28:6f:6f:14:43:b9:b3:14:41:fb:
33:0f:05:54:dd:ea:bd:62:f3:a8:18:14:b7:4f:c4:cf:04:d5:
f6:4d:a9:f1:f8:fb:66:85:61:9b:d3:6a:e0:94:9a:4c:7e:40:
0d:d0:6e:c6:7d:27:4b:5a:85:de:ee:60:4a:c8:1f:35:38:df:
60:66:97:92:37:0e:f4:da:f2:a7:c7:d5:7b:b5:20:95:0e:05:
c7:68:39:61:77:6c:2d:0f:3a:16:48:13:f1:ba:c8:7b:41:7e:
d6:a1:3a:3c:99:34:d2:f1:ad:fb:10:34:b4:b2:3b:45:f3:07:
64:c8:54:94:35:67:0d:de:1f:b2:ef:86:b2:2f:5d:1e:94:36:
0d:04:51:bf:02:35:0c:4d:ef:ce:77:72:0a:db:d1:e5:f0:31:
95:45:6e:93:82:98:ca:4d:23:3c:01:4e:36:f0:87:36:49:c1:
ad:0b:0d:5d:32:14:f1:0c:f6:b0:2d:c8:e5:2e:e8:19:08:c7:
e7:df:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org