Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/bxJP17dT4LTxGcJMWuBQj9oABJg.roa
File: bxJP17dT4LTxGcJMWuBQj9oABJg.roa (raw, json)
Hash identifier: y7Ie5goeE+zR+pzk2bJP2HtNXRzLoV/WNBVKb2/9WWw=
Subject key identifier: 6F:12:4F:D7:B7:53:E0:B4:F1:19:C2:4C:5A:E0:50:8F:DA:00:04:98
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01887B6EB118924E4DD69A6EA8539A26E15D
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/bxJP17dT4LTxGcJMWuBQj9oABJg.roa
Signing time: Fri 02 Jun 2023 09:27:11 +0000
ROA not before: Fri 02 Jun 2023 09:27:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198711
IP address blocks: 45.95.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 06:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:6e:b1:18:92:4e:4d:d6:9a:6e:a8:53:9a:26:e1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 2 09:27:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f124fd7b753e0b4f119c24c5ae0508fda000498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:f7:70:72:b0:63:06:c3:d3:be:59:da:79:
b8:fd:a6:0e:77:20:93:bd:90:88:f4:1c:c4:f8:10:
4d:2b:7e:01:de:2b:ed:4c:db:96:49:50:c4:8b:f9:
ee:de:0c:71:e7:69:11:42:d1:9f:32:11:7a:8f:c0:
aa:e9:bd:e2:15:1e:74:21:df:65:d3:5d:bb:d3:2f:
8c:34:9a:44:d9:ed:33:7e:b2:22:53:07:e1:df:b0:
f1:6f:77:ed:5c:97:9c:a2:f0:7c:00:63:50:43:da:
43:78:1d:97:9b:46:06:5a:1e:e8:fa:df:e1:22:a4:
05:a0:55:ed:f1:db:db:82:0b:eb:81:af:c4:a7:fc:
c4:72:ea:9e:9c:3c:f4:a9:cf:65:5c:eb:08:d2:00:
82:fb:cb:05:5b:bb:2f:1f:c8:bb:67:7a:2e:d1:81:
11:87:8e:ee:60:b0:99:cb:aa:46:4a:7d:aa:80:1e:
ac:cd:79:45:52:97:9f:bc:e2:52:ae:7d:99:3e:b2:
0b:96:6b:3f:59:a6:df:d3:4e:ae:5d:5d:be:e2:6d:
a4:d9:62:e7:7e:6b:70:d8:48:e1:37:50:85:cc:b1:
d9:34:41:3b:9b:29:cf:bc:23:07:f8:69:42:71:9f:
0e:17:e0:11:16:44:fa:29:fa:9a:65:be:1c:3a:bd:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:4F:D7:B7:53:E0:B4:F1:19:C2:4C:5A:E0:50:8F:DA:00:04:98
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/bxJP17dT4LTxGcJMWuBQj9oABJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:59:15:e2:b8:d4:77:91:a1:31:80:6d:27:fd:4c:84:24:2f:
15:f5:20:fc:16:9a:bc:d1:c6:05:26:f9:c8:71:6b:d3:42:65:
22:50:4b:e9:0b:25:db:c9:c9:62:c2:f8:f3:33:c7:54:47:1e:
9d:de:00:b2:fb:c6:f4:f1:97:b2:f0:20:85:b3:6a:fb:90:1c:
4e:32:41:ab:13:29:ba:f5:80:4b:dc:af:65:d8:83:4a:7e:b2:
e9:e9:e4:a4:cf:38:8a:00:80:66:b7:87:2b:6a:39:8f:2a:e0:
6f:e8:16:7f:2f:64:87:cc:a2:ff:05:51:8b:e4:08:69:aa:b2:
99:73:97:f1:7e:25:74:5e:08:49:81:34:21:b8:44:b6:33:e4:
56:6b:bc:8a:53:6d:8b:46:5d:37:9d:d4:c8:3a:5c:a3:21:f3:
f2:6e:e2:58:24:cf:21:55:0c:ab:c1:71:a2:d3:53:14:72:5e:
87:44:9f:b6:bc:d9:9c:84:83:cf:ec:b5:0e:be:0a:6a:45:66:
e7:83:5a:cf:21:fe:7d:18:15:ba:f9:95:ad:a0:1c:1c:31:d5:
1d:4f:1e:e5:e0:02:53:81:8e:83:fa:2e:49:56:b7:43:ec:1a:
7b:88:52:d0:1f:9d:d4:9b:ff:ba:8c:97:e5:af:0c:31:49:cd:
57:56:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org