Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/buz-ZBdcOCD_Ya4kbQi9mlmNqPU.roa
File: buz-ZBdcOCD_Ya4kbQi9mlmNqPU.roa (raw, json)
Hash identifier: DMRfaFyFT6fnBIL9N7rsufH2T+0TeSqd3DAlXJLh7bI=
Subject key identifier: 6E:EC:FE:64:17:5C:38:20:FF:61:AE:24:6D:08:BD:9A:59:8D:A8:F5
Certificate issuer: /CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Certificate serial: 0187ED15DB83CF37FD1904DB964EE952C807
Authority key identifier: B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/buz-ZBdcOCD_Ya4kbQi9mlmNqPU.roa
Signing time: Fri 05 May 2023 18:04:05 +0000
ROA not before: Fri 05 May 2023 18:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.19.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:15:db:83:cf:37:fd:19:04:db:96:4e:e9:52:c8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Validity
Not Before: May 5 18:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eecfe64175c3820ff61ae246d08bd9a598da8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:cb:fa:ca:9d:3c:09:b1:c1:7a:7c:4f:b1:
3d:52:ee:4d:7f:b8:63:94:04:3e:c6:96:aa:cc:b6:
3d:d6:42:68:da:25:35:5e:7a:2a:96:58:24:df:3c:
9e:33:13:16:8b:d3:3a:18:b0:86:58:ac:87:9e:69:
71:61:ed:a3:2c:5d:fe:3b:7b:33:52:50:2e:06:fb:
20:39:ba:e8:02:2a:09:83:ee:0b:14:a8:b7:55:99:
fc:53:09:9e:2a:91:1d:0c:e4:43:a9:15:e0:f3:38:
b6:37:19:7f:91:5a:a1:be:80:7a:45:29:3a:f9:84:
57:7a:e4:63:3c:b5:af:48:5d:c2:61:dc:fa:2d:72:
a9:c9:36:49:66:80:7e:d5:6c:95:8a:06:03:4c:9b:
05:13:25:a7:5a:14:fe:81:d2:11:39:36:b2:4c:ce:
ec:d1:ef:a2:ba:c7:1c:ce:cf:8c:9f:60:f2:22:45:
7c:06:cb:37:48:fc:46:3c:87:8d:c1:ed:30:30:83:
a4:9c:9a:68:b7:ab:05:0a:5d:de:e1:2e:4b:79:b0:
ba:d1:1d:89:0d:73:96:f2:d9:e1:45:15:8c:d2:ac:
d0:ce:5a:d7:ae:76:fa:88:73:24:c9:94:f9:eb:b0:
03:28:8b:55:6c:f9:37:3d:d3:ef:36:8c:d1:7c:5e:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:FE:64:17:5C:38:20:FF:61:AE:24:6D:08:BD:9A:59:8D:A8:F5
X509v3 Authority Key Identifier:
keyid:B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/buz-ZBdcOCD_Ya4kbQi9mlmNqPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.191.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fd:ac:53:87:be:1c:af:b2:f7:b6:89:60:a4:1f:60:a6:0f:
4e:ca:30:4d:fc:b3:f8:4a:e1:b8:77:4f:cb:1c:98:bc:93:77:
fb:61:11:b7:9d:a1:eb:60:6a:49:36:45:1d:e9:5c:2b:8a:cd:
cb:f8:6c:76:5b:46:b8:93:80:a2:87:a3:a8:0b:17:1a:c3:3b:
0e:ea:a8:3e:d5:1c:22:41:19:27:25:55:68:a9:00:d2:60:a7:
7a:6e:0b:df:7a:22:12:a0:94:af:22:5d:3e:5f:5c:a5:ec:88:
2c:8a:4f:63:58:28:cd:2d:f1:46:d3:29:db:98:9c:7b:bb:1c:
7b:4b:9d:d2:78:bd:d5:cb:e1:22:ad:0d:5a:3a:79:ed:8a:fb:
0f:b7:8f:5c:b8:51:24:a7:23:75:e5:c4:45:9f:7a:e1:62:dc:
f4:51:bb:12:40:ce:b2:6f:91:13:34:dd:33:52:36:f0:54:b4:
2c:2d:fd:60:5b:30:6e:fd:ef:69:a7:41:93:d0:49:f2:b5:bc:
95:2e:bc:f0:62:66:44:10:f0:0f:c6:72:c1:7a:6e:08:f3:3e:
e5:20:83:3e:fb:eb:a3:d5:95:c0:3f:24:53:03:00:7f:2d:92:
1e:e5:fd:2e:8b:07:ad:b4:7f:2d:05:5c:29:b6:31:68:ae:3a:
db:59:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:34 2024 by rpki-client on console-ams.rpki-client.org