Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/B0WvQkNwIH0Nb1XZb7avgWasbiI.roa
File: B0WvQkNwIH0Nb1XZb7avgWasbiI.roa (raw, json)
Hash identifier: XSzvWg9E6TkjKrqJmNqPCQQbk021V7Yn276lrQzyKWg=
Subject key identifier: 07:45:AF:42:43:70:20:7D:0D:6F:55:D9:6F:B6:AF:81:66:AC:6E:22
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0186BCC2FCD27A9D5E9762398CFCF3BF37F2
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/B0WvQkNwIH0Nb1XZb7avgWasbiI.roa
Signing time: Tue 07 Mar 2023 15:49:00 +0000
ROA not before: Tue 07 Mar 2023 15:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 81.28.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:c2:fc:d2:7a:9d:5e:97:62:39:8c:fc:f3:bf:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Mar 7 15:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0745af424370207d0d6f55d96fb6af8166ac6e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:4c:10:ac:49:bb:98:a6:11:c9:04:92:6c:
ec:37:54:c1:69:e1:28:82:dc:a8:0f:06:21:13:11:
5b:9b:88:10:b6:be:9e:55:0c:fa:a9:33:d1:76:4f:
88:95:4b:ac:0c:72:02:72:f5:40:e0:5a:2e:c1:7a:
02:1f:59:3c:df:73:b5:03:48:12:f1:c8:39:6a:45:
18:f7:6e:66:7a:db:ca:a4:20:f5:3b:40:3e:8e:c4:
87:ed:50:fc:82:ae:69:cd:14:ef:56:d6:15:67:b1:
e5:a5:95:2b:ef:b2:ed:0d:ad:51:a8:f6:80:85:41:
ec:fc:94:46:bb:fa:d1:ae:8e:65:8b:0f:47:a9:58:
ef:fa:c0:60:a0:71:54:8f:f4:51:58:40:b0:c3:65:
92:9d:24:df:aa:3d:03:9f:5f:57:4e:38:61:a8:e8:
20:46:f4:69:f9:53:8d:62:31:cb:1a:44:b5:81:3a:
c4:de:69:0f:90:83:7a:cd:0d:25:27:0c:5f:ae:9f:
e0:1f:13:d8:50:d3:a6:57:7b:19:fc:5d:c9:5a:53:
3c:e3:81:f6:d0:49:b5:8f:c7:1d:e8:ae:28:a1:24:
b6:67:b0:a7:d6:9c:f9:7c:9c:af:3e:20:ef:ba:bb:
8d:8a:27:c0:18:ff:9e:0f:10:2b:ea:d0:1e:48:6f:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:AF:42:43:70:20:7D:0D:6F:55:D9:6F:B6:AF:81:66:AC:6E:22
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/B0WvQkNwIH0Nb1XZb7avgWasbiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.252.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4c:ef:91:1e:f6:bc:05:e4:34:18:c4:b3:d1:ef:6b:98:ec:
f3:10:d3:9c:a5:54:6b:db:cb:44:87:f5:47:ae:b8:dd:a8:b1:
97:20:5c:94:7e:ba:82:02:fa:a6:1d:43:f5:a0:e1:3e:9e:e8:
40:a9:2f:a1:c8:d6:62:59:34:e9:40:6a:9f:e6:44:83:d5:3a:
66:db:f4:53:40:25:af:a1:71:2c:95:3e:08:92:7d:b3:cc:45:
d7:89:55:87:1c:21:e2:93:fd:8c:d2:5a:3f:79:41:62:6d:49:
a8:e6:26:c7:8d:dc:05:46:96:27:16:26:94:6e:3d:d8:b0:5d:
f2:6c:0e:85:c6:e1:aa:61:c3:ce:88:60:b4:27:2f:39:31:d8:
47:90:b4:1c:a0:b4:76:5d:ac:f0:f3:ad:86:5e:f1:5e:72:0b:
61:b5:8f:10:9b:04:b0:dc:6e:de:cf:cb:da:22:6a:d9:68:2c:
7b:16:f2:f0:6d:99:8a:6a:91:b5:e5:65:fe:1d:83:57:0e:e5:
b0:39:7e:a7:ce:74:48:42:89:01:ca:9d:b9:c2:36:57:c6:a3:
a7:6c:08:c8:2c:ca:39:71:49:0c:2f:08:d2:7e:6a:a8:7d:8d:
ab:49:df:5f:17:b4:ed:ab:e1:ec:19:9a:7a:6d:68:74:34:7f:
18:e7:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org