Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BJ5_fqrb1Evqs-NfRWYNqKbfbr8.roa
File: BJ5_fqrb1Evqs-NfRWYNqKbfbr8.roa (raw, json)
Hash identifier: +1bJicR5jzjZNbbgffSbeF/mQmz2cEGBN9L/E9b4D98=
Subject key identifier: 04:9E:7F:7E:AA:DB:D4:4B:EA:B3:E3:5F:45:66:0D:A8:A6:DF:6E:BF
Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial: 0185700B8F277CCF5902EF1E3628DC9A6F7E
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BJ5_fqrb1Evqs-NfRWYNqKbfbr8.roa
Signing time: Mon 02 Jan 2023 01:14:43 +0000
ROA not before: Mon 02 Jan 2023 01:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47190
IP address blocks: 195.216.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:8f:27:7c:cf:59:02:ef:1e:36:28:dc:9a:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
Validity
Not Before: Jan 2 01:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=049e7f7eaadbd44beab3e35f45660da8a6df6ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:25:18:af:0f:c6:71:f0:96:05:44:51:57:
3c:63:01:ef:a4:ec:d4:31:0b:17:2f:98:47:d7:1f:
fd:b3:13:0f:7a:9c:72:23:3a:5a:6c:59:85:d1:48:
b9:03:d0:15:e4:54:0c:66:6c:83:c4:ef:96:82:c2:
fb:21:e9:2f:e6:0f:85:f4:7d:da:31:3d:a1:d4:a4:
ef:08:e4:c4:f0:66:1c:d9:18:38:04:a5:8d:49:82:
28:ee:fd:92:88:2e:ef:49:01:58:ca:e6:29:47:dd:
9c:c7:12:31:39:42:3d:db:b1:89:2c:21:7a:6a:52:
37:bb:83:b6:77:5e:34:9d:ad:df:3a:d5:7d:f6:15:
14:3c:67:a8:8f:c2:35:b8:49:e7:a1:59:59:ee:fc:
cd:0c:d5:52:e4:1c:b8:1a:df:98:d5:58:c2:7c:65:
59:7a:4b:7a:30:7b:03:e7:e8:7d:da:55:57:42:33:
e4:b4:02:1d:a4:17:af:23:55:ad:99:dc:73:97:b4:
d1:3c:78:54:13:9b:8d:b7:b4:e4:d4:7d:a9:27:ab:
f5:44:3d:18:38:fd:05:a2:f2:00:b1:c7:c7:8b:81:
b3:c5:69:42:97:51:78:98:10:76:02:14:0e:15:c1:
2b:f5:bc:da:87:d4:e5:c4:ff:af:45:c5:69:30:5a:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:7F:7E:AA:DB:D4:4B:EA:B3:E3:5F:45:66:0D:A8:A6:DF:6E:BF
X509v3 Authority Key Identifier:
keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BJ5_fqrb1Evqs-NfRWYNqKbfbr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.232.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5a:81:e0:51:1d:a4:2c:c6:d0:35:2e:75:00:15:94:e4:b3:
15:54:5d:19:a5:7e:64:50:d0:97:d1:9c:4f:e4:70:6c:f7:ec:
9e:fa:49:30:62:92:0f:96:f0:14:fe:28:95:8d:44:19:2c:e6:
73:6a:2f:ed:8d:b4:fc:1a:cd:4d:06:1f:e1:74:83:6b:21:24:
0c:7d:13:e4:b7:d9:86:e6:f7:c8:5e:9b:c6:11:10:90:a7:ba:
8e:ed:89:be:5f:c1:31:e8:c8:66:cf:98:82:7d:67:74:64:01:
c4:9c:a5:d8:81:f0:70:1f:d6:81:49:8e:b4:e2:63:e0:50:31:
90:2c:10:f5:d7:47:e5:dc:ae:dc:1d:fc:8d:b8:96:92:79:ff:
e8:ba:d2:36:7a:6f:a0:a1:45:74:56:26:a7:7b:52:32:2d:e2:
f0:71:66:2b:4b:74:30:8e:8e:36:55:76:c8:50:3c:5f:f2:3d:
78:ed:76:8b:03:54:b8:fa:bc:6f:6a:d8:5f:1b:be:ff:43:e8:
b1:e3:14:86:4e:48:90:ff:d3:c8:85:c5:8a:c5:26:74:f5:42:
af:85:ac:90:5c:62:ad:83:93:1d:7b:5b:d8:fa:96:d5:4a:82:
c7:87:bb:36:7c:09:3a:08:4b:d3:10:a0:f0:03:a6:fd:d6:1c:
86:ba:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:03 2024 by rpki-client on console-fra.rpki-client.org