Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/BNtRNTZQw5beWI3UVp8wl_SHTb8.roa
File: BNtRNTZQw5beWI3UVp8wl_SHTb8.roa (raw, json)
Hash identifier: fs4GZ8Byv31fFo0t06YN2O3k3ThzC9tyD5n3gYnFsGQ=
Subject key identifier: 04:DB:51:35:36:50:C3:96:DE:58:8D:D4:56:9F:30:97:F4:87:4D:BF
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01856D7873471032F2869597109C8CBB1CD9
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/BNtRNTZQw5beWI3UVp8wl_SHTb8.roa
Signing time: Sun 01 Jan 2023 13:14:48 +0000
ROA not before: Sun 01 Jan 2023 13:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50796
IP address blocks: 194.180.116.0/22 maxlen: 24
192.166.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 09:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:73:47:10:32:f2:86:95:97:10:9c:8c:bb:1c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 1 13:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04db51353650c396de588dd4569f3097f4874dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:3e:b9:d1:3f:00:52:96:4e:8d:42:65:4c:
e0:74:f7:fb:21:b6:08:23:ae:5b:70:82:f9:5e:d9:
16:68:5c:27:41:18:13:72:76:a4:6d:57:14:d5:a0:
96:09:f0:a4:f9:11:c4:84:9e:fc:62:86:3b:0b:e1:
14:ed:26:38:95:0b:d5:04:79:09:e2:bf:a0:c8:0f:
b9:de:5a:64:2c:d7:49:17:65:72:86:c2:ce:b4:3d:
d9:f5:2d:f7:0c:d4:60:bc:bd:62:07:1a:4b:26:3b:
f7:27:09:ff:73:b4:48:23:9c:c5:24:53:51:0e:6a:
dc:c3:27:9f:6e:9c:04:f1:00:aa:73:d2:11:db:5f:
c1:b5:1f:40:3a:77:89:75:d7:a4:2b:14:a0:ac:62:
e4:98:cf:b1:5d:f4:44:3e:50:37:d1:fd:02:68:a4:
6e:c3:e0:16:65:5b:c5:23:db:a8:5f:4b:18:fa:73:
4c:22:ef:77:77:cc:fe:06:4a:64:cb:41:c1:ba:af:
75:c4:b5:63:25:e4:94:6d:36:a5:5f:ec:65:2b:bd:
74:9e:cd:40:fb:01:54:98:36:65:9a:ee:03:ae:dc:
2f:ff:66:45:07:28:89:26:99:29:fa:88:50:de:5d:
e3:b3:01:7d:0b:fd:23:f2:e3:17:60:2b:43:17:9b:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:51:35:36:50:C3:96:DE:58:8D:D4:56:9F:30:97:F4:87:4D:BF
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/BNtRNTZQw5beWI3UVp8wl_SHTb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.204.0/22
194.180.116.0/22
Signature Algorithm: sha256WithRSAEncryption
67:fd:26:1b:ba:52:d1:b1:0f:6b:55:3a:e5:7d:5a:0a:4f:37:
57:95:e1:79:33:00:af:89:d7:59:d6:46:8f:97:ab:18:fa:6e:
13:3e:f9:55:25:33:ab:25:26:e3:8e:2c:f4:ca:75:f9:ba:e9:
d1:7e:b6:09:c4:1a:12:b7:8a:f9:14:8b:63:0e:e0:89:67:68:
50:f3:f5:1b:0a:4d:96:81:3a:97:bd:6c:dd:a8:06:81:f1:32:
fa:c7:de:28:61:b8:6c:50:96:69:16:d6:c8:a5:e3:fb:27:c7:
84:3c:76:2d:55:fb:fe:16:80:e6:0f:95:83:8c:b9:51:f4:cd:
b8:13:0d:33:20:1a:03:d0:81:09:22:38:f3:50:b2:3a:77:30:
f1:fe:c5:ba:ee:20:83:b8:6f:e7:eb:e9:ac:e4:7c:c2:06:80:
fc:05:98:24:68:82:dd:94:1a:0c:dd:a0:7d:ae:ae:f3:a2:b0:
54:78:45:47:9f:40:69:ca:94:44:5c:07:50:71:fb:5f:62:91:
1f:60:c1:4a:3e:23:81:c8:3a:c9:1f:d2:fe:9b:09:f2:ce:b7:
1e:16:31:5b:12:74:4e:4f:91:56:a8:82:a6:e3:80:e8:41:25:
23:9c:b6:a3:19:8b:d1:2d:b1:fc:d9:6e:6d:b7:df:05:d3:fc:
f6:fb:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:27 2024 by rpki-client on console-fra.rpki-client.org