Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/bt4DB5adGJ5pTNkqvcrdHztltf0.roa
File: bt4DB5adGJ5pTNkqvcrdHztltf0.roa (raw, json)
Hash identifier: 0bUkr9ivYnbslF7aOY83FkzaPIGBtTN2n89wWMLvpXo=
Subject key identifier: 6E:DE:03:07:96:9D:18:9E:69:4C:D9:2A:BD:CA:DD:1F:3B:65:B5:FD
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 018B855EABE5B75BEC403D27DEBE74A52E8C
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/bt4DB5adGJ5pTNkqvcrdHztltf0.roa
Signing time: Tue 31 Oct 2023 10:54:15 +0000
ROA not before: Tue 31 Oct 2023 10:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201274
IP address blocks: 185.79.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 31 Oct 2023 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:5e:ab:e5:b7:5b:ec:40:3d:27:de:be:74:a5:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Oct 31 10:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ede0307969d189e694cd92abdcadd1f3b65b5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:b0:ca:e8:6d:d7:73:b2:cd:a4:2b:9f:4c:
ec:5c:36:ee:4f:e9:78:a5:76:21:4f:46:b7:1e:ac:
2a:fa:75:df:a6:48:24:cc:7b:f5:59:d3:bb:98:06:
24:3c:16:89:04:98:1f:96:86:94:13:31:60:8e:41:
60:3f:1a:2c:d3:2b:e9:c9:1c:df:3a:03:52:b6:ad:
cd:21:b9:79:67:b1:ac:79:1e:e8:e2:22:c0:ca:3b:
ca:26:30:5d:c0:7c:ee:f7:18:f9:c5:ba:48:44:78:
52:d8:6a:0d:51:fa:e2:7d:6d:dc:ea:e9:c2:32:d1:
85:92:f8:c3:a2:a3:d7:73:69:4f:cc:a9:9f:6e:ac:
41:ea:34:39:ef:7f:f1:91:0b:bd:df:a3:86:ab:40:
2a:76:2b:cd:8e:72:51:c4:a7:da:cb:c2:aa:e1:e1:
14:aa:7e:f5:95:b8:26:10:20:7c:20:9a:8f:0f:56:
d7:bc:f3:43:44:b6:fd:37:c8:30:0f:aa:1b:61:09:
cb:64:e7:59:0f:78:4e:e4:ff:7a:f3:16:0a:50:0d:
52:b9:dd:f5:de:1d:0f:4d:91:4b:53:84:55:24:d9:
90:2d:b2:5b:cd:63:f2:c3:76:75:c2:87:17:2d:bd:
94:8c:03:bd:80:75:15:c2:b9:04:e5:91:fa:c5:c6:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:03:07:96:9D:18:9E:69:4C:D9:2A:BD:CA:DD:1F:3B:65:B5:FD
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/bt4DB5adGJ5pTNkqvcrdHztltf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.12.0/22
Signature Algorithm: sha256WithRSAEncryption
49:3c:b1:5c:81:6f:01:14:ad:3c:09:57:5d:74:d5:85:5d:d6:
db:15:e3:07:10:67:2b:ab:57:b2:21:a9:1f:3b:0a:cb:aa:dc:
0d:01:63:9e:bb:1b:4e:6f:7e:16:d4:f6:68:12:7a:ba:6d:19:
78:1f:f3:d1:f5:62:a4:36:d8:38:ef:b2:36:cf:e5:32:ac:98:
e6:a9:95:4a:75:32:c0:a5:24:44:b9:d8:10:f5:81:8a:85:70:
ac:3c:ae:d0:7a:0d:59:b2:d4:9d:91:6a:5a:03:71:8e:ed:58:
c9:3e:d2:4f:7e:ab:ae:9b:6b:ad:fd:76:f4:9e:4f:fa:6a:d2:
fb:eb:f4:9b:e6:ae:fe:6d:5e:df:4b:95:2f:57:e0:3a:f3:a1:
fc:e9:4a:9c:a5:9d:69:75:fb:61:6e:26:c0:ce:ff:65:f3:f9:
b4:ce:59:24:96:4f:b1:d5:d7:7a:92:48:94:44:f0:3e:f6:a1:
23:22:01:73:a5:92:6a:1a:c6:f7:a1:90:ec:aa:7a:14:23:2b:
de:db:8f:7e:05:70:dd:37:00:93:b2:f3:ca:86:0b:26:d0:d2:
6b:29:0b:64:a9:80:24:cd:3a:b1:a6:33:0a:c6:50:23:74:71:
f0:2d:a3:82:de:f1:d4:b7:20:85:8d:36:e7:b3:1d:d2:b8:c1:
53:8f:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org