Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/BCtv4Z0aoNj15acRQZyFOROJ1zc.roa
File: BCtv4Z0aoNj15acRQZyFOROJ1zc.roa (raw, json)
Hash identifier: 1zT0HaEG8AFL3wVQIAV9IsP8WE/YrcQe+fEenNGVa5k=
Subject key identifier: 04:2B:6F:E1:9D:1A:A0:D8:F5:E5:A7:11:41:9C:85:39:13:89:D7:37
Certificate issuer: /CN=eb801c6ba450c9cc4fe6ef3f060e0fa360b5d3b0
Certificate serial: 018964C05ED77CF7233040EE035047EE57F4
Authority key identifier: EB:80:1C:6B:A4:50:C9:CC:4F:E6:EF:3F:06:0E:0F:A3:60:B5:D3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64Aca6RQycxP5u8_Bg4Po2C107A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/BCtv4Z0aoNj15acRQZyFOROJ1zc.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 88.151.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5e:d7:7c:f7:23:30:40:ee:03:50:47:ee:57:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb801c6ba450c9cc4fe6ef3f060e0fa360b5d3b0
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042b6fe19d1aa0d8f5e5a711419c85391389d737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:e6:bd:22:5d:28:87:ec:b3:04:d1:96:5f:
7c:1e:fe:bf:68:cb:cf:ae:9c:4d:bb:dc:1a:b9:f0:
47:48:20:b6:54:00:8e:46:2a:08:b4:5e:b1:c0:c5:
e5:50:b7:1a:4f:57:3e:94:b9:e0:3a:2f:29:57:f9:
87:63:4a:6e:ed:d8:e4:a5:f9:11:03:8a:98:3d:95:
f7:c2:43:53:84:56:f5:ca:9a:a0:52:16:be:b2:78:
29:65:c6:49:73:f4:8b:34:92:b3:8e:ff:82:70:27:
d2:c6:bb:9f:0d:6d:d6:6b:ae:73:a1:69:d9:e3:14:
cd:0e:91:9e:e4:76:45:63:6e:63:e8:d6:4b:eb:39:
79:c9:e0:5f:8f:b0:44:12:46:75:fc:d8:fe:3f:8d:
01:45:4b:c7:a4:ef:27:3b:1d:9f:1d:ab:c3:b8:1e:
b8:8b:09:2d:03:a1:3c:42:52:2c:92:c2:cd:76:48:
ae:70:d7:18:5e:2f:02:5f:be:94:70:a1:67:17:a4:
df:01:44:88:c3:32:19:aa:47:46:34:66:5f:51:11:
70:e9:15:bc:f2:da:0c:c8:8c:ed:c5:0d:e5:66:00:
17:1d:01:e6:3c:9b:74:a0:2f:63:31:7b:a7:0b:19:
34:ce:97:26:94:ae:e1:6c:fb:17:f5:11:d0:fa:69:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:6F:E1:9D:1A:A0:D8:F5:E5:A7:11:41:9C:85:39:13:89:D7:37
X509v3 Authority Key Identifier:
keyid:EB:80:1C:6B:A4:50:C9:CC:4F:E6:EF:3F:06:0E:0F:A3:60:B5:D3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64Aca6RQycxP5u8_Bg4Po2C107A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/BCtv4Z0aoNj15acRQZyFOROJ1zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.112.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f9:71:b5:38:a3:a1:80:bc:80:8e:9d:7e:ac:00:14:ce:21:
fc:d4:84:2f:fe:0d:6c:e1:e4:42:0d:67:36:df:35:85:b6:5f:
37:f1:98:15:66:d2:d7:68:19:43:eb:96:a9:7c:1c:54:6f:4d:
4b:39:08:99:1e:be:05:18:1e:2d:54:a1:34:66:d4:91:f2:13:
37:84:4f:13:65:ce:91:d6:a9:33:ff:1a:c1:c2:5d:59:73:5f:
36:6c:f6:77:76:d0:98:63:86:bb:1d:11:f4:c9:66:12:d6:6c:
2d:a4:44:42:47:8b:d6:77:31:d7:d3:58:86:e2:37:cd:b7:14:
a6:d1:48:f7:d3:4c:99:eb:41:82:f5:d6:59:be:9d:ce:ec:47:
eb:d1:1e:18:69:1b:4b:e5:0d:70:1b:d8:8a:17:95:e6:e0:e2:
f8:d5:14:60:8f:77:8b:09:88:11:fe:39:2f:76:1d:6c:ca:0c:
30:57:d9:2f:13:57:bc:65:9a:22:cf:b0:25:45:94:44:22:2c:
98:1c:4b:8c:1a:98:57:67:02:ce:d7:15:03:af:3b:a8:40:81:
d1:7b:6e:30:94:b5:c5:02:d0:30:12:f1:6e:2b:8e:2a:76:ca:
16:fb:23:0d:1e:a4:c4:9a:b0:77:ff:1a:f1:c2:c5:03:42:30:
59:de:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:20 2024 by rpki-client on console-ams.rpki-client.org