Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa
File: BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa (raw, json)
Hash identifier: Ohjvj8Z/T08gz2MtY26OpDSEu/S/HQ6oL9KLMPxoYTc=
Subject key identifier: 04:B7:95:42:DF:0E:E8:67:10:53:57:3E:82:88:6F:30:6D:42:FD:79
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 01856CB84C65247D7864E57CB2BFBC4B7542
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397540
IP address blocks: 176.125.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 24 Feb 2023 23:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4c:65:24:7d:78:64:e5:7c:b2:bf:bc:4b:75:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b79542df0ee8671053573e82886f306d42fd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:a8:42:05:09:3e:aa:b2:63:0e:58:b3:fb:
83:37:09:06:b9:14:4f:bb:11:2a:3b:8f:7f:0b:95:
d3:2e:e8:45:74:7b:93:ef:94:31:76:37:8d:16:dc:
98:b0:51:47:db:8a:31:ad:7e:e7:21:25:22:e1:16:
1c:fe:18:8f:29:63:b6:e1:c9:76:33:f6:a1:82:70:
5b:3b:f9:43:95:20:bd:a2:bf:51:8c:79:b7:e9:70:
c4:cc:31:b2:be:6b:cd:ef:be:9e:9f:6e:d8:2d:78:
cf:60:e1:47:9f:1a:0e:5a:a6:c7:86:fa:10:1c:b6:
4a:56:bf:fe:8b:3f:96:a9:22:bb:50:81:57:3c:56:
a6:8b:a9:1d:16:ce:b0:39:b9:6a:7a:d7:47:c3:e4:
d8:2b:33:cb:28:3a:ed:39:29:bd:32:2c:0f:1c:1a:
14:8f:82:57:c6:53:fe:c1:d4:34:69:21:db:c3:89:
d0:30:49:1b:5a:ed:b9:7b:10:e9:eb:66:33:8f:44:
a5:6e:5a:9f:14:ce:46:85:02:76:92:84:a9:8f:b6:
dd:0a:25:35:0f:af:ce:d1:f7:7a:2d:2a:72:8d:33:
b2:b9:cf:76:76:2d:3d:b9:ca:e9:a9:da:c6:90:ab:
e2:38:8b:fe:61:70:0c:8a:53:a1:2b:c2:b2:50:ec:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B7:95:42:DF:0E:E8:67:10:53:57:3E:82:88:6F:30:6D:42:FD:79
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
e1:59:4f:bb:68:c0:7b:06:89:4c:7b:6c:d4:08:8b:4a:dd:7f:
47:df:21:c1:0c:f2:ee:0d:ef:ed:95:56:30:00:05:fd:6c:cb:
ba:9b:8c:38:9b:f8:b5:af:16:23:ba:af:e7:7d:e7:b4:b4:cc:
80:5c:41:1b:da:19:dc:b3:28:fe:89:12:9b:3f:7e:a3:41:91:
be:c3:1a:af:c6:53:ba:f6:89:be:f3:f1:2c:a9:7c:d0:3d:68:
cf:72:4b:bc:2f:1d:9c:08:18:19:8e:31:d4:00:53:7e:0f:e2:
23:f2:4d:fd:51:ec:c5:12:6b:b3:71:3a:a8:b9:ab:24:67:7d:
db:8c:60:ce:61:5e:47:a4:d0:49:8c:33:45:69:dd:b4:15:39:
38:20:60:d5:63:bc:04:ad:87:10:9a:1a:a1:c4:60:5a:85:76:
8c:d1:17:d5:9a:23:c6:22:d7:5c:b8:b2:c9:d2:b1:6c:ed:42:
2b:88:f8:1f:27:9d:07:6b:c9:b8:1c:df:1f:ad:6f:fe:09:34:
aa:59:07:70:ab:c4:76:89:9e:f2:ba:3a:30:01:7e:67:a5:0a:
f3:f5:04:4d:c8:8e:24:4c:35:eb:76:5f:bf:8a:be:c0:b2:63:
4f:a4:45:1f:c3:59:ae:ee:ed:5a:ba:4a:15:4c:d3:5b:a4:8f:
9d:4f:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:07 2024 by rpki-client on console-ams.rpki-client.org