Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/BlFrB9mmtfxYOfthL8fXtXwPmDM.roa
File: BlFrB9mmtfxYOfthL8fXtXwPmDM.roa (raw, json)
Hash identifier: p4AInakXNgVHst1T6dsUeJFlGRtqIAiX8OB3wL2oiuc=
Subject key identifier: 06:51:6B:07:D9:A6:B5:FC:58:39:FB:61:2F:C7:D7:B5:7C:0F:98:33
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0185C4DA02951F44A757F22A2514910402E7
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/BlFrB9mmtfxYOfthL8fXtXwPmDM.roa
Signing time: Wed 18 Jan 2023 12:28:19 +0000
ROA not before: Wed 18 Jan 2023 12:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39378
IP address blocks: 94.247.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 09:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:da:02:95:1f:44:a7:57:f2:2a:25:14:91:04:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 18 12:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06516b07d9a6b5fc5839fb612fc7d7b57c0f9833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:f2:f7:58:95:86:a0:17:e2:6e:13:20:18:
4a:b7:d6:84:a7:23:7f:1b:06:19:8d:4e:b0:59:34:
39:cd:55:92:26:ba:6d:28:aa:70:f5:06:d5:54:05:
16:d1:66:f7:f7:a0:0b:c0:f9:19:ff:42:4d:6b:2f:
02:40:da:5f:ea:b4:55:73:3d:c2:2e:56:82:b6:5b:
1a:c6:3b:26:3a:50:e3:75:5e:23:72:21:b1:8e:76:
c6:ba:28:11:95:03:4f:df:e2:d9:bb:b0:19:c1:15:
04:32:61:37:2a:cb:ef:96:d8:2c:01:b9:51:07:73:
74:d7:b6:18:b3:73:04:c8:f1:ec:fc:c0:13:58:b0:
09:40:18:35:c0:28:a4:60:cb:2d:3e:3d:7a:e2:8d:
f3:f0:f4:fe:c0:85:4f:5c:8a:57:af:49:e1:06:f7:
86:87:fc:40:db:75:3b:5d:15:07:c6:1e:ed:94:f8:
ad:0c:f7:6e:ac:ad:ef:14:3a:b6:8b:89:75:ae:96:
19:52:db:c5:92:86:5b:aa:88:ff:bb:b1:41:5e:82:
91:1a:15:85:8f:81:85:b6:ed:e5:18:45:ed:2a:dd:
26:ef:70:e3:e3:23:f1:86:00:d4:83:d8:8e:66:1a:
ae:15:3e:10:5c:fa:8f:49:55:5e:5d:3d:21:24:dc:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:6B:07:D9:A6:B5:FC:58:39:FB:61:2F:C7:D7:B5:7C:0F:98:33
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/BlFrB9mmtfxYOfthL8fXtXwPmDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8d:9b:8d:26:b2:01:d4:c1:84:cb:a2:bb:60:4a:67:b8:ea:
fb:50:4f:41:5d:24:80:22:87:c8:69:fd:b3:d6:9b:56:1f:ea:
21:0d:d7:96:dd:de:60:72:1a:ad:b7:58:d9:1a:b1:f3:2e:ef:
44:89:a0:53:5f:12:25:e5:bc:d3:65:77:8d:86:59:d1:e9:e8:
f8:17:e9:e5:12:f7:b0:44:07:21:7a:dd:4b:13:bb:15:d4:b1:
79:1b:43:67:d0:88:40:dd:df:a5:ad:fe:47:08:1e:06:0d:1b:
62:66:2a:e7:07:7e:56:e2:bf:6c:10:93:bd:3a:e1:d7:41:16:
b1:e8:03:ed:99:b6:96:f0:c8:f2:b2:c8:6f:28:f0:80:7b:2b:
e1:2a:0c:57:03:a7:e9:79:dc:f3:f1:15:27:40:c1:c4:1c:d8:
d7:35:da:5e:c4:2e:59:27:77:12:9d:ed:e9:ed:d5:fe:cb:c2:
5e:ab:bb:cd:f6:9b:f5:18:de:ed:65:c7:50:36:7e:b8:b8:ee:
85:75:7f:4d:63:1f:37:b1:18:b5:cc:e7:6a:59:99:ab:b7:b0:
87:d9:ff:2e:13:81:2c:f3:2e:9a:de:2b:ad:ae:3e:5c:ef:d9:
00:fc:36:2b:ab:7e:76:a8:48:62:28:1a:1b:96:7c:c7:00:a2:
96:b1:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org