Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/bsHxptGyfYwSmjHfsQcpvrUU8HE.roa
File: bsHxptGyfYwSmjHfsQcpvrUU8HE.roa (raw, json)
Hash identifier: XSkn3CqfbadMux+uXG9v+0N04m+QDpNrMy69P15A74k=
Subject key identifier: 6E:C1:F1:A6:D1:B2:7D:8C:12:9A:31:DF:B1:07:29:BE:B5:14:F0:71
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 01856D8ABEC00B22B6DD5CD28AF05C31830B
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/bsHxptGyfYwSmjHfsQcpvrUU8HE.roa
Signing time: Sun 01 Jan 2023 13:34:47 +0000
ROA not before: Sun 01 Jan 2023 13:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.169.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:be:c0:0b:22:b6:dd:5c:d2:8a:f0:5c:31:83:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Jan 1 13:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ec1f1a6d1b27d8c129a31dfb10729beb514f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:9f:9a:57:67:7b:42:ac:56:e2:08:42:e3:
f1:54:3d:63:30:65:a3:00:08:02:05:8d:6c:ac:70:
43:61:09:4e:98:c7:60:fd:64:ad:8d:7a:b8:67:44:
70:0a:88:74:37:70:7a:54:64:ea:5f:b3:91:f2:b3:
2f:ee:28:9d:e7:f6:63:61:7c:91:ee:c3:07:6f:00:
b0:3f:60:f6:c4:ff:35:84:dc:c6:bb:77:a5:b4:07:
29:a2:c8:bc:b3:c1:0f:8a:69:6f:3a:3b:31:90:73:
af:b4:53:28:54:40:4a:a1:29:98:05:db:c4:73:02:
9f:1d:92:92:57:00:29:68:9e:b8:16:ce:28:30:77:
94:75:36:28:38:a5:5f:93:26:ca:a1:a2:4e:98:5b:
2a:ca:33:cb:ab:33:7f:83:6b:11:41:8a:43:70:10:
d1:e5:4a:38:49:d4:f1:20:71:0a:88:8d:b5:57:61:
a8:99:05:97:34:c0:ec:ca:f5:f5:c0:c6:00:df:fc:
4d:5f:2f:69:64:a3:b5:43:4c:88:6f:e1:c3:1c:d0:
0f:c1:13:f5:d2:ab:78:1d:34:11:0b:7d:8b:12:d9:
c8:d5:0c:98:88:ca:76:17:e7:bc:0f:9d:f3:8b:f7:
53:f9:ff:08:e3:e5:b8:f0:11:2a:e0:bf:18:6d:2a:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:F1:A6:D1:B2:7D:8C:12:9A:31:DF:B1:07:29:BE:B5:14:F0:71
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/bsHxptGyfYwSmjHfsQcpvrUU8HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.219.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8d:3f:8d:d0:64:8f:02:16:a5:d2:2e:64:cc:38:55:e0:90:
c2:91:d3:43:93:aa:70:fd:9f:41:7f:42:03:49:87:d6:8e:89:
a0:b1:f5:a1:4e:93:b4:35:d8:54:90:4b:4d:fc:00:92:ee:df:
13:4d:dc:02:e3:db:fc:ca:e1:95:25:33:ee:f9:27:15:08:2e:
9c:f1:1f:12:09:f5:27:ec:fc:7e:b7:a2:c8:9c:96:9c:9d:ed:
e5:ae:f8:97:f9:d4:57:b5:53:06:87:a1:cd:ac:da:9f:cb:62:
82:8e:4e:03:9f:27:98:88:ce:f8:c0:2f:29:2d:be:b0:fa:e6:
98:83:ea:74:d4:98:b0:af:12:8f:df:5b:eb:62:55:d8:47:65:
18:b2:77:c2:e3:32:ed:49:2d:9a:59:27:1c:80:1a:16:0a:4b:
2a:63:84:fc:29:b4:a4:ed:bc:a4:e5:93:37:f9:19:d0:87:b2:
22:1f:1e:79:6e:1f:9a:ad:df:bf:a6:f5:a5:db:39:3f:ab:16:
69:7f:e3:70:d4:0b:e2:9d:93:4f:a5:e3:39:3f:48:50:53:f0:
e1:23:f0:01:1f:6f:f7:26:0e:d9:b3:cd:82:e4:d9:51:4a:a4:
fa:78:6b:87:cf:ce:21:93:fa:34:34:30:0b:85:92:76:a5:20:
80:e2:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:25 2024 by rpki-client on console-ams.rpki-client.org