Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/BvpotX_vtYJC2oFy0JxnZgZ6W1Y.roa
File: BvpotX_vtYJC2oFy0JxnZgZ6W1Y.roa (raw, json)
Hash identifier: 5w3rvSxLkAvuamTYMUnlVUof82Y0G3yEKjavNnStcnQ=
Subject key identifier: 06:FA:68:B5:7F:EF:B5:82:42:DA:81:72:D0:9C:67:66:06:7A:5B:56
Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial: 0185730CC3C0A1A2C182FE00AD986C149152
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/BvpotX_vtYJC2oFy0JxnZgZ6W1Y.roa
Signing time: Mon 02 Jan 2023 15:14:54 +0000
ROA not before: Mon 02 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 193.34.16.0/22 maxlen: 24
2001:678:b64::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:c3:c0:a1:a2:c1:82:fe:00:ad:98:6c:14:91:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5894923bb002a434128810607dfb526722004f
Validity
Not Before: Jan 2 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06fa68b57fefb58242da8172d09c6766067a5b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:b5:a1:a0:82:28:19:cc:94:f8:f6:ea:78:
99:f1:2b:65:c8:a8:9d:93:58:37:46:93:9b:14:e9:
3b:7b:75:64:27:1c:98:46:88:77:73:13:92:17:d1:
35:18:dd:fc:a9:ef:ce:38:3d:5c:8d:d7:f5:f2:b0:
fa:ba:38:66:6f:58:2d:b7:c1:0f:b8:76:16:4d:3b:
92:0b:e6:bf:c4:c3:cf:b8:4f:00:47:0b:ed:9e:8d:
d8:2d:26:2d:e8:50:8a:31:ce:2d:38:83:c5:92:aa:
c4:5a:6a:22:2b:dd:05:a2:95:52:e7:42:cf:41:0b:
d0:f7:ab:79:64:a1:71:03:23:31:59:ab:6e:fa:f1:
95:c3:5f:e8:91:7c:8a:c4:0b:53:ff:4d:93:4b:d2:
57:e6:5f:39:3c:e2:3c:7e:a9:e5:43:36:af:11:db:
a9:3f:3f:bb:ed:65:42:39:f6:06:aa:8a:a1:02:ec:
dd:91:cb:e7:ed:83:d4:7d:64:6f:3a:af:5e:f3:b0:
6b:46:ee:b1:c5:f0:01:0f:84:78:c3:af:6f:8e:56:
87:a3:1c:50:34:19:00:cc:ca:d9:d6:f0:e6:a7:27:
61:03:e7:97:49:e7:98:fb:e0:77:34:f2:49:40:3c:
63:f6:e0:ad:25:89:07:a3:a0:44:6d:53:8b:ca:be:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:68:B5:7F:EF:B5:82:42:DA:81:72:D0:9C:67:66:06:7A:5B:56
X509v3 Authority Key Identifier:
keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/BvpotX_vtYJC2oFy0JxnZgZ6W1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.16.0/22
IPv6:
2001:678:b64::/48
Signature Algorithm: sha256WithRSAEncryption
78:52:22:c3:ae:dd:7f:5b:e7:81:a8:7c:4c:0f:c5:8a:d8:7a:
82:42:56:bd:db:c5:11:d5:dc:bb:9f:90:24:a5:54:69:eb:75:
24:be:7e:b4:45:8f:18:c3:a0:c1:05:78:4c:7a:94:d6:d4:98:
8a:81:85:90:ae:59:be:9c:21:3b:66:2e:52:6a:c3:2a:4e:50:
7f:d3:96:50:9b:48:7c:b0:3f:b5:11:bb:4f:3e:52:c9:c1:98:
43:da:35:29:4c:e1:f5:80:c9:c7:6b:38:d3:f1:f5:14:cf:c6:
e1:ba:8b:22:38:36:8a:32:38:88:8b:86:82:81:56:1c:e5:6d:
4e:13:4a:c4:59:64:62:12:9f:02:9b:45:bc:e3:1d:bf:83:e8:
8b:90:3b:75:d4:6d:c5:0e:5f:c0:a4:3f:61:35:0f:37:da:47:
07:58:f4:a7:47:47:b1:e9:44:0f:77:11:98:86:99:d0:ba:96:
a1:8d:8d:62:cb:ad:fe:9f:3a:eb:1c:02:5b:96:94:95:da:d1:
aa:34:96:41:2f:cc:93:16:7b:8c:84:6d:a7:a5:88:21:aa:c3:
f2:68:6f:73:77:88:a6:eb:2b:ad:e5:06:19:83:e6:52:af:69:
4c:ca:e3:11:e6:f8:85:a1:55:02:77:b4:05:0f:ab:ae:b7:f2:
a8:7a:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:44 2024 by rpki-client on console-fra.rpki-client.org