Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/BzLjXsnMfUBd5Z8Ry7AwTqvJTAw.roa
File: BzLjXsnMfUBd5Z8Ry7AwTqvJTAw.roa (raw, json)
Hash identifier: TpDAOYAo7qbovuzChrxjUHUWaiThS4nkuYD1U3mD4Xg=
Subject key identifier: 07:32:E3:5E:C9:CC:7D:40:5D:E5:9F:11:CB:B0:30:4E:AB:C9:4C:0C
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 018CC9BCD8A4A5CFE34C89818135D11C4C58
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/BzLjXsnMfUBd5Z8Ry7AwTqvJTAw.roa
Signing time: Tue 02 Jan 2024 10:34:05 +0000
ROA not before: Tue 02 Jan 2024 10:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204928
IP address blocks: 194.153.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d8:a4:a5:cf:e3:4c:89:81:81:35:d1:1c:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Jan 2 10:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0732e35ec9cc7d405de59f11cbb0304eabc94c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:88:d2:6e:28:45:25:ed:3d:d6:d3:fd:aa:
39:80:88:da:b6:0d:44:eb:71:c1:d5:36:b3:23:15:
3e:7f:1c:0f:1f:4d:fa:57:56:6f:a7:6e:5a:d5:7f:
57:4b:4e:06:fd:74:e8:14:11:84:af:c4:64:22:12:
a5:b5:50:47:76:45:3e:5e:af:73:fc:fb:7e:34:67:
ff:48:f8:62:1a:e2:84:cd:0b:6c:07:35:ae:de:d2:
08:81:92:98:6b:a0:3f:1f:3a:ea:ee:20:48:5b:76:
56:7e:2e:56:f8:39:99:d6:ca:32:da:53:0b:67:3d:
7f:f0:42:df:4d:85:58:4e:7a:63:fb:11:92:65:b8:
43:4e:dc:21:85:62:8c:9b:81:02:cc:e9:0d:14:14:
a4:52:d9:6b:cd:df:d4:f0:dc:8e:50:b2:8e:93:90:
1e:0a:3e:f0:12:48:8a:ad:b2:69:9b:57:98:15:6d:
2a:1d:07:b7:47:df:20:ae:05:b9:9d:7e:89:09:9b:
50:f3:84:13:6e:b5:18:ab:b6:69:f9:a3:ef:64:3a:
90:e8:63:3f:f0:2d:2d:2e:df:4e:3d:07:c1:59:65:
c6:c6:44:2e:6d:3e:b2:15:9e:bc:dd:6a:ec:2b:5f:
d4:9a:7d:04:e5:f2:c5:83:21:97:85:9e:bf:db:6b:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:E3:5E:C9:CC:7D:40:5D:E5:9F:11:CB:B0:30:4E:AB:C9:4C:0C
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/BzLjXsnMfUBd5Z8Ry7AwTqvJTAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.216.0/24
Signature Algorithm: sha256WithRSAEncryption
70:df:3b:0b:d3:95:46:20:4a:68:57:d8:45:20:5c:db:5d:f2:
0f:cf:57:64:7b:e6:12:7b:24:3c:19:f1:66:bf:9d:a7:04:93:
ed:bb:c0:b3:59:41:a9:96:c2:de:1a:21:66:ec:b6:4e:8e:8b:
c1:75:c2:e9:00:fb:c8:75:19:ee:9f:12:2f:7d:ad:3c:a0:48:
e8:c7:e1:e2:36:54:d7:70:0c:f4:f0:38:85:3d:74:05:a3:b2:
9b:5c:86:25:c7:e8:f7:e5:2e:65:b0:c0:9f:15:92:cc:a8:62:
7e:9d:c9:3c:a6:1e:56:f5:d2:8a:2c:9f:53:79:11:e0:6a:16:
a3:1a:02:9c:5c:5b:10:fd:4e:93:ea:f0:0b:c8:4c:20:32:7d:
32:d4:69:81:86:60:6f:8c:4a:4e:db:2d:aa:50:ea:bb:4d:04:
a3:29:8f:80:41:90:2a:a3:6e:67:a0:19:bb:63:63:cd:b3:f5:
1f:8f:df:ce:13:2b:57:9b:76:fd:8a:04:cc:32:bc:f1:ff:40:
d2:9f:ae:71:27:c9:6c:07:f7:2d:63:b7:e0:ac:d4:23:c8:82:
13:e2:b1:d3:e6:e2:05:56:fa:08:dc:ad:89:f0:ea:74:ee:93:
68:30:85:a1:49:d9:58:49:49:58:84:79:47:3b:83:ef:07:bd:
5a:5b:e8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:54 2025 by rpki-client