Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/BDaeXz6Ow2tdqj__FfI1pRCUBHw.roa
File: BDaeXz6Ow2tdqj__FfI1pRCUBHw.roa (raw, json)
Hash identifier: AvL0vIDm6BqoD/L8kmw+3IIhb2xnAsvvrGoYnyMfrtE=
Subject key identifier: 04:36:9E:5F:3E:8E:C3:6B:5D:AA:3F:FF:15:F2:35:A5:10:94:04:7C
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 018572CCADED4B1F0F6569A0E2EBB2098445
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/BDaeXz6Ow2tdqj__FfI1pRCUBHw.roa
Signing time: Mon 02 Jan 2023 14:04:54 +0000
ROA not before: Mon 02 Jan 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33906
IP address blocks: 193.200.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:ad:ed:4b:1f:0f:65:69:a0:e2:eb:b2:09:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 2 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04369e5f3e8ec36b5daa3fff15f235a51094047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:9a:bb:4e:1d:5b:35:f0:1a:e0:ad:3d:4c:
5e:b6:c9:ac:8b:30:ef:1c:f1:fb:83:f0:eb:97:cb:
5f:37:9c:89:1b:a1:81:b3:e2:38:d7:c7:df:40:07:
86:cc:54:c1:49:33:10:f9:12:a8:cb:78:56:ba:d7:
26:ae:a4:0b:ec:14:bd:af:0b:e8:02:e2:f9:29:d8:
e8:7e:af:df:02:77:64:06:cd:6b:e7:1e:70:b8:b9:
c8:3b:9a:94:56:04:a3:59:00:1b:a1:75:e2:c7:16:
bf:5d:0d:f5:88:78:cc:c7:35:21:b9:5f:e2:17:aa:
8a:1c:0a:62:0f:82:89:de:7f:04:e6:28:cb:01:5c:
58:9a:21:04:2e:90:2c:81:f7:74:3c:a5:1e:9b:ba:
95:a9:e6:5d:76:45:79:a2:4c:b0:05:59:3f:0e:c8:
28:2f:d1:41:78:b8:00:f6:64:7e:78:7f:91:9a:69:
8c:d3:40:64:b6:90:7a:c0:06:53:77:8c:ab:07:8c:
47:5a:8f:3c:96:46:d0:aa:f0:5b:e1:cc:70:b3:45:
8d:e4:6d:4c:ba:1f:cb:df:a3:2f:e9:3c:0b:ed:77:
9c:7d:7f:2c:77:a9:ee:24:f6:a4:2b:86:9d:5b:8e:
92:c9:c1:1f:8a:8f:61:6e:24:c8:14:24:c0:cd:fd:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:9E:5F:3E:8E:C3:6B:5D:AA:3F:FF:15:F2:35:A5:10:94:04:7C
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/BDaeXz6Ow2tdqj__FfI1pRCUBHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.141.0/24
Signature Algorithm: sha256WithRSAEncryption
74:63:0d:2e:83:70:e0:a1:e8:e1:bb:04:22:52:33:64:0f:d7:
6f:5b:65:73:9e:f3:09:be:d7:d2:05:34:d5:87:ff:ef:01:f7:
1a:a5:e4:a5:b6:1d:bb:3b:c3:ff:a3:be:8a:27:1c:8e:7a:96:
5f:0a:00:3a:f7:a1:a4:d2:15:77:48:d2:ad:28:4b:4a:ea:7d:
fd:40:c2:b1:1c:73:a2:83:e0:c3:1f:11:8c:2b:79:5d:ff:aa:
d2:74:8d:5a:84:79:16:64:36:4b:6f:8d:57:34:0d:ba:59:8c:
71:a4:48:e0:c2:39:1e:38:a1:e5:01:85:c1:d1:d1:47:f8:31:
1b:8b:e2:fb:75:03:70:a7:a3:79:c8:4a:3f:d4:68:f0:54:f3:
be:c1:2f:37:63:eb:3e:50:0d:2b:10:2a:97:28:bb:6f:2e:83:
84:ba:6a:1d:f1:dc:c2:dd:a2:e2:5c:a5:a9:aa:bd:bc:e9:2b:
07:4b:95:57:ac:7f:cb:70:55:28:ba:0c:6e:91:59:d2:56:64:
61:31:4d:ce:8e:48:e4:2d:c3:61:e2:aa:8a:2a:f3:6b:83:34:
cf:8e:b7:a4:98:a5:13:98:54:0b:02:3c:94:3a:cb:48:0f:c2:
06:de:09:66:c5:f8:83:06:44:8b:67:d8:b5:56:c3:60:03:51:
84:ea:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org