Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/R51Mn7xe9dyLBozE12EtDkSYRck.roa
File: R51Mn7xe9dyLBozE12EtDkSYRck.roa (raw, json)
Hash identifier: 4RXdgbnQchIApzH5ea3v6z0S7GGHbt+7/+9+BombqOc=
Subject key identifier: 47:9D:4C:9F:BC:5E:F5:DC:8B:06:8C:C4:D7:61:2D:0E:44:98:45:C9
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 0189D444A55FE52392D3278BBBDC6D8B8595
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/R51Mn7xe9dyLBozE12EtDkSYRck.roa
Signing time: Tue 08 Aug 2023 08:30:15 +0000
ROA not before: Tue 08 Aug 2023 08:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.109.96.0/22 maxlen: 24
193.3.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:44:a5:5f:e5:23:92:d3:27:8b:bb:dc:6d:8b:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Aug 8 08:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479d4c9fbc5ef5dc8b068cc4d7612d0e449845c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:5d:be:a4:1e:1f:c5:1e:ca:42:0b:3a:98:
21:35:27:59:49:7a:ba:d2:6a:d1:67:5f:74:33:3b:
1b:43:ed:a7:fb:bb:86:21:2f:80:4a:18:66:28:dc:
58:23:f2:60:ab:2f:27:83:15:a8:15:9a:02:d0:37:
e9:c5:f7:71:da:f0:d3:62:45:74:3a:37:b5:78:c3:
79:e8:31:63:37:ac:c5:9f:39:8d:09:0b:23:d8:28:
b6:29:64:b2:ca:a3:8b:27:cc:7b:95:05:dc:de:32:
16:ef:a5:00:12:85:31:e2:a2:cf:2c:86:e8:62:f8:
22:d1:eb:a7:61:61:3d:c3:7e:37:1a:75:2e:97:cc:
9f:45:51:17:5d:96:5c:85:71:89:f8:cb:56:21:9d:
c3:b5:9b:7e:dd:ef:ef:18:0b:20:26:9b:b9:34:d7:
da:9f:7d:03:a9:50:21:81:26:92:6c:3e:00:74:97:
f2:b4:f5:3c:18:dc:74:44:ed:ef:b2:c6:94:a8:b1:
c8:a3:6f:19:f1:26:89:e9:93:55:97:04:39:73:ac:
f0:ac:97:2f:09:d0:25:0f:48:db:a5:64:1a:c0:9f:
23:ee:5d:d1:63:6b:7b:b5:cc:fb:ba:a9:3a:6e:de:
fe:53:4e:3b:da:90:5f:11:1a:1f:45:12:0b:d1:bc:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:4C:9F:BC:5E:F5:DC:8B:06:8C:C4:D7:61:2D:0E:44:98:45:C9
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/R51Mn7xe9dyLBozE12EtDkSYRck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.96.0/22
193.3.28.0/24
Signature Algorithm: sha256WithRSAEncryption
02:88:65:48:e8:12:90:8b:f3:13:48:c1:96:23:dd:6b:a7:84:
79:c1:33:3d:39:eb:e6:ab:0d:d8:26:bf:9a:4d:6b:6c:c7:19:
7b:23:3c:20:60:b2:07:dd:46:af:b5:93:65:6b:e4:af:0d:37:
69:08:48:6e:28:65:43:68:7b:94:87:ee:89:bc:10:e7:c3:89:
5c:50:a7:08:1d:fd:e1:0a:fc:37:c3:87:d4:71:72:b3:17:dc:
c1:f6:1c:2d:41:aa:98:d7:59:33:b2:c5:5d:11:63:40:dd:98:
31:a1:86:0a:e6:24:40:4b:57:0f:69:89:8f:19:12:d6:77:6c:
b1:ec:45:2a:db:eb:01:b7:69:0d:d7:ff:ee:59:6f:42:00:42:
ed:f0:ae:10:83:a4:8e:75:1f:b2:f3:3e:16:ad:25:87:9d:9d:
03:1b:d1:0f:a5:89:30:7d:37:a0:ee:c5:2b:89:67:45:39:22:
3e:17:3a:15:d8:43:92:c9:e0:68:da:88:2e:a3:b0:9e:19:37:
2f:f7:d7:ee:1d:72:7f:63:b8:32:d9:ac:e3:5b:08:96:a3:dd:
80:32:1e:b6:7d:83:67:64:3b:67:e9:cf:66:70:ad:0b:de:ae:
4b:9f:0e:31:ed:35:7c:5c:56:d6:b2:fa:cc:47:dd:cf:ae:a4:
01:bb:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org