Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/BqRaVQs8pem0MAXyVuP5Nusofpw.roa
File: BqRaVQs8pem0MAXyVuP5Nusofpw.roa (raw, json)
Hash identifier: Hpo+QbpCb+RQh7XFHnb5GJOjGsx/CPjIcwz8SP3gZfU=
Subject key identifier: 06:A4:5A:55:0B:3C:A5:E9:B4:30:05:F2:56:E3:F9:36:EB:28:7E:9C
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 01856F14AAEA6FE55ACCE5A2909BA25FBE78
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/BqRaVQs8pem0MAXyVuP5Nusofpw.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.141.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:aa:ea:6f:e5:5a:cc:e5:a2:90:9b:a2:5f:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a45a550b3ca5e9b43005f256e3f936eb287e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:34:e5:96:cb:cb:ee:5f:4f:48:b5:ba:04:
50:86:d7:df:8c:6b:86:01:7c:ba:4a:c6:11:ca:09:
8c:5d:0d:65:f9:5c:ab:73:45:ef:76:05:53:37:c5:
55:d2:69:e4:b0:e5:69:dc:e0:da:69:a0:65:18:db:
66:93:6d:89:11:76:60:fd:54:a0:6d:ae:19:8f:42:
f4:c6:10:4b:e1:64:43:4a:2c:67:47:b6:71:b4:4f:
b8:d7:af:48:b3:2e:4e:0d:61:13:60:de:08:f2:73:
e3:c3:88:bf:63:a9:dd:0f:4f:64:83:31:49:50:c3:
c9:12:9c:6e:72:4a:db:06:4e:49:7d:d5:0f:0b:18:
d0:65:a4:70:16:82:f2:84:b5:f5:15:2a:2b:3b:97:
49:f1:e0:02:fb:76:69:b6:c4:f4:55:35:27:ca:4a:
9a:80:c5:27:57:d6:63:2c:db:4f:79:85:e3:ad:ef:
ad:92:52:ec:92:2b:ee:e8:cb:73:19:31:50:4d:92:
51:d6:5c:d7:0c:d9:33:53:4e:7b:82:64:95:62:4d:
9d:0f:91:c3:a8:3f:34:cd:08:a4:f4:50:39:67:4f:
4d:7e:03:f0:18:6f:f9:80:ba:be:54:93:15:00:f6:
28:fa:49:4b:cd:b2:3e:d8:31:3c:a8:3d:f7:fe:f1:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:5A:55:0B:3C:A5:E9:B4:30:05:F2:56:E3:F9:36:EB:28:7E:9C
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/BqRaVQs8pem0MAXyVuP5Nusofpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cc:e1:b1:bf:dd:f4:28:93:db:a6:84:5a:f7:a1:47:47:8c:
f3:f9:ed:cd:06:ff:4a:e7:b6:57:bb:1f:ab:58:5f:5a:97:4c:
50:a2:0d:fc:11:7e:4b:9a:2d:d0:bf:91:29:f1:55:f7:5b:4c:
07:d1:37:1d:f0:99:f0:a5:df:64:cf:5d:33:37:d7:00:e5:c5:
b9:8e:92:07:d7:29:e3:41:5b:95:9d:23:5c:8d:ad:5a:2d:fa:
ad:bb:af:a3:99:01:39:28:d7:0b:7f:26:14:9e:cf:f9:41:70:
d9:b5:eb:8a:5c:ad:ed:da:35:ff:55:4b:c9:59:e4:1f:95:87:
1f:ef:6d:07:49:80:69:a2:52:a5:25:0e:f4:a9:fe:c9:f6:6b:
df:25:b3:4c:d3:4f:49:01:d9:1f:27:a5:a3:1d:16:87:ad:dc:
8b:7a:78:54:ae:05:6a:d7:04:bb:e0:f3:7d:11:bf:02:06:dd:
6c:40:e8:ad:c3:03:fc:ed:be:30:01:f7:fd:07:2b:ba:82:53:
43:37:29:b4:0b:98:8b:22:15:43:cd:10:ec:19:4d:eb:cb:51:
1b:bd:01:29:38:02:4b:23:9b:a3:62:4b:6d:4e:f7:6a:60:fb:
55:35:c1:99:18:70:88:0d:af:ec:09:97:ee:df:84:ff:89:7b:
31:fc:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:16 2024 by rpki-client on console-ams.rpki-client.org