Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/BVMfutwJ9f6w_FC8XKb03xnCmWk.roa
File: BVMfutwJ9f6w_FC8XKb03xnCmWk.roa (raw, json)
Hash identifier: GrzDrX259WL9bb43N6YuVRxKvtJqkQOoUDAg8FIrxYs=
Subject key identifier: 05:53:1F:BA:DC:09:F5:FE:B0:FC:50:BC:5C:A6:F4:DF:19:C2:99:69
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 018B25E746BD99B716F7330FBEBA118BE82A
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/BVMfutwJ9f6w_FC8XKb03xnCmWk.roa
Signing time: Thu 12 Oct 2023 21:59:55 +0000
ROA not before: Thu 12 Oct 2023 21:59:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205814
IP address blocks: 185.249.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:e7:46:bd:99:b7:16:f7:33:0f:be:ba:11:8b:e8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Oct 12 21:59:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05531fbadc09f5feb0fc50bc5ca6f4df19c29969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:86:c5:c2:91:db:56:4a:a7:5d:3e:ac:f9:
8a:b5:b0:7d:a4:51:c1:c0:81:b1:21:e7:e6:84:22:
d5:0f:b8:16:77:70:5b:9a:30:c9:6b:d4:fb:77:c0:
08:71:d8:05:7a:f7:9f:8a:b5:d7:b7:a4:18:6a:d3:
d0:b2:d5:eb:40:06:9d:16:f0:a2:af:0d:4b:cc:f4:
4b:0a:7c:ee:9d:61:7b:f4:1b:ef:ce:32:9d:c3:da:
2d:20:67:9e:f0:b0:ac:8c:09:13:48:8f:c0:91:84:
ca:6b:06:77:79:d9:eb:45:cf:86:aa:cb:3b:5c:4e:
0f:d0:46:23:03:10:7c:9a:ec:25:86:c2:ea:28:c2:
f1:2e:3e:df:47:a0:ca:a9:eb:8e:ae:86:45:b2:f3:
79:4d:c3:94:7f:b0:59:92:52:50:d5:c6:68:dc:89:
ae:6d:a1:2a:50:3d:9e:7d:72:82:43:51:a3:dd:4b:
07:50:83:e0:10:9a:39:93:85:9f:77:fd:fd:eb:58:
3a:19:1a:fc:3d:db:ca:0e:1e:37:26:0e:78:bd:aa:
b8:9d:f0:df:90:d0:7b:37:1b:18:39:38:4b:dc:6f:
8a:81:b2:c2:19:9e:d6:93:ba:01:72:5c:0a:4e:b0:
76:84:44:22:46:d8:05:36:d6:54:2f:0e:a2:ff:39:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:53:1F:BA:DC:09:F5:FE:B0:FC:50:BC:5C:A6:F4:DF:19:C2:99:69
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/BVMfutwJ9f6w_FC8XKb03xnCmWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.159.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ef:11:0b:da:f4:19:15:da:cd:b7:c5:04:b3:84:9a:27:ee:
3f:c0:30:f3:86:a2:96:58:eb:36:b6:f1:a2:37:85:9f:cc:8d:
9c:d7:03:0a:4f:2d:be:1b:38:5f:22:2d:c8:47:f5:89:f9:12:
c6:6a:b2:00:8c:74:19:9d:02:bd:ff:ef:58:cc:d5:92:d5:73:
64:34:85:16:1b:11:ab:ff:4d:84:77:0e:cb:ab:69:a6:63:c3:
37:58:08:2a:18:30:e2:f7:7c:53:c0:44:3a:d5:58:de:ad:18:
13:85:25:19:58:91:1a:bf:af:f7:0e:5f:85:65:48:69:72:af:
fa:09:d4:a1:4c:36:e1:3f:49:1d:f5:74:aa:04:4e:24:47:5b:
b2:1d:e5:59:1d:ee:86:46:29:6a:ee:74:62:51:b0:7e:a4:6d:
5f:79:48:36:d9:4b:9c:f9:29:8a:18:5e:49:eb:a5:72:d7:5c:
8d:ab:be:e1:5e:d6:52:5e:f4:45:a6:bb:17:2a:1f:16:d5:b6:
c1:f0:6a:8d:50:a1:88:c2:b8:18:16:8d:51:30:9e:5b:85:e5:
39:4e:57:36:d9:c2:7e:c9:50:94:7f:d4:dd:34:84:b4:75:77:
5c:78:50:8e:56:aa:cb:f4:f7:47:bc:86:7d:cd:56:94:d1:83:
29:22:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:08 2024 by rpki-client on console.sobornost.net