Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/BOL-SpLJjUndYF3z_sGvVLKCNAY.roa
File: BOL-SpLJjUndYF3z_sGvVLKCNAY.roa (raw, json)
Hash identifier: MEGf7yxkOK2NqKFBBORkZfK2aD1rD+t/BBTmkuMUjPk=
Subject key identifier: 04:E2:FE:4A:92:C9:8D:49:DD:60:5D:F3:FE:C1:AF:54:B2:82:34:06
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01914C2BBA576D4429D388CC2A1F449A4E43
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/BOL-SpLJjUndYF3z_sGvVLKCNAY.roa
Signing time: Tue 13 Aug 2024 14:36:59 +0000
ROA not before: Tue 13 Aug 2024 14:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 217.180.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 12:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:2b:ba:57:6d:44:29:d3:88:cc:2a:1f:44:9a:4e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 13 14:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04e2fe4a92c98d49dd605df3fec1af54b2823406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:50:d1:84:16:5c:6c:d8:85:7c:ae:27:f6:
49:92:11:14:87:66:9f:ff:de:78:35:84:be:9e:90:
56:07:86:2c:9c:01:f1:15:dd:fa:61:25:75:fe:16:
d4:be:e1:e7:1f:ef:b6:67:75:90:d5:c7:38:23:c2:
75:c7:4a:36:fd:79:8e:06:03:2c:f0:48:07:25:75:
97:2d:46:0f:3c:3e:8e:14:01:e7:9f:2e:d3:ac:30:
9c:0b:44:9b:21:28:f9:87:e5:98:a1:20:f2:50:d5:
5a:7f:b5:8e:80:da:85:af:83:6d:4f:8e:1d:4c:28:
db:03:93:3e:7f:14:ea:7a:c8:87:b2:cd:91:48:e0:
5d:27:7e:74:73:21:08:cb:d7:a7:4f:3b:7c:d5:dd:
5e:cd:9a:09:51:b3:87:67:62:71:24:50:5c:b2:48:
32:27:d8:3f:ee:a9:c2:69:1a:a6:93:55:ce:07:77:
86:f5:b9:26:bc:78:be:22:fa:33:12:7b:f2:b7:09:
27:6f:60:4e:5c:5d:58:63:de:7b:ea:49:c7:5c:82:
18:dd:df:62:c5:c0:ab:54:7d:f8:f8:90:78:0a:76:
65:69:98:b7:c7:56:06:f1:be:f0:ae:5b:ef:b9:24:
ff:26:b3:78:c9:f2:c9:a0:7c:4c:9f:59:92:14:e6:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:FE:4A:92:C9:8D:49:DD:60:5D:F3:FE:C1:AF:54:B2:82:34:06
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/BOL-SpLJjUndYF3z_sGvVLKCNAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.14.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0d:62:e4:24:10:3a:4f:59:fb:04:e3:0b:dd:a5:00:dd:7c:
af:a6:ce:6d:60:04:dd:1f:19:b4:4c:53:6b:20:7c:e2:b3:f9:
36:e1:c1:45:bb:96:1a:52:dc:4c:0c:59:60:0a:2f:f5:d6:9e:
bd:d0:4c:42:1c:2d:ec:26:d8:6d:f5:a0:0a:8c:3c:9c:d1:23:
cd:5f:6c:ef:71:14:96:b0:0c:31:d6:91:13:c7:b9:08:b6:6a:
9b:5c:48:3a:10:bd:39:a2:c3:68:ed:0b:84:d4:2b:b4:a3:bb:
b5:5e:29:1e:74:4b:5c:a4:a0:3e:27:56:9a:4a:35:07:c6:ca:
19:f3:a2:55:a0:27:04:0b:88:51:31:30:60:24:ac:dc:9e:87:
fd:fc:34:90:fc:a1:ae:94:1b:6c:bb:f9:34:16:8c:84:70:fa:
db:c7:63:79:fc:1c:04:1b:2b:a3:ac:01:fa:1b:b6:6c:7c:a8:
1a:23:8a:95:1e:e7:1a:a4:31:2f:0c:9a:c1:22:9c:c1:77:d1:
ed:a1:d5:b6:3e:14:5e:8a:40:f7:5d:de:23:86:a4:d7:7c:43:
05:e9:92:c7:99:15:2c:58:42:1e:d0:11:80:59:21:4f:b0:10:
f3:e1:27:63:75:c1:e4:ec:57:8a:20:87:cd:68:6a:c4:9c:57:
bc:2f:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 16:07:25 2024 by rpki-client on console-fra.rpki-client.org