Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bnxM-CUQ-8awJPnAFsXyTSplSRc.roa
File: bnxM-CUQ-8awJPnAFsXyTSplSRc.roa (raw, json)
Hash identifier: Xhn/HEcMvOEUlEveQOERMQZsYUSzJ5ruEASrjcz7BJw=
Subject key identifier: 6E:7C:4C:F8:25:10:FB:C6:B0:24:F9:C0:16:C5:F2:4D:2A:65:49:17
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0191C7C01FE0E7CF8239CE1F518808A655DD
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bnxM-CUQ-8awJPnAFsXyTSplSRc.roa
Signing time: Fri 06 Sep 2024 14:32:22 +0000
ROA not before: Fri 06 Sep 2024 14:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214934
IP address blocks: 217.180.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 14:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:c0:1f:e0:e7:cf:82:39:ce:1f:51:88:08:a6:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 6 14:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e7c4cf82510fbc6b024f9c016c5f24d2a654917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:9d:e6:98:95:04:52:7f:8e:5e:da:99:76:
b9:d8:ab:91:52:1f:65:41:2f:fa:05:72:a4:9d:2f:
ce:40:61:18:61:42:52:fe:ca:7f:bc:d3:94:ea:f3:
fc:0f:de:ea:ec:d2:b2:cb:48:49:3b:51:3a:75:fe:
97:fc:84:03:d4:77:b7:85:c2:d3:fd:3b:78:f4:f4:
ca:77:14:0d:fe:f9:21:e9:b6:76:89:37:e7:b1:3a:
1d:8d:8f:b6:81:c5:ff:c3:0a:52:8e:5d:43:07:d5:
c9:66:77:29:9f:bf:51:ea:c9:7b:bf:12:57:07:f1:
80:ec:af:8f:e4:11:7d:7c:c7:da:73:d1:69:12:a9:
9c:fc:93:9f:45:b0:12:9b:ba:c5:d0:6d:64:5f:8d:
10:98:e9:e7:53:7c:f8:6a:53:7a:90:f4:21:1d:7e:
4e:6c:67:bf:4e:81:cd:f2:6c:b2:04:c5:f8:ac:95:
34:09:96:e9:46:8f:e9:7d:ab:14:dc:1e:af:70:ae:
3c:1a:d6:ac:7b:e2:ba:6b:2c:ed:2a:5e:82:d1:84:
1d:df:61:9f:95:98:4b:8c:76:33:9b:5c:7c:98:89:
de:eb:66:76:36:d4:46:62:e7:23:b6:c0:3a:c4:a0:
bc:b8:cb:cd:74:63:3b:09:ee:fa:51:da:7f:eb:e9:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7C:4C:F8:25:10:FB:C6:B0:24:F9:C0:16:C5:F2:4D:2A:65:49:17
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/bnxM-CUQ-8awJPnAFsXyTSplSRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b8:65:c2:f3:4d:d1:e3:ed:75:f7:02:87:14:47:37:0e:b9:
23:da:ae:38:6b:69:58:aa:4e:d4:73:98:1c:d0:55:ef:a3:fd:
1d:59:5e:57:89:dc:79:e2:19:37:07:d4:e5:b5:e5:aa:fb:8e:
3b:6c:36:2c:3b:9a:4d:52:df:f7:f2:c6:ea:0c:e7:c3:8e:9f:
70:ae:25:95:49:83:a1:6f:59:31:81:ab:13:4c:85:11:47:79:
f8:10:8a:57:8e:5b:e8:94:e8:ee:9a:7d:f9:c7:3e:71:19:b3:
03:04:9e:04:4a:1b:7c:30:b1:fc:c6:32:11:89:2f:52:81:df:
50:7f:ae:59:ee:c8:67:5c:7d:60:cf:25:e2:c4:e0:7e:5e:4f:
f5:06:f6:65:09:4d:73:49:35:f6:72:ff:13:9e:52:33:76:1c:
66:79:75:1d:fc:6e:1e:b6:e9:ea:cd:d9:42:e6:af:11:56:81:
32:4c:f2:07:bd:b6:e0:8c:88:1d:3e:69:b2:c6:80:c3:16:83:
ab:89:fc:1e:87:6e:9a:b5:bc:99:25:ef:70:ef:36:70:1b:4e:
94:b6:4d:96:a0:d1:a3:3c:9c:0b:d1:56:a2:3a:34:4d:00:91:
4e:63:af:9e:6b:bf:00:90:78:06:4c:0c:dd:eb:1f:cb:2d:ea:
6b:88:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org