Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Bc0uqU2tS_C9dlbqUJZhB4fPBSk.roa
File: Bc0uqU2tS_C9dlbqUJZhB4fPBSk.roa (raw, json)
Hash identifier: BqfbcSX0hzwDeGlqiQzDNQkXAe/VO7avR8rRL2ixbJ0=
Subject key identifier: 05:CD:2E:A9:4D:AD:4B:F0:BD:76:56:EA:50:96:61:07:87:CF:05:29
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019094B11F93154D46115BEE2DEBC8D1822B
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Bc0uqU2tS_C9dlbqUJZhB4fPBSk.roa
Signing time: Mon 08 Jul 2024 23:32:34 +0000
ROA not before: Mon 08 Jul 2024 23:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 91.238.123.0/24 maxlen: 24
194.9.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 17:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:94:b1:1f:93:15:4d:46:11:5b:ee:2d:eb:c8:d1:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Jul 8 23:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05cd2ea94dad4bf0bd7656ea5096610787cf0529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:63:0c:5f:74:c7:9a:7b:b4:12:58:39:e6:
ad:09:39:06:5c:bd:58:0e:d7:39:1a:ad:16:15:71:
be:ec:88:92:42:e5:8b:0f:80:02:38:26:01:8b:a6:
5d:92:d2:8f:1a:09:4d:d9:6b:c0:23:25:db:6f:89:
94:7d:15:f1:3e:ce:0b:8b:cc:a5:67:33:fb:db:7d:
a3:5f:09:4e:73:cb:de:e1:db:a6:16:85:5c:3e:4c:
51:87:39:c7:0e:34:e5:cb:fd:18:df:a0:c6:3d:6b:
69:6b:6c:d7:a6:79:19:4d:ac:59:39:ae:e7:39:5c:
65:59:1c:c0:9a:a8:f7:8d:11:5b:c3:48:2a:c8:e5:
70:25:1d:48:50:7c:db:1e:a5:20:10:16:15:94:d2:
67:8f:48:50:49:b7:e6:e2:34:fa:c2:6b:95:0c:49:
1b:76:3d:4a:59:21:87:28:3e:81:00:d4:c7:15:0b:
1b:d0:39:a5:21:9d:c8:a5:73:96:47:d9:60:1d:b8:
92:15:9d:55:e5:1b:30:90:40:9a:68:41:0b:e9:eb:
d1:c8:30:bc:33:f8:77:df:53:37:bc:87:03:d7:3d:
21:b0:65:20:47:c9:61:c7:02:08:bd:0b:81:fe:41:
0f:a0:57:b2:b5:27:9d:3d:ef:a7:b4:7b:eb:71:65:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:2E:A9:4D:AD:4B:F0:BD:76:56:EA:50:96:61:07:87:CF:05:29
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Bc0uqU2tS_C9dlbqUJZhB4fPBSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.123.0/24
194.9.6.0/24
Signature Algorithm: sha256WithRSAEncryption
20:be:68:a2:72:d1:ae:4f:ff:bc:ea:04:0a:45:2a:c3:22:fa:
4c:0a:e3:f7:9f:ce:71:0a:ca:85:94:ec:85:d4:c0:fd:ab:7a:
80:f2:c5:cb:93:89:2d:31:e3:14:f0:ab:8c:6f:96:37:a6:62:
ad:6c:41:c4:9a:3f:6a:14:fe:36:91:09:9e:24:2f:ff:ba:a6:
1e:7f:c2:a9:c9:20:72:b6:1b:80:fd:6f:df:69:ba:a3:e8:bb:
7e:1e:62:c9:66:54:ef:1f:80:c3:54:33:4c:0a:c7:14:e1:22:
14:be:ae:56:5c:1f:7c:d2:45:d4:92:2f:5d:4e:a7:ce:73:af:
d4:33:3d:b2:13:46:0b:4f:ed:e8:f2:39:0e:ab:bf:41:ad:55:
ac:42:30:a3:ff:2f:45:e4:c2:15:43:ff:8d:3e:cc:6d:55:29:
ac:b7:f2:7b:2b:67:c5:ca:7a:53:c4:41:02:14:7b:7f:4c:b2:
74:80:d6:f5:c4:fd:81:0a:db:90:07:32:48:83:51:3d:6d:9d:
b9:64:61:f1:34:44:ba:be:16:94:a2:f8:81:1a:d6:be:e8:03:
ba:97:68:74:8c:27:dc:c7:0c:90:aa:e0:32:75:cd:e5:77:a4:
3b:8c:45:a3:6e:04:af:56:f1:9b:90:21:59:a6:0b:9d:9f:02:
a2:7e:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org