Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Bwjenh9kIzyIGTZTr6Zkyx_6JNw.roa
File: Bwjenh9kIzyIGTZTr6Zkyx_6JNw.roa (raw, json)
Hash identifier: Nx6ufivWTEFTAZLg2Q+Skw6NKiGpnsj7U/37xxQ5WMQ=
Subject key identifier: 07:08:DE:9E:1F:64:23:3C:88:19:36:53:AF:A6:64:CB:1F:FA:24:DC
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018B1EBD797C67C736CCB149DAAD3F955DF6
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Bwjenh9kIzyIGTZTr6Zkyx_6JNw.roa
Signing time: Wed 11 Oct 2023 12:36:55 +0000
ROA not before: Wed 11 Oct 2023 12:36:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.153.164.0/24 maxlen: 24
45.140.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 17:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:bd:79:7c:67:c7:36:cc:b1:49:da:ad:3f:95:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 11 12:36:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0708de9e1f64233c88193653afa664cb1ffa24dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:a1:89:d8:19:79:24:cc:76:05:17:c3:2b:
c5:64:57:46:1e:cf:e5:0a:0f:75:f1:82:3e:52:90:
b4:c1:61:14:04:53:d9:78:cf:b3:c5:4e:76:cc:57:
f0:77:66:2e:13:d3:b7:21:f5:f8:2e:fe:dc:59:70:
7a:ad:cc:02:e7:8f:a9:89:a6:f9:82:bc:90:c3:c3:
8c:09:cd:dd:ea:23:b2:58:9e:24:6a:9e:56:9e:7a:
41:c8:e3:66:bf:50:c7:c6:18:af:8a:62:81:6b:60:
b9:65:ac:ab:0c:96:3f:1f:4c:cc:42:42:db:8d:ca:
ba:5c:28:40:23:b0:22:aa:2b:57:bf:fb:3d:ae:ee:
db:09:13:87:84:93:84:5d:72:13:43:26:12:83:1c:
9f:f8:5f:82:c5:26:05:01:8e:1e:82:16:97:19:bd:
2f:11:9e:21:5a:1b:27:e1:70:52:71:41:09:c3:cf:
ea:c6:f3:25:52:d2:0e:99:0e:9c:69:a8:e8:0e:ed:
4d:98:9d:3b:0c:7d:0e:49:50:e9:b3:f9:aa:18:d6:
80:e8:e9:e7:2e:e3:69:3f:f2:a1:97:28:f6:36:b9:
2a:2b:17:f6:91:11:90:74:59:24:d0:b5:12:6a:6c:
29:47:02:00:cb:e3:af:61:53:73:bd:2d:3d:8d:05:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:DE:9E:1F:64:23:3C:88:19:36:53:AF:A6:64:CB:1F:FA:24:DC
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Bwjenh9kIzyIGTZTr6Zkyx_6JNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a4:91:13:c6:b2:1d:e2:21:86:26:a0:fa:91:17:fe:7c:ea:
ba:6e:d8:8e:52:75:c5:cc:98:7d:e3:7c:2f:53:72:6e:a1:9a:
08:c8:8a:fe:1e:4f:4e:88:7a:1c:38:32:4f:c3:f9:78:ab:3c:
5f:5f:49:2a:be:37:8e:6f:0c:7f:9c:4e:cd:b8:b2:60:ed:24:
20:92:c6:5f:f2:ea:7b:5b:da:63:6b:3a:e3:53:50:0e:b7:5e:
9c:3a:38:ab:5d:0a:3c:a5:62:e8:5f:38:8f:f5:bd:21:44:dc:
d5:06:f3:9e:ac:fe:78:8f:be:00:96:49:a9:59:e1:05:2d:ef:
e7:b3:14:66:a1:8c:59:58:8b:da:9e:bf:72:e4:cd:82:ec:30:
7c:4c:09:e0:5d:c2:a5:e5:7c:1c:d3:04:78:48:ed:23:a5:12:
1b:27:96:a1:d0:d2:2f:50:63:6b:8d:eb:6a:b7:32:2b:56:92:
26:2d:53:28:26:bf:be:07:a9:72:41:85:a9:60:05:c9:dd:38:
3b:db:25:36:d9:1c:d0:0d:be:90:f7:6f:61:e5:b9:8a:7f:3d:
28:05:d1:f2:36:61:c9:17:c3:5e:d7:25:2b:98:15:26:e2:35:
e2:69:fa:d6:b5:67:62:14:66:40:35:01:13:dd:0c:c9:40:2e:
33:6f:61:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsevXl8Z8c2zLFJ2q0/lV32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz
NmUwNTUwHhcNMjMxMDExMTIzNjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzA4ZGU5ZTFmNjQyMzNjODgxOTM2NTNhZmE2NjRjYjFmZmEyNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgahidgZeSTMdgUXwyvFZFdGHs/l
Cg918YI+UpC0wWEUBFPZeM+zxU52zFfwd2YuE9O3IfX4Lv7cWXB6rcwC54+piab5
gryQw8OMCc3d6iOyWJ4kap5WnnpByONmv1DHxhivimKBa2C5ZayrDJY/H0zMQkLb
jcq6XChAI7AiqitXv/s9ru7bCROHhJOEXXITQyYSgxyf+F+CxSYFAY4eghaXGb0v
EZ4hWhsn4XBScUEJw8/qxvMlUtIOmQ6caajoDu1NmJ07DH0OSVDps/mqGNaA6Onn
LuNpP/Khlyj2NrkqKxf2kRGQdFkk0LUSamwpRwIAy+OvYVNzvS09jQVItQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAcI3p4fZCM8iBk2U6+mZMsf+iTcMB8GA1UdIwQY
MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt
ZDM3ZGY2MzRhOTI5LzEvQndqZW5oOWtJenlJR1RaVHI2Wmt5eF82Sk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5
LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYzDAwQA
LZmkMA0GCSqGSIb3DQEBCwUAA4IBAQCrpJETxrId4iGGJqD6kRf+fOq6btiOUnXF
zJh943wvU3JuoZoIyIr+Hk9OiHocODJPw/l4qzxfX0kqvjeObwx/nE7NuLJg7SQg
ksZf8up7W9pjazrjU1AOt16cOjirXQo8pWLoXziP9b0hRNzVBvOerP54j74Alkmp
WeEFLe/nsxRmoYxZWIvanr9y5M2C7DB8TAngXcKl5Xwc0wR4SO0jpRIbJ5ah0NIv
UGNrjetqtzIrVpImLVMoJr++B6lyQYWpYAXJ3Tg72yU22RzQDb6Q929h5bmKfz0o
BdHyNmHJF8Ne1yUrmBUm4jXiafrWtWdiFGZANQET3QzJQC4zb2Go
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org