Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BFVLmmWxbW4qp1K_xUHnP2BoOSI.roa
File: BFVLmmWxbW4qp1K_xUHnP2BoOSI.roa (raw, json)
Hash identifier: JG+MX7xjYOkuZXnaM5p2EOZijN5S/9w6LIRu4MW3eWY=
Subject key identifier: 04:55:4B:9A:65:B1:6D:6E:2A:A7:52:BF:C5:41:E7:3F:60:68:39:22
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC80202751242E93A703CABB20100FB51
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BFVLmmWxbW4qp1K_xUHnP2BoOSI.roa
Signing time: Tue 02 Jan 2024 02:30:24 +0000
ROA not before: Tue 02 Jan 2024 02:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21487
IP address blocks: 46.48.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 10 Apr 2024 12:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:02:75:12:42:e9:3a:70:3c:ab:b2:01:00:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04554b9a65b16d6e2aa752bfc541e73f60683922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:da:e7:9b:b9:8a:42:29:1e:78:3a:b3:de:
11:1d:7f:46:88:c9:5a:70:9d:d5:dc:19:2c:19:58:
b5:6e:5d:37:5a:be:ec:ec:24:f4:e5:3d:1e:ae:4b:
c0:5d:47:5f:e5:b2:4f:e3:a3:0f:c3:83:46:99:52:
e0:fb:78:cf:85:50:b2:57:a6:82:76:91:b9:ae:c6:
c6:50:65:5f:1c:27:2e:f2:bf:44:39:d6:e4:3d:e4:
94:f2:32:5b:09:f4:73:8c:36:d3:1e:2d:33:47:d7:
10:1e:20:0f:e1:79:ca:93:69:31:07:82:aa:16:fd:
21:e5:81:2b:5e:f6:70:79:44:38:ef:ac:c6:ee:c9:
64:6c:5c:69:b9:c5:50:18:e1:d7:af:eb:d1:b9:e5:
43:63:c7:d6:1d:28:53:9c:d6:2c:f2:ee:ad:e2:d5:
27:be:13:4e:0f:78:1d:47:df:b5:36:42:b3:0d:84:
3f:f7:10:e7:98:03:c6:6b:32:17:79:6a:4e:2d:31:
b7:5c:c4:8d:9d:af:de:f5:29:35:84:ae:36:70:47:
f7:94:97:49:23:54:97:2e:f1:09:70:8c:25:36:66:
7d:bd:ed:0e:b0:dd:19:ca:54:7d:15:30:a7:b8:29:
91:f6:de:ff:73:8c:08:b3:d9:50:b8:80:74:83:39:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:4B:9A:65:B1:6D:6E:2A:A7:52:BF:C5:41:E7:3F:60:68:39:22
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BFVLmmWxbW4qp1K_xUHnP2BoOSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.48.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:dc:aa:9e:e3:42:9e:82:7d:46:e1:d0:aa:81:fc:70:a9:ad:
35:20:9e:61:be:cb:02:af:54:3f:0c:92:70:1a:b4:4b:67:0a:
c3:93:7d:b1:39:9c:ae:06:7c:13:f5:7f:22:13:88:9b:b8:e7:
5c:88:14:56:54:af:ad:f2:ba:47:77:a3:7b:8c:a8:93:68:d7:
fd:97:5e:2c:3e:f6:5c:95:03:e0:9a:67:1a:cd:c2:5e:1a:61:
55:a4:86:3c:b5:03:88:11:72:d1:44:94:19:43:00:35:35:04:
d5:a1:f6:bc:9e:a4:65:81:51:dc:86:b1:1b:af:27:af:2c:8c:
de:ac:6a:b5:2d:49:0c:51:43:77:6d:a4:44:b2:d8:3c:a9:02:
eb:44:71:35:0f:71:3e:8b:dd:86:d3:2c:a9:cb:c2:29:51:e1:
26:f0:3f:6d:71:9a:b4:3e:d3:90:ae:7a:38:a4:eb:7b:36:14:
1a:dd:78:1c:fe:d6:a9:ee:5e:34:2f:17:33:a7:a7:a1:3d:78:
bb:96:9a:7d:a8:6c:89:75:2e:4a:b8:a3:e0:74:28:87:4a:de:
ff:02:1f:c5:90:1c:1e:49:8f:4d:bd:b9:43:da:3d:0c:d7:a2:
02:5c:85:bc:03:e6:d0:96:55:61:51:17:13:62:a8:a9:6e:8b:
8b:30:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org