Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/bgISQnS_iog7XMQRA1qe1LXMNuE.roa
File: bgISQnS_iog7XMQRA1qe1LXMNuE.roa (raw, json)
Hash identifier: HrMPqVzqlae84u9QjiwFY4n40fyPh4JgscrJBQoMYAI=
Subject key identifier: 6E:02:12:42:74:BF:8A:88:3B:5C:C4:11:03:5A:9E:D4:B5:CC:36:E1
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 01857246B150DF320B139C95A0D9FB50C025
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/bgISQnS_iog7XMQRA1qe1LXMNuE.roa
Signing time: Mon 02 Jan 2023 11:38:33 +0000
ROA not before: Mon 02 Jan 2023 11:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60472
IP address blocks: 185.128.11.0/24 maxlen: 24
2a0f:5ac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b1:50:df:32:0b:13:9c:95:a0:d9:fb:50:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jan 2 11:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e02124274bf8a883b5cc411035a9ed4b5cc36e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:24:34:50:29:6f:21:52:25:02:5f:aa:49:
e1:24:94:89:b4:e3:56:9d:a5:6d:a3:74:29:0c:31:
21:00:92:fb:4a:15:ed:bd:45:1f:04:26:40:14:d0:
fa:00:9d:0c:31:9e:96:70:fc:87:02:06:32:1a:69:
78:9d:ef:ca:94:19:79:c7:da:4a:64:ea:69:e4:5f:
28:ca:b6:6a:2c:e6:a3:c5:c7:e5:89:fa:d2:2c:19:
35:9a:94:dd:6b:0b:26:7b:8c:1f:71:fd:c7:f3:52:
d2:22:1a:bc:98:db:39:e3:ab:d2:8d:bd:75:bf:01:
91:16:c3:97:1a:8e:98:20:12:27:d7:fb:17:0e:9b:
16:70:46:54:67:e7:99:dc:68:17:9e:63:7c:61:b4:
23:c1:bb:28:b6:0e:de:7e:17:57:21:90:41:76:c0:
e9:d9:9e:f7:c7:d9:8e:cf:52:6e:be:ce:a2:e9:4a:
de:6e:1c:15:ec:2a:f3:f8:26:18:e3:31:84:5d:0a:
77:cb:d2:ea:90:38:2a:1a:d3:5e:d7:16:4f:4e:4e:
ba:0d:b5:e8:0c:17:b7:7c:fb:00:f6:43:1b:fa:91:
9f:3d:60:dd:53:bd:1e:d8:b7:a9:00:a0:dd:d2:1d:
bb:77:30:35:6e:9f:68:ea:a3:e6:1b:88:93:47:47:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:02:12:42:74:BF:8A:88:3B:5C:C4:11:03:5A:9E:D4:B5:CC:36:E1
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/bgISQnS_iog7XMQRA1qe1LXMNuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.11.0/24
IPv6:
2a0f:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:3a:54:00:d3:4e:fa:fd:43:9f:c0:e2:c9:f4:45:56:94:d1:
c1:1e:2d:79:60:29:35:e0:e6:f9:c8:c9:a4:48:24:41:c2:83:
cf:13:a0:e0:6f:ec:f2:56:0a:33:03:ac:ad:48:0b:74:09:00:
b3:bb:4f:e0:ec:d0:c0:33:f5:0d:6c:63:a9:3f:6a:2a:55:80:
c3:1f:ad:f2:a2:72:08:93:c7:c8:db:5a:07:70:30:b8:4e:fb:
55:88:6a:32:5a:4c:ce:f4:79:cb:d3:49:b7:e1:8e:11:2f:1a:
e4:59:c1:2b:68:aa:bc:e9:b7:97:38:cc:38:40:b6:73:22:b9:
3e:59:67:ba:d7:89:ec:3e:7b:b3:7c:ca:b0:2e:fd:7a:9d:45:
28:28:9d:5c:35:c7:db:55:ee:83:d9:8a:70:0d:9c:e2:63:56:
f4:d5:55:e7:06:15:1c:45:c3:fc:d9:3c:a7:75:16:e9:e2:11:
04:e8:65:14:c7:f3:88:79:a1:6c:18:fe:4e:4a:03:37:d5:77:
9b:88:04:e3:62:ba:2b:37:32:f0:07:58:bf:1d:ab:8f:36:75:
38:07:98:92:93:45:e6:3d:7d:0d:7d:33:bd:82:56:d4:89:cb:
fb:10:f3:31:cb:84:03:68:df:7f:37:b2:c6:e9:3c:06:45:10:
c4:1c:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:10 2024 by rpki-client on console-ams.rpki-client.org