Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BFSnWAhfb_-IxoT_VlgLPLROe6k.roa
File: BFSnWAhfb_-IxoT_VlgLPLROe6k.roa (raw, json)
Hash identifier: tpjRuvzt+kK4o3wVVnM4+o02BqxdfdIqeP/Z7oSl8Nw=
Subject key identifier: 04:54:A7:58:08:5F:6F:FF:88:C6:84:FF:56:58:0B:3C:B4:4E:7B:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B811B92F65DBAF8ED82596CDD8E7C93C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BFSnWAhfb_-IxoT_VlgLPLROe6k.roa
Signing time: Tue 25 Apr 2023 10:59:41 +0000
ROA not before: Tue 25 Apr 2023 10:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 45.91.192.0/24 maxlen: 24
194.180.51.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:11:b9:2f:65:db:af:8e:d8:25:96:cd:d8:e7:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 25 10:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0454a758085f6fff88c684ff56580b3cb44e7ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:db:be:dd:63:dc:cf:8d:d5:4c:45:35:45:
19:0f:df:6d:14:08:5b:8c:24:23:b3:40:33:e2:f3:
43:59:e9:52:94:09:75:01:ef:27:d0:1d:65:d5:51:
e6:b8:4b:36:33:d9:a0:28:32:8b:43:ef:4e:0d:a6:
fe:1a:b9:cf:c6:ad:36:1d:d4:09:91:e6:35:44:7f:
40:01:b4:00:ee:18:a9:90:c4:c6:b2:50:c3:1d:7e:
2e:84:f6:61:21:58:40:a3:51:45:d9:cc:c5:ac:52:
2e:a9:dc:09:65:43:63:68:20:91:9b:24:dc:48:71:
b0:7c:f7:7c:07:c8:7b:5a:a7:56:ca:fd:92:ba:5f:
55:f8:4e:46:11:0f:94:e0:8d:a8:00:85:46:1c:ad:
d9:37:5c:ef:88:5c:0a:47:06:d9:1c:72:5b:21:fd:
63:84:87:44:87:97:29:31:b2:e4:ce:6f:07:62:a9:
a0:85:1d:57:c5:63:82:5b:32:63:9a:ea:68:19:fb:
ac:a3:3d:a5:28:c2:6c:b7:87:a7:55:5c:b2:db:be:
d7:52:3c:c5:0b:78:5a:50:21:32:23:21:b1:d4:25:
0b:0e:1c:c7:44:82:15:bd:23:45:e9:86:73:03:35:
46:84:50:ce:e6:27:e6:a4:3a:83:b2:7a:21:7a:08:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:A7:58:08:5F:6F:FF:88:C6:84:FF:56:58:0B:3C:B4:4E:7B:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BFSnWAhfb_-IxoT_VlgLPLROe6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.192.0/24
80.76.48.0/24
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f0:cd:5a:08:98:1f:ce:73:66:a0:60:e0:13:bf:b6:16:58:
52:20:60:c6:12:54:a0:c8:18:1d:57:22:27:4d:60:8f:a9:8e:
73:44:ff:1a:19:cd:82:6a:64:26:84:d5:f9:a2:95:e6:2a:7b:
7a:a4:3e:d6:86:b0:37:ce:94:c5:23:c2:db:ea:92:b6:d7:9a:
3e:85:aa:f0:4d:ab:f2:f8:24:98:14:f0:92:85:75:95:6e:49:
e0:56:14:36:c3:3c:8a:82:2e:16:4f:ef:e4:ce:ac:f2:b5:55:
5b:35:1b:19:20:c5:03:ed:64:92:7f:17:e5:c8:94:94:7b:a0:
a8:3a:b6:4c:b6:42:c5:31:0c:b3:40:b1:25:60:df:ca:98:dc:
4d:ad:ef:7e:63:76:f3:b8:c7:59:e8:98:44:77:72:28:d6:7d:
7a:f5:4c:5b:c7:45:84:68:44:a3:20:a6:b3:48:87:89:60:5d:
fb:2b:ed:2d:84:71:07:39:42:7a:f6:5b:a4:02:07:70:1f:91:
e4:f3:9f:4e:ec:a9:dd:36:86:42:ee:1f:b9:72:af:32:ae:35:
b9:19:2b:ee:ba:b1:46:70:d3:88:bc:e2:6e:ec:77:9d:44:1a:
1c:e8:00:72:ec:bb:83:a6:9b:2b:f5:86:0a:db:24:c9:f1:da:
77:83:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org