Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BVZPPetxlbRJxMwSy6e_wMLFKvU.roa
File: BVZPPetxlbRJxMwSy6e_wMLFKvU.roa (raw, json)
Hash identifier: LQNy3ErtY5vLC7qppLmxSvR50YK2lz2AmtDgGuEdAYk=
Subject key identifier: 05:56:4F:3D:EB:71:95:B4:49:C4:CC:12:CB:A7:BF:C0:C2:C5:2A:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD99CD302856357D29C368EB8FCA2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BVZPPetxlbRJxMwSy6e_wMLFKvU.roa
Signing time: Tue 02 Jan 2024 06:29:25 +0000
ROA not before: Tue 02 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
93.123.101.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 00:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d9:9c:d3:02:85:63:57:d2:9c:36:8e:b8:fc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05564f3deb7195b449c4cc12cba7bfc0c2c52af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:de:3f:63:5c:28:fd:b2:63:32:a7:c3:62:
c2:b0:9f:98:28:f3:26:ba:3b:88:5e:e8:5a:ff:eb:
51:a9:82:c5:a9:c7:f3:e7:00:42:7e:b5:3c:92:07:
e1:f8:08:6e:6d:5d:b6:6b:81:d7:12:11:46:0d:53:
23:e9:45:10:01:ab:f6:ba:33:b9:81:47:11:e0:18:
93:56:86:43:0b:4c:22:df:aa:4d:0a:c1:76:f3:bd:
7e:df:e6:0b:a7:41:69:ab:dc:df:d1:84:b6:c0:2b:
a0:b3:a8:b6:de:bb:55:1d:de:4c:8c:4d:1b:71:a1:
26:a7:12:ad:0c:3b:8f:d7:f7:40:27:5c:41:bc:85:
13:34:f0:37:70:76:f5:d5:af:cd:28:ae:59:d7:df:
e7:be:bd:82:03:8f:40:5e:b5:c0:63:04:a0:77:37:
fb:4b:b9:34:1b:de:e8:a5:6a:62:4f:1f:a8:b0:a2:
70:4a:f5:48:41:c0:04:6a:0c:b9:88:48:fc:e1:a1:
68:17:ae:aa:6a:0f:4f:c9:53:43:d5:90:8e:01:0e:
c5:79:b5:d9:5c:b7:be:99:87:44:55:35:8a:94:c1:
85:78:c3:d3:26:3f:05:b2:e3:64:e2:49:a5:dc:5e:
ed:e1:79:cd:2d:df:e9:bf:63:81:64:7a:eb:0d:bf:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:4F:3D:EB:71:95:B4:49:C4:CC:12:CB:A7:BF:C0:C2:C5:2A:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BVZPPetxlbRJxMwSy6e_wMLFKvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
93.123.100.0/23
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c2:1d:12:61:31:74:50:e2:a9:d3:a9:d1:a0:bd:02:59:d2:
32:fd:00:3a:81:ce:63:82:b6:0c:11:ee:1e:9c:b1:60:40:c6:
df:60:a5:c5:72:85:fc:9d:0c:c2:33:22:67:c0:db:fc:0d:57:
f4:1c:62:f0:61:ba:26:9c:c7:5c:39:a3:ae:19:2f:39:e9:1b:
76:99:ce:8f:56:59:60:21:5a:17:3a:d5:23:07:de:98:b4:d3:
72:16:ee:57:5b:29:91:a0:ca:4f:6f:40:dd:dc:42:56:ea:24:
50:ba:56:74:c1:15:3d:58:d5:3e:23:2a:69:53:9a:50:b8:0e:
7c:ef:48:fe:8e:e9:ff:e0:cf:f5:aa:14:57:ec:d7:52:fd:31:
7a:49:70:4a:a7:a5:c3:78:b5:3e:46:e6:10:37:79:b4:21:44:
8a:38:38:bd:57:f7:82:e5:e4:38:fc:0d:f2:f3:27:8d:fb:ac:
9f:1d:98:cf:83:bf:90:3d:ee:78:00:ee:08:3b:fb:c7:7b:b5:
cf:ba:3c:be:3d:3f:1a:72:f0:d4:c2:a9:0d:f4:e7:c1:a8:53:
26:08:cf:0e:b7:ac:37:53:50:08:13:bd:78:71:3f:bf:4f:16:
79:61:1b:e6:26:6b:9b:f3:16:89:63:fd:d9:d1:77:df:ff:b9:
5f:e4:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 01:53:09 2024 by rpki-client on console-ams.rpki-client.org