Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/bwswIvYznKBxHm0tj5FHAxm-UJU.roa
File: bwswIvYznKBxHm0tj5FHAxm-UJU.roa (raw, json)
Hash identifier: bB8Kw1E1EqX3nYXCPOyYdSyZzxt1NMGN3oQJZCpn8Bs=
Subject key identifier: 6F:0B:30:22:F6:33:9C:A0:71:1E:6D:2D:8F:91:47:03:19:BE:50:95
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 018CC9BCDC685E50D93FA62BDA453A5C9B50
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/bwswIvYznKBxHm0tj5FHAxm-UJU.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29186
IP address blocks: 195.85.219.0/24 maxlen: 24
193.104.16.0/24 maxlen: 24
2001:678:abc::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 17:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dc:68:5e:50:d9:3f:a6:2b:da:45:3a:5c:9b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0b3022f6339ca0711e6d2d8f91470319be5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:24:75:d6:92:e2:71:11:03:d0:2f:ee:6f:
00:04:00:18:d3:f8:57:24:fe:10:5f:2b:e2:fa:61:
2f:77:63:71:eb:ef:ac:e6:5b:55:a6:df:79:6b:10:
b0:5c:bd:e2:a7:5a:bd:10:0f:56:bf:79:25:05:17:
c8:52:cc:b1:61:e3:d6:98:ed:49:51:6c:3b:5c:13:
a9:63:98:d7:52:e3:07:39:a0:44:dc:a3:a8:e1:ac:
38:66:f1:ab:a5:3b:e2:6a:26:02:f7:a4:51:e5:81:
81:72:4c:58:66:a6:cc:44:fa:30:eb:72:01:24:4c:
8a:b8:cd:6f:5d:9b:2c:96:82:22:59:77:e4:c9:c3:
41:6c:06:c9:e8:94:b1:4a:41:88:05:4c:6e:7e:5d:
14:2f:f3:19:b4:bc:d3:21:ea:b0:a0:20:4a:dd:fb:
41:1b:26:d8:4f:43:74:61:a4:9a:2c:d2:04:de:91:
46:a2:73:e2:c5:b5:a3:16:f2:00:df:95:f1:76:ef:
49:92:56:6e:05:c4:8a:80:03:1f:f1:a4:02:c8:0f:
92:0f:3f:72:11:dc:24:de:1f:80:4f:c3:34:67:7d:
de:d2:c8:67:8a:b0:12:7b:53:1d:5b:2f:32:6d:5d:
49:1b:fc:26:ba:fb:f3:b2:f7:5d:dc:ff:d9:e1:73:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:30:22:F6:33:9C:A0:71:1E:6D:2D:8F:91:47:03:19:BE:50:95
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/bwswIvYznKBxHm0tj5FHAxm-UJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.16.0/24
195.85.219.0/24
IPv6:
2001:678:abc::/48
Signature Algorithm: sha256WithRSAEncryption
7f:29:42:20:7a:9d:1c:5f:38:6a:50:85:16:62:cc:08:33:ea:
e2:fc:25:b2:ea:a8:d6:19:e1:b0:1e:e5:ee:f6:8d:70:24:f2:
28:7a:77:e2:4f:de:d9:b2:2c:9c:cf:33:7f:3c:31:ac:e4:8b:
e5:42:dc:20:30:d8:a5:3f:62:95:71:24:6b:53:f5:b3:71:df:
69:ad:45:f6:28:0a:53:0f:e7:6f:0e:4b:6d:0b:a3:aa:ad:53:
28:7c:4c:2a:98:e0:a4:32:47:42:48:71:f0:2c:bf:dd:54:8d:
4f:e7:17:4e:00:2a:91:16:4c:a3:36:a6:5d:89:ed:77:a5:93:
a6:fd:ff:2c:87:11:46:68:a0:e3:d9:51:05:bd:12:39:23:8e:
cb:52:46:28:9a:06:98:b6:a9:3a:c1:cc:32:bf:de:6e:39:66:
49:63:8c:4d:ed:dd:ae:2d:c5:99:7f:08:f7:f4:01:6b:99:3e:
31:74:78:aa:7d:65:fb:8f:18:98:77:35:0d:ec:6f:4d:0d:df:
97:2d:d6:da:c0:19:9f:83:f9:fc:73:bc:e3:32:c2:5b:6c:39:
80:7d:43:76:be:7f:79:a5:0e:9c:74:6b:7f:f3:12:d0:96:35:
91:08:c4:87:0b:81:ec:1b:60:db:ee:e7:03:ad:73:91:16:7e:
ba:91:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:01 2025 by rpki-client