Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BWEEdsGnVmLTDlEbUQON8jmV0OY.roa
File: BWEEdsGnVmLTDlEbUQON8jmV0OY.roa (raw, json)
Hash identifier: kxDhbbl7aubUS63kGdtnOC235n96639tu5fs4EnZL4I=
Subject key identifier: 05:61:04:76:C1:A7:56:62:D3:0E:51:1B:51:03:8D:F2:39:95:D0:E6
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018570676D75636DC1B711E7294BA3DFE2F1
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BWEEdsGnVmLTDlEbUQON8jmV0OY.roa
Signing time: Mon 02 Jan 2023 02:55:04 +0000
ROA not before: Mon 02 Jan 2023 02:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212001
IP address blocks: 45.152.57.0/24 maxlen: 24
45.152.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 22:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:6d:75:63:6d:c1:b7:11:e7:29:4b:a3:df:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05610476c1a75662d30e511b51038df23995d0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:b5:d2:b7:c7:9b:f6:f9:39:56:d2:c8:b5:
60:db:19:2e:74:23:d6:a0:80:4f:9f:c2:18:c1:67:
6c:00:43:a7:22:b8:89:24:2b:b9:8d:ef:f5:73:7a:
2f:07:af:79:d4:21:12:85:79:a6:c1:c8:e0:89:2c:
8e:dc:12:46:23:40:7f:61:e8:5f:2a:77:26:f8:b1:
19:80:d3:d4:39:89:31:ee:54:e6:8c:e3:5e:66:e5:
59:ef:5b:d6:bb:e0:a3:7b:7b:30:e6:4a:f7:cc:2d:
25:32:dd:0e:6b:e0:c3:6e:33:5b:53:32:b1:b1:10:
94:5f:bd:9d:2b:24:57:04:c3:18:72:92:40:8c:0c:
ff:f9:cb:57:25:aa:89:46:7f:81:ad:97:b1:85:6f:
ef:ee:9e:1c:f1:37:27:f2:fd:07:f5:71:47:bd:38:
45:64:a4:8b:32:91:fa:9d:70:1f:28:f9:78:6e:cc:
0e:97:cc:49:14:0d:41:b1:b4:ef:50:9f:e1:df:96:
5a:ba:7e:b7:b0:02:2a:57:6c:c6:a4:b9:96:40:98:
93:00:6d:6d:a1:f4:e4:8f:0d:e1:00:24:08:cb:1c:
97:58:3a:e6:18:55:18:b9:93:b5:20:a6:5a:34:4b:
a2:58:a8:66:6f:5d:9f:7e:54:23:76:c6:46:71:41:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:04:76:C1:A7:56:62:D3:0E:51:1B:51:03:8D:F2:39:95:D0:E6
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BWEEdsGnVmLTDlEbUQON8jmV0OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.8.0/24
45.152.57.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3e:19:4d:72:59:98:3c:5a:7f:c7:53:9b:59:18:6f:23:ec:
d2:fd:fa:b5:44:50:26:de:ad:a3:5d:e5:ae:d6:37:21:7a:79:
c6:be:53:b0:eb:cd:dc:34:a8:8d:db:48:eb:2f:75:82:c2:7b:
eb:ea:c5:36:e2:ed:61:72:4b:57:45:20:7a:29:72:b9:52:85:
03:65:fc:d2:e5:14:87:1f:6a:97:3f:fa:10:95:58:c4:23:c0:
cd:a8:45:93:df:75:bb:5a:45:3e:f0:d5:64:83:95:d3:ac:1d:
cc:01:37:84:e8:fe:b7:49:ff:46:33:de:f2:b1:d3:e0:76:57:
68:ce:01:d0:77:d9:d3:6d:1c:0f:e9:1b:79:11:41:09:95:64:
20:cd:e8:64:08:c2:6c:ef:b2:cd:de:02:c9:15:d8:fa:16:81:
76:e1:8e:51:d3:29:4d:c2:0b:f7:87:e6:a6:3d:91:4f:e7:bb:
cd:d8:da:47:06:12:b8:97:e7:8e:e5:88:16:67:18:ce:c8:48:
be:0a:36:af:8a:d6:af:90:b0:e0:da:8e:14:15:a0:25:7a:e8:
8b:aa:dd:23:b9:f7:5c:53:0d:6e:a5:32:5c:06:69:17:8f:9d:
3f:b0:6e:c8:17:46:8d:99:f1:11:4e:03:e4:49:e0:ae:49:fa:
a3:f8:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org