Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/boShXl-0_WDXaGdkTCwu32ejIjQ.roa
File: boShXl-0_WDXaGdkTCwu32ejIjQ.roa (raw, json)
Hash identifier: E/lTcJkm4DbDC4o9jhHKx87rxeKzQMCjbMRkuG6zz4w=
Subject key identifier: 6E:84:A1:5E:5F:B4:FD:60:D7:68:67:64:4C:2C:2E:DF:67:A3:22:34
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 01856B934FABAEF85E986CD78B5B59F6CDDC
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/boShXl-0_WDXaGdkTCwu32ejIjQ.roa
Signing time: Sun 01 Jan 2023 04:24:54 +0000
ROA not before: Sun 01 Jan 2023 04:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39530
IP address blocks: 185.255.232.0/22 maxlen: 25
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4f:ab:ae:f8:5e:98:6c:d7:8b:5b:59:f6:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Jan 1 04:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e84a15e5fb4fd60d76867644c2c2edf67a32234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:8b:c1:09:6b:11:07:e7:1a:76:e9:56:18:
01:38:0a:e9:52:e0:12:85:8b:5f:8b:6d:2b:9f:57:
27:01:9e:9f:4f:74:b5:98:1b:42:2c:20:00:bc:dd:
ed:fc:b3:e7:1e:3c:e6:59:65:8f:71:1d:ce:74:1e:
ae:ef:ac:ba:28:f3:bc:37:8c:89:ff:08:2a:94:05:
de:49:60:c0:80:d6:ae:2b:7a:07:f5:f7:93:b6:15:
14:f6:90:dd:0a:53:ac:4d:4e:fc:9e:ae:88:d0:b6:
72:57:6a:8b:c5:8a:6e:44:db:8c:e8:ed:b3:69:90:
8a:07:7d:f5:a4:6c:31:c0:79:74:3c:70:cd:ec:e4:
d5:f9:56:4e:71:3b:c6:b4:7a:b6:57:80:b0:f2:fb:
67:01:cf:ae:9d:2c:99:a6:27:b1:11:65:4e:19:0d:
79:1a:42:a2:84:60:14:4a:56:f9:d1:e6:7c:90:f7:
0a:d5:a9:5e:ca:91:12:4b:35:5f:14:46:4b:1c:fe:
2a:28:90:e3:f5:f1:1f:37:7c:91:77:63:ed:51:4b:
2a:7a:7d:37:27:15:3c:44:b2:bb:12:22:65:91:1f:
37:e5:9f:76:d0:f4:f5:80:3e:3d:39:7b:21:12:39:
9a:d2:17:83:88:c7:b1:4b:e5:92:43:fb:a3:a7:33:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:A1:5E:5F:B4:FD:60:D7:68:67:64:4C:2C:2E:DF:67:A3:22:34
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/boShXl-0_WDXaGdkTCwu32ejIjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.232.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e9:e5:05:60:80:a0:7c:e0:13:f8:0c:b7:81:84:18:00:a0:
dd:00:6f:37:d2:91:b3:3b:bf:f7:21:38:70:03:cd:4c:e7:7c:
b5:b1:1f:12:53:ad:6f:b0:8b:57:5c:4d:9e:61:c1:c5:5f:0e:
51:08:35:b1:68:25:61:00:0e:44:aa:51:20:9b:e7:91:5e:f5:
e0:c3:06:5f:5a:7c:77:b4:0c:9e:b7:32:10:92:8b:60:1e:63:
6a:6b:50:b9:00:65:51:57:a1:b9:b8:28:6c:32:6b:05:49:8f:
4f:c2:e5:33:05:a3:e3:59:8a:85:b3:0a:7e:5d:2f:57:6b:12:
7f:7e:da:b6:f5:90:85:79:2b:b7:46:a9:fc:a3:b0:83:ee:16:
0b:b4:3e:89:a2:db:8f:ed:f8:8a:ed:2a:ae:a9:4a:58:63:6a:
dc:83:fb:f0:ff:bf:c1:b7:39:7c:f4:18:74:19:ff:21:28:85:
03:79:0c:46:04:b2:cd:72:4b:64:23:41:d6:a8:53:41:f7:f4:
4e:f9:e9:44:a5:b5:bf:72:31:b0:43:ac:78:2b:3e:57:96:2c:
10:04:51:13:53:91:52:cb:b3:f6:57:9c:f3:ce:57:f2:16:e5:
84:6c:85:c9:37:21:c3:4a:9d:80:9a:ce:7b:42:d7:3a:37:2b:
cf:cc:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org