Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BVqRuLXtHS-7QtocLr2j-1KzHGk.roa
File: BVqRuLXtHS-7QtocLr2j-1KzHGk.roa (raw, json)
Hash identifier: pkF5LOFLriVRGH6UkheVJYyweEltPDteq6xHZ3GvXbM=
Subject key identifier: 05:5A:91:B8:B5:ED:1D:2F:BB:42:DA:1C:2E:BD:A3:FB:52:B3:1C:69
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018F9F6012F6268EF504B343E8CDA17F5379
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BVqRuLXtHS-7QtocLr2j-1KzHGk.roa
Signing time: Wed 22 May 2024 08:17:04 +0000
ROA not before: Wed 22 May 2024 08:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 08:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:60:12:f6:26:8e:f5:04:b3:43:e8:cd:a1:7f:53:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 22 08:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=055a91b8b5ed1d2fbb42da1c2ebda3fb52b31c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:77:fa:cf:0a:11:b9:6a:6b:27:46:25:82:
5c:a4:30:44:41:d3:51:6e:65:68:84:e1:c5:7a:d8:
f2:64:7d:87:33:7d:7b:0b:81:db:0a:e1:9e:3b:d6:
7f:4a:01:fe:65:25:47:6b:aa:61:b7:fd:9c:e3:80:
c3:47:6e:bf:1d:18:8f:01:39:76:26:bb:e5:41:e3:
5e:f6:b2:c4:e4:8c:db:9c:35:62:a4:a4:d0:85:a4:
29:ff:44:5b:32:b5:d6:8d:c8:0b:72:ca:7e:60:b9:
d3:30:79:b2:21:47:35:38:a6:04:cb:08:03:1c:43:
4b:f2:cb:82:7d:05:b3:21:a0:26:b1:7f:2d:86:29:
c2:a8:1d:9d:cd:ad:80:2e:6a:89:70:d1:6e:99:ba:
c9:ea:bd:db:f8:46:35:0f:ef:60:f7:2e:42:13:a0:
95:56:f1:63:14:a6:e8:9f:79:b3:4b:46:1e:7e:d8:
e6:7e:6e:a0:2d:e0:c7:b1:cb:b6:1d:22:29:9b:15:
fa:83:c9:7f:7c:f2:30:52:78:d3:ce:84:df:57:26:
a4:43:79:e4:fc:cf:cf:a8:f2:41:4b:fb:d4:f2:6e:
73:3d:9d:2c:bf:d2:b0:23:88:ce:bf:47:c2:f9:fd:
3a:63:10:9e:ff:98:81:96:ef:ed:70:ec:c9:c9:f5:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:91:B8:B5:ED:1D:2F:BB:42:DA:1C:2E:BD:A3:FB:52:B3:1C:69
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BVqRuLXtHS-7QtocLr2j-1KzHGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
48:04:9e:dc:db:e7:94:1f:e5:81:ea:18:17:02:a5:22:2c:06:
ae:c0:2c:96:71:2d:a1:c1:71:a6:43:ed:7b:7f:b0:2b:ef:b9:
c4:9b:c8:0c:70:b8:79:4a:6d:15:fb:fc:56:1f:ed:bf:6a:31:
7d:f5:d5:8f:92:70:a2:2c:00:c3:3b:fc:8e:ee:ae:89:fa:00:
5d:6c:a2:04:aa:39:0b:77:bc:4e:c3:14:58:d3:d5:90:39:9a:
7e:57:46:a8:e6:97:04:2f:c1:3e:ed:c7:fb:dd:0a:15:bf:bb:
73:9a:fb:1b:fe:b2:c8:12:9e:b1:15:a7:d8:1e:c2:2f:85:f4:
a5:9b:83:32:74:54:c5:0c:1f:a2:39:c1:34:2f:26:fa:20:2d:
3c:ed:6c:d4:0e:0f:92:2f:4c:75:ad:30:73:5f:fc:2b:e8:35:
31:5b:cf:84:8a:0f:9b:bc:42:53:25:34:8b:47:9c:cd:9e:3f:
fc:ac:69:6b:dd:dc:74:56:84:75:86:1d:5e:35:d5:e1:a7:cf:
76:5f:18:87:b2:0b:1f:3d:eb:3f:74:68:95:ac:97:7a:8f:fe:
13:78:23:4c:26:0c:6d:3e:9d:aa:4a:f8:a8:37:c7:a9:00:1a:
e2:ce:20:2f:f7:5b:3c:7b:a9:f8:c9:58:82:00:0c:2c:4b:ab:
25:dd:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org