Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BwmPd5y8tYjBRAMVypMMWol-g0c.roa
File: BwmPd5y8tYjBRAMVypMMWol-g0c.roa (raw, json)
Hash identifier: fixKtqa6+OCUivHm6KgelubgAtUzplGcU7pVkY2Og1k=
Subject key identifier: 07:09:8F:77:9C:BC:B5:88:C1:44:03:15:CA:93:0C:5A:89:7E:83:47
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0192542BCABE8323C15D579AB0AC65274985
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BwmPd5y8tYjBRAMVypMMWol-g0c.roa
Signing time: Thu 03 Oct 2024 20:56:48 +0000
ROA not before: Thu 03 Oct 2024 20:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 146.19.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 05:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:2b:ca:be:83:23:c1:5d:57:9a:b0:ac:65:27:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 3 20:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07098f779cbcb588c1440315ca930c5a897e8347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:2d:a0:ef:98:98:01:ba:66:1c:3f:c9:46:
09:8b:41:02:96:16:b5:ed:7e:1c:46:9f:d6:93:92:
f7:f6:d7:26:ce:b1:43:14:a0:f3:7d:f7:8d:bf:d2:
a0:c2:20:f5:f1:34:9b:07:16:2c:83:22:e0:26:68:
d4:7b:cd:ee:27:77:34:fe:73:0b:23:6b:09:c4:31:
e0:ac:47:e2:42:05:61:12:b5:b1:63:52:ef:53:b5:
3a:71:c1:c9:2a:60:d0:fb:88:58:a2:5c:cc:53:c3:
0b:cf:de:ad:b1:12:c8:f6:e8:39:44:58:3d:50:a7:
bc:2c:db:44:56:f4:4f:35:50:52:6f:0d:b5:03:c4:
bc:a4:bd:cb:d5:d7:d7:2b:53:fb:0a:9b:ba:23:19:
1b:89:40:33:8f:40:a9:ce:1c:56:38:28:34:52:e6:
d3:2e:85:50:fd:19:69:e3:bf:41:d6:93:65:fd:66:
e1:80:56:4a:c3:b0:ce:7a:2d:88:fa:5a:4e:3a:0a:
0c:e3:0b:17:42:2d:89:87:0a:7e:28:14:98:2f:63:
2b:ec:08:98:0d:74:ff:36:1f:75:d4:9e:9f:f4:15:
d1:1b:1f:61:73:03:98:49:53:9c:04:2d:3d:e1:a2:
4d:55:9c:05:2c:b4:52:69:34:af:b7:dc:06:4a:24:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:09:8F:77:9C:BC:B5:88:C1:44:03:15:CA:93:0C:5A:89:7E:83:47
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BwmPd5y8tYjBRAMVypMMWol-g0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
be:86:5b:28:37:f2:fb:4b:c1:69:7b:28:21:be:72:04:88:42:
72:c9:27:6a:ec:9c:d2:87:be:f7:c7:aa:08:2a:aa:c5:b9:5f:
b8:19:42:23:06:6c:ad:7a:f2:41:73:4f:9b:a8:51:67:4b:a6:
de:18:93:ef:d3:7f:65:8e:3d:b5:36:6e:2c:4e:16:2e:31:45:
62:75:a6:b7:42:71:da:5e:e6:6d:23:24:ae:34:34:94:9f:64:
5f:35:d7:74:ba:a2:43:b7:de:3c:30:fc:c3:a4:53:e9:b5:92:
3a:9b:45:a6:e7:b5:64:69:ff:14:74:3c:b2:75:51:ff:ff:4a:
de:78:44:56:4d:38:15:14:50:d8:50:fb:eb:7e:b6:37:e6:ec:
12:d9:68:5f:69:b9:b7:02:b3:49:e6:15:fc:b6:dc:c0:8c:7b:
c2:7e:07:4d:4c:a1:09:89:32:d4:89:2d:ee:bd:4f:cf:11:da:
35:18:99:ac:e7:37:03:04:c1:42:b6:99:f7:b1:12:a1:6e:5a:
a2:e4:af:b0:13:f1:47:3e:ed:8f:c3:3a:c2:af:c6:4e:91:4a:
e3:1f:fe:c9:9a:88:10:9c:ba:b1:81:75:00:5e:38:02:54:75:
ea:98:ee:2b:c0:42:19:91:10:f9:e2:03:75:9f:1a:83:44:ad:
b4:bf:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:30 2024 by rpki-client on console-fra.rpki-client.org