Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/Bqv7HT-9Aa89R5UjmAsBCL8ok4M.roa
File: Bqv7HT-9Aa89R5UjmAsBCL8ok4M.roa (raw, json)
Hash identifier: UapWeKcZhnO07TXElpYP9wsFAdcMgYgQJM5OWATCTV0=
Subject key identifier: 06:AB:FB:1D:3F:BD:01:AF:3D:47:95:23:98:0B:01:08:BF:28:93:83
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 018C3E1AD3FF168C8253628E70B786CD6974
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/Bqv7HT-9Aa89R5UjmAsBCL8ok4M.roa
Signing time: Wed 06 Dec 2023 07:49:54 +0000
ROA not before: Wed 06 Dec 2023 07:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 149.62.34.0/24 maxlen: 24
89.35.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 11:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:1a:d3:ff:16:8c:82:53:62:8e:70:b7:86:cd:69:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Dec 6 07:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06abfb1d3fbd01af3d479523980b0108bf289383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:6b:ac:df:32:97:24:1e:0e:48:4b:2d:8d:
5e:14:7f:f9:7b:04:ea:89:63:3f:0f:a7:28:71:cf:
f6:f3:ab:aa:7c:82:1a:62:d6:76:1d:06:52:93:c4:
b4:9b:7d:d4:e7:3c:0e:37:e2:dd:33:8d:8b:70:75:
10:05:91:30:92:22:88:98:c3:5d:fd:56:1a:5c:8b:
8b:e8:55:89:d5:ff:c5:8c:48:39:d5:b4:92:bf:53:
dd:94:0b:e4:3e:ca:b3:5e:14:26:8a:97:80:a5:ef:
3d:ae:ba:4b:77:da:04:91:92:90:64:53:3b:63:e4:
67:7b:c4:05:74:b2:2e:09:17:22:de:51:fd:e8:85:
c9:b1:eb:db:dc:3c:b9:4c:71:63:96:2d:08:2f:fb:
9c:23:68:23:c6:75:dc:a1:e5:46:1b:f3:76:3f:fe:
db:b1:24:fe:57:4a:d3:da:93:62:07:46:ae:5f:76:
be:5d:9e:e7:d7:43:39:ec:dc:bb:c2:27:cf:75:a5:
57:de:b2:d1:2a:e1:7f:99:fc:46:79:eb:e8:7f:54:
8a:40:c3:b3:1b:64:61:7d:83:fb:a2:a3:91:5d:a8:
47:c4:e4:8f:11:39:c8:ad:f7:fc:8b:a7:b5:3b:98:
22:7f:8f:48:f8:39:74:79:8f:16:f8:c3:f5:33:b5:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:FB:1D:3F:BD:01:AF:3D:47:95:23:98:0B:01:08:BF:28:93:83
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/Bqv7HT-9Aa89R5UjmAsBCL8ok4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.118.0/24
149.62.34.0/24
Signature Algorithm: sha256WithRSAEncryption
17:49:65:85:d0:d5:e5:e1:51:11:65:ad:61:a2:61:fb:06:54:
23:fa:a0:5c:7c:68:e2:1f:61:6d:e6:f0:69:9b:92:5f:02:c1:
55:de:fb:79:34:41:ce:9c:37:e2:59:1f:a0:43:38:f0:66:37:
c3:fe:60:d2:9a:d0:f3:32:08:db:4a:1a:93:28:4a:6c:c2:de:
a1:7b:40:1c:f3:12:83:40:38:b2:61:98:56:c0:9e:e0:18:2d:
17:7e:01:e3:31:87:05:b6:79:ed:a4:ac:89:5e:41:25:ac:14:
b9:d0:d0:f2:b5:e2:3a:38:3d:bc:56:4b:3f:05:a3:ed:f0:31:
ab:aa:5c:cd:7d:23:c1:5e:71:dd:98:64:14:07:12:c3:a1:4e:
fc:d8:e2:67:cf:d1:e2:3e:c1:15:0c:a6:27:1e:e6:3b:be:c8:
18:e9:49:8b:53:dc:f7:ac:ab:b1:ae:77:71:0f:c8:c9:75:6e:
a4:a7:74:5c:94:ae:c0:7b:64:5f:6e:1f:e1:90:f0:b4:fc:a4:
4f:d7:50:f8:4a:9f:2d:9f:34:79:d3:c6:8c:c4:2b:1e:4b:09:
a2:ac:cf:c5:75:38:9c:91:b2:30:72:71:02:0b:0d:37:89:72:
00:99:61:bc:9b:15:db:02:7b:84:b5:51:00:f0:45:6e:14:73:
9c:eb:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:39 2024 by rpki-client on console-ams.rpki-client.org