Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/BGo9vMf5h1pTsuccZ2qwfbgiZBg.roa
File: BGo9vMf5h1pTsuccZ2qwfbgiZBg.roa (raw, json)
Hash identifier: lFoSlVh1i38+BMUTKX67w+lo5xRzpVvAdb9O0vGDhoM=
Subject key identifier: 04:6A:3D:BC:C7:F9:87:5A:53:B2:E7:1C:67:6A:B0:7D:B8:22:64:18
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CEF2FDFBAB51C0D8D4F2105E6C11D40F0
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/BGo9vMf5h1pTsuccZ2qwfbgiZBg.roa
Signing time: Tue 09 Jan 2024 17:05:41 +0000
ROA not before: Tue 09 Jan 2024 17:05:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 45.139.198.0/24 maxlen: 24
45.139.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 19:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:2f:df:ba:b5:1c:0d:8d:4f:21:05:e6:c1:1d:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 9 17:05:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=046a3dbcc7f9875a53b2e71c676ab07db8226418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:43:36:95:e3:42:7d:e0:5d:97:39:f4:9c:
ea:e5:71:49:89:31:05:f0:1b:0e:51:fe:cf:47:09:
d0:8a:72:48:5b:76:c1:b3:92:90:7a:bc:5c:68:5b:
25:a4:a1:0e:b1:cc:5d:67:83:e2:4d:f3:0e:1d:a2:
f1:41:e5:4e:f7:a4:db:00:c9:1d:86:b6:78:c2:52:
57:4e:ff:af:73:72:44:d5:a9:e7:a7:17:3f:6e:09:
21:9f:14:69:15:11:75:13:ba:00:76:d5:78:58:11:
e2:2f:d3:46:5b:19:a8:8f:c9:32:54:79:28:a2:cd:
91:fc:46:0c:84:98:cc:05:2e:1d:ea:fd:19:03:94:
95:98:1e:88:9d:6c:7d:b7:f4:2a:c7:78:77:f4:39:
aa:e6:91:2b:25:e4:e6:5e:20:64:25:90:eb:b3:c9:
59:3f:90:94:ef:d6:ab:4f:60:61:ef:0e:4a:4e:6b:
45:b3:87:ce:38:14:1c:22:1f:32:9a:0b:7b:79:2f:
13:ca:74:92:99:9d:02:8b:f2:51:37:8e:52:bb:41:
ea:d2:d6:86:5f:c5:3e:84:c7:71:18:61:69:71:39:
c4:7d:47:11:ae:64:46:03:a2:b6:5b:ef:55:5e:79:
0b:35:a0:a1:54:68:e9:00:e6:c5:b7:c5:0f:da:f8:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6A:3D:BC:C7:F9:87:5A:53:B2:E7:1C:67:6A:B0:7D:B8:22:64:18
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/BGo9vMf5h1pTsuccZ2qwfbgiZBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/23
Signature Algorithm: sha256WithRSAEncryption
95:a1:d6:7f:d2:81:aa:cb:c0:f6:97:89:83:e1:5a:8f:64:6c:
01:c6:fd:99:33:2b:99:e5:68:ba:8f:8d:44:86:0c:ed:f9:ce:
22:ec:0b:b0:10:61:ac:fc:9b:ca:01:9a:89:29:fc:24:a1:b7:
5e:83:e9:a4:05:32:d8:3d:a8:0c:3c:df:eb:60:c4:95:de:f3:
bb:9b:fc:8e:5c:0e:b1:8f:6f:02:fb:29:3c:f2:be:39:3b:dd:
b7:df:5f:71:90:3f:3f:b5:c3:10:32:b1:75:ef:c9:1a:3f:14:
49:fe:46:8a:06:11:1e:f1:ad:c4:7d:32:43:33:dd:23:83:d2:
e2:1e:74:46:46:d9:22:d1:1f:3d:8b:40:60:b8:3d:fc:c3:11:
8a:d9:a7:8b:02:17:3a:8f:13:8d:cf:8a:2d:19:3f:49:d2:39:
5e:01:29:b6:6c:07:f0:4a:14:cc:f9:af:c9:57:28:4b:34:b1:
30:0f:b6:e2:f4:8e:92:77:78:78:f4:9c:cf:cb:60:bb:fb:f8:
27:cd:58:58:fb:e6:c4:f2:bc:a3:27:f1:8c:d8:a6:3d:cd:5d:
10:de:b3:87:fc:23:bd:cd:78:09:41:eb:dc:ec:6f:54:5c:27:
89:ab:67:f4:eb:4b:06:fb:da:6a:9e:76:7d:dd:94:eb:9f:a5:
19:0b:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org