Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/BVeWpZTWWojH1y0zREI-WaNkjRY.roa
File: BVeWpZTWWojH1y0zREI-WaNkjRY.roa (raw, json)
Hash identifier: HRp+rjXFLCVFYuXkzvu5Oxo0ugjuRsxJ5Tk3CCzu9+Q=
Subject key identifier: 05:57:96:A5:94:D6:5A:88:C7:D7:2D:33:44:42:3E:59:A3:64:8D:16
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0185C5BFCDAE883BC68D4599F0CF6304647F
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/BVeWpZTWWojH1y0zREI-WaNkjRY.roa
Signing time: Wed 18 Jan 2023 16:39:19 +0000
ROA not before: Wed 18 Jan 2023 16:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57497
IP address blocks: 45.89.236.0/22 maxlen: 24
45.93.168.0/24 maxlen: 24
45.93.171.0/24 maxlen: 24
45.93.169.0/24 maxlen: 24
45.93.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 03:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:bf:cd:ae:88:3b:c6:8d:45:99:f0:cf:63:04:64:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 18 16:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=055796a594d65a88c7d72d3344423e59a3648d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:e1:bc:bd:f3:d2:35:85:f7:45:55:1d:31:
2c:e0:6d:ef:f5:24:31:fa:6e:c3:42:7b:7b:48:c3:
b2:37:97:db:3c:a0:f5:2d:8a:69:1f:4b:03:6c:fe:
ef:94:9b:30:89:9f:b6:24:31:d5:28:b2:01:38:8e:
af:91:08:d7:7f:8f:3b:3f:a6:ef:ea:36:2e:89:cb:
e7:ea:ed:e8:1b:7c:0d:d5:5d:cd:6b:c9:ae:4b:b1:
0c:d9:41:f3:11:f9:c2:fe:5c:2a:22:e6:e6:f8:3f:
17:3d:24:a2:2f:fb:c8:3f:da:ae:65:1d:e9:0b:e4:
53:73:1b:43:a4:de:39:45:7d:32:b6:47:ce:d1:e4:
30:bf:b4:96:00:34:f1:62:04:ad:1d:c2:ec:db:64:
60:2c:50:e4:4c:7f:f8:9e:06:23:67:f4:ac:4f:37:
5d:0e:28:fd:66:17:e5:7f:2b:8c:65:b7:fa:90:d6:
4a:9a:ad:eb:3e:a6:43:88:1d:21:3a:bd:3a:4a:20:
2d:cd:72:9f:29:be:6c:d7:5b:63:63:73:a1:4c:db:
2d:95:90:50:0b:ea:42:2d:80:da:91:23:ae:54:83:
7a:ff:05:eb:95:52:88:3e:8c:5e:6c:e6:cb:fc:7e:
29:80:35:dd:54:79:49:21:3f:f8:c8:90:4c:8b:b4:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:96:A5:94:D6:5A:88:C7:D7:2D:33:44:42:3E:59:A3:64:8D:16
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/BVeWpZTWWojH1y0zREI-WaNkjRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.236.0/22
45.93.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:51:e0:a1:44:0a:56:b4:e6:28:f1:55:bb:a7:ca:8f:5f:23:
69:36:6b:e7:fa:65:18:b2:d7:e5:e8:53:4a:e6:4e:b7:b5:8e:
62:7e:f1:06:20:66:c8:eb:e1:10:70:60:ff:35:1b:f1:52:6e:
55:47:37:26:87:15:4a:56:90:ca:75:6f:09:e9:b9:03:b2:0b:
24:78:7e:b9:12:df:85:78:66:46:94:85:97:26:46:71:f4:ec:
52:ec:80:26:3a:e9:ac:90:63:89:f9:fb:77:e2:e1:0e:bd:c7:
7c:a3:13:78:95:48:03:cf:f0:67:af:77:36:a0:87:9c:77:ed:
44:a9:06:a7:65:fa:1b:af:41:0e:c4:e4:38:06:b9:ad:7c:c4:
06:23:d9:9b:e0:fd:82:8a:89:e2:85:32:92:96:10:99:ec:3d:
6f:75:f6:f1:cf:f1:2f:2b:e4:07:c7:7d:a6:70:4c:a9:f8:12:
36:42:87:18:7c:11:6c:20:b2:97:55:ec:f6:4d:53:3a:ec:41:
30:6c:a9:f4:b4:74:e5:4e:06:5a:74:4b:3e:c0:0c:e9:09:22:
34:a1:bb:49:66:bd:a1:c9:13:b0:eb:37:58:84:97:44:35:c4:
e9:61:8f:b8:5b:3f:0d:89:0d:0c:dc:8b:2e:b8:50:f7:76:54:
45:aa:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org