Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/BHQMpncTnPJ719UF0Zq3u0IWROs.roa
File: BHQMpncTnPJ719UF0Zq3u0IWROs.roa (raw, json)
Hash identifier: wap27wHSYOeZNUphPb1IHEkkaFInMcCq+jN4g4ahorU=
Subject key identifier: 04:74:0C:A6:77:13:9C:F2:7B:D7:D5:05:D1:9A:B7:BB:42:16:44:EB
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B53276562581E7461801958387C5636
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/BHQMpncTnPJ719UF0Zq3u0IWROs.roa
Signing time: Sun 01 Jan 2023 03:14:49 +0000
ROA not before: Sun 01 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211557
IP address blocks: 213.238.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:27:65:62:58:1e:74:61:80:19:58:38:7c:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04740ca677139cf27bd7d505d19ab7bb421644eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:70:b0:c8:3d:86:02:f2:b3:ab:e4:e0:ce:
00:e2:a6:e6:ac:f8:6c:fb:ab:1a:e6:ae:1f:04:b9:
d8:bd:e4:bb:c5:e2:cc:ec:53:8f:85:18:c7:10:f2:
fc:b0:5e:bc:5b:95:fd:f4:e8:f8:7d:1e:b7:a7:36:
f6:e0:45:56:c3:8a:bc:e0:9f:22:fe:16:5c:46:ac:
86:48:68:00:9b:2c:87:dc:6d:76:78:68:ec:62:49:
8f:eb:8c:c8:fe:92:bb:9b:1f:ee:c0:ac:61:df:62:
f6:b7:d1:6c:33:a5:f5:b1:cf:b1:d9:22:34:ff:00:
a8:79:96:e1:8a:7e:44:43:5d:7f:a6:04:37:b9:17:
be:96:e3:0c:cb:0d:de:1d:a3:12:95:89:cd:82:bc:
6a:e3:2a:bb:cd:39:9e:f5:75:29:8c:80:ba:8b:e9:
90:f4:fc:97:d8:dd:d8:5c:d2:53:36:bf:b2:2e:d0:
0d:83:bc:95:f0:ee:7c:f3:aa:8b:8c:1c:2e:4a:89:
19:7c:61:dc:70:48:78:a9:3b:ec:dc:b1:16:68:f5:
e6:d8:c4:74:4c:a5:f9:0f:c5:a2:f4:2f:49:21:b8:
13:da:14:c8:e0:5f:aa:b7:f7:7d:d2:f7:77:d6:7e:
ea:99:43:d3:6f:16:07:be:c7:7b:bb:6c:7e:e0:9c:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:0C:A6:77:13:9C:F2:7B:D7:D5:05:D1:9A:B7:BB:42:16:44:EB
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/BHQMpncTnPJ719UF0Zq3u0IWROs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a3:ed:13:7d:16:ed:6e:6a:01:4b:cc:22:d8:1b:0c:b2:be:
0b:9a:9c:63:7f:d3:73:a3:10:fb:47:09:c1:90:bb:e7:ed:6e:
3e:ca:aa:f3:6c:14:ad:e6:d2:3c:de:1b:c0:8e:69:6e:da:32:
dc:b4:ad:f3:06:da:12:ce:1c:31:bd:5d:a6:bf:f8:4f:4b:72:
91:98:10:50:0e:59:72:76:85:a7:71:0c:8d:ff:ca:d9:61:68:
fa:b4:56:60:fe:e2:c9:06:b1:74:79:32:31:4c:7c:9a:ea:2d:
0e:04:c2:52:2d:10:f8:43:77:1a:c6:6c:86:8d:d9:d5:c0:76:
ec:77:7c:26:c9:29:d6:6f:30:97:ae:c6:3c:ed:71:8e:a4:f6:
d4:a4:4d:47:ec:01:0d:4a:b7:59:1a:4f:9c:75:4e:93:93:c3:
97:88:7e:37:cd:6b:b5:5a:41:8a:25:e5:c1:0f:a3:96:44:d7:
47:63:cc:2a:ab:0e:16:56:d3:11:96:08:fc:e6:7e:83:bc:b4:
06:29:a3:82:8c:3a:3b:2c:34:d1:ac:90:3e:02:54:30:f1:90:
e5:1b:99:1d:fa:2c:63:5a:ee:6b:76:ed:ce:3b:79:1e:41:19:
cb:b3:91:a2:fb:b1:37:07:78:f7:dc:89:7c:89:cb:4a:99:af:
57:80:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org