Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/BMvZTUNjfAzOX95IWGTrEPY6QGM.roa
File: BMvZTUNjfAzOX95IWGTrEPY6QGM.roa (raw, json)
Hash identifier: ouAVmITgEq3XUMs+KNg/Mgh4w8MlwGPhS5K16SkpxF8=
Subject key identifier: 04:CB:D9:4D:43:63:7C:0C:CE:5F:DE:48:58:64:EB:10:F6:3A:40:63
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018CCA2A38231B58BEE175038FF6F079B910
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/BMvZTUNjfAzOX95IWGTrEPY6QGM.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56687
IP address blocks: 46.148.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 05:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:38:23:1b:58:be:e1:75:03:8f:f6:f0:79:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04cbd94d43637c0cce5fde485864eb10f63a4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:13:50:d0:03:72:49:6d:cb:0a:85:a1:42:
79:d6:d4:4a:01:9e:83:ce:a0:fa:c0:0a:70:4b:79:
60:00:5e:36:59:3d:d1:39:62:69:90:02:29:62:da:
28:75:d1:29:da:07:aa:b4:8f:81:8a:74:85:a9:de:
8c:a7:59:d0:3e:60:8b:45:a7:60:e4:01:90:ff:a8:
e6:95:b6:6c:a9:55:80:c6:b3:bd:ec:cb:6f:bf:17:
2b:05:bf:b5:6d:67:41:9c:95:44:c8:c7:a3:f5:28:
ca:b1:3a:70:dc:25:a0:85:6a:dc:de:29:b4:64:53:
c4:4d:1f:d0:60:55:51:00:8a:8e:af:31:42:0a:84:
b4:02:6e:e7:c8:a6:d0:40:99:e7:cf:86:1c:5a:2b:
31:ce:56:7c:d8:51:6e:d0:15:13:2e:60:1b:5b:64:
83:aa:2c:24:7b:9b:ec:26:c9:8a:f5:d0:7c:bf:41:
34:a8:8d:fb:fd:61:f8:7d:a9:c0:66:86:b2:fd:29:
f0:15:b9:2a:b0:c6:13:98:08:b6:26:93:6c:50:f2:
32:d8:c1:5b:fe:1c:a2:6f:52:b3:20:90:97:6e:f0:
98:46:b8:57:a0:d3:fd:6f:4d:33:c3:99:3e:45:a8:
25:f5:f3:8c:6a:f7:9a:d6:4c:06:67:e1:dd:21:b7:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:D9:4D:43:63:7C:0C:CE:5F:DE:48:58:64:EB:10:F6:3A:40:63
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/BMvZTUNjfAzOX95IWGTrEPY6QGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e6:be:c1:c2:11:e8:4f:f7:5a:3a:be:3a:04:65:db:93:61:
3f:78:e9:9e:b7:ef:38:8a:4e:2e:5a:50:3c:36:f8:08:15:61:
dd:8d:ab:54:4c:c2:d2:a4:68:72:1e:c8:00:98:9a:59:bb:82:
d9:12:7e:c3:8a:11:7b:61:95:b6:18:89:b1:22:bd:14:15:27:
73:01:79:d8:79:1c:aa:69:a5:4e:11:95:60:41:30:c7:fe:0f:
42:c2:4e:b2:34:86:8a:c5:c2:bd:94:a1:e2:33:8f:e5:9a:38:
ab:de:b7:e5:a5:01:b5:d3:25:28:c5:ea:c7:49:66:29:27:44:
74:d1:18:f5:bc:6f:61:4d:5e:e6:84:cd:66:a4:c3:75:6d:62:
72:38:e9:6f:84:1d:b2:f9:ed:7a:cd:79:a9:b1:ee:07:ca:6d:
1a:8f:58:b2:81:3a:1d:cf:73:ea:44:d2:e9:88:54:b0:b2:23:
fe:d2:e5:41:57:d4:01:2f:a8:a3:9f:12:79:d5:52:94:f9:00:
56:78:16:68:7e:e7:4e:5e:b7:24:37:e1:07:58:6d:c0:a4:45:
d4:f1:db:82:fb:b4:9e:3d:52:3b:07:e8:9a:9f:ca:30:1e:0b:
0b:61:d9:71:71:61:83:3e:fe:2a:51:de:21:ea:f4:66:01:b5:
c8:67:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org