Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/BkUjpQQzaXz6aEq-Iy9OYbr5zWc.roa
File: BkUjpQQzaXz6aEq-Iy9OYbr5zWc.roa (raw, json)
Hash identifier: Ku5EjXPanEWmTvYxt1OAb+TzusN5RCvqKVg/NpZQ3Cw=
Subject key identifier: 06:45:23:A5:04:33:69:7C:FA:68:4A:BE:23:2F:4E:61:BA:F9:CD:67
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01856C5C9ED009223FEF7EF26324A55AB547
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/BkUjpQQzaXz6aEq-Iy9OYbr5zWc.roa
Signing time: Sun 01 Jan 2023 08:04:47 +0000
ROA not before: Sun 01 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 86.62.30.0/24 maxlen: 24
45.80.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 08:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:9e:d0:09:22:3f:ef:7e:f2:63:24:a5:5a:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=064523a50433697cfa684abe232f4e61baf9cd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:9d:bd:cc:63:89:5f:8c:b3:fa:bc:10:39:
c7:aa:57:17:73:c6:13:96:54:0d:71:fe:ad:2f:04:
42:72:61:8b:28:c8:3c:8e:5b:da:d9:dc:1d:1c:a7:
92:87:3e:f7:4a:80:5c:fc:5d:72:f9:82:20:6b:11:
ba:15:ab:a2:b9:54:b2:39:72:33:0a:4b:09:87:3b:
bb:48:5a:1e:dd:57:d9:23:9c:1e:ce:32:83:3e:01:
38:67:a4:e8:5c:47:77:f9:96:43:42:f0:72:f6:f3:
c3:ba:06:31:90:a5:4f:42:a9:01:e5:d0:80:c6:a1:
6b:86:99:76:92:94:28:97:12:e8:31:84:29:63:2f:
18:84:cc:29:64:8a:13:6b:7a:84:10:fb:e2:af:99:
9f:d7:6a:1c:06:80:78:f5:48:d5:48:06:88:ca:f3:
4b:1e:b6:13:fb:41:c3:83:ce:9a:ae:dd:57:ba:f3:
9a:66:f5:e4:c5:4a:ca:40:24:f8:9f:ef:d0:42:84:
60:4c:bc:1f:98:ca:93:ee:38:51:a4:0b:76:41:c3:
10:4c:2a:75:3c:0d:93:3e:c4:f5:af:99:62:56:60:
0e:d4:da:a3:88:46:87:4a:73:27:a2:49:45:3c:4a:
c4:9c:c2:26:d2:9a:1a:fa:fc:47:da:56:8b:e3:df:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:23:A5:04:33:69:7C:FA:68:4A:BE:23:2F:4E:61:BA:F9:CD:67
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/BkUjpQQzaXz6aEq-Iy9OYbr5zWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:58:05:8a:cb:d1:6f:2c:97:66:f6:7e:fa:88:1c:ac:ac:01:
44:f5:72:66:9f:5a:71:f7:8f:5e:8b:41:8e:79:d4:43:77:0a:
bb:b2:38:61:78:2a:d2:6f:7f:5c:52:75:10:72:06:a2:8e:77:
f4:48:57:66:15:95:d9:c8:24:fa:10:4c:2a:26:db:87:52:5f:
7b:74:83:5d:55:20:c0:3f:3e:8d:03:60:4d:cf:2a:48:1e:41:
51:4c:d9:5f:2c:07:57:9f:d5:c7:17:a3:87:ae:7c:cd:42:29:
81:56:e1:70:f1:42:5b:2b:43:b9:b3:d8:78:5c:03:d8:5d:c2:
b9:e6:fe:06:3a:40:94:1b:43:87:16:ed:58:50:5c:a8:f0:a5:
a0:e5:11:b1:0d:4a:7d:db:11:dc:81:68:ea:62:49:52:ba:6a:
e2:4e:f3:f3:30:ec:b7:d7:a9:a4:22:8a:c3:79:fc:03:96:1a:
8e:90:48:47:f8:21:6b:46:c5:b6:12:17:e9:2c:4f:4e:d4:c8:
07:ba:a8:36:62:3b:c3:4a:7d:4c:50:fb:b5:58:dd:82:b2:88:
f8:fa:0e:e0:96:ba:0a:eb:1e:0a:44:f6:50:f1:a0:93:b4:ed:
cf:8e:5b:2d:09:83:a6:1b:bd:69:94:30:94:cd:74:a3:50:30:
4c:5a:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org