Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BoeQ8UYrPtICw6cXDvw-y6L7yoQ.roa
File: BoeQ8UYrPtICw6cXDvw-y6L7yoQ.roa (raw, json)
Hash identifier: s2bXA1RC0pr7eA64YR4R8/RIdxUxABLDl5pIp3DWdD0=
Subject key identifier: 06:87:90:F1:46:2B:3E:D2:02:C3:A7:17:0E:FC:3E:CB:A2:FB:CA:84
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0187DCC1D3EE40F927E60678E5B2D2DF9B0F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BoeQ8UYrPtICw6cXDvw-y6L7yoQ.roa
Signing time: Tue 02 May 2023 13:58:22 +0000
ROA not before: Tue 02 May 2023 13:58:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:c1:d3:ee:40:f9:27:e6:06:78:e5:b2:d2:df:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: May 2 13:58:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=068790f1462b3ed202c3a7170efc3ecba2fbca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:2c:a4:cb:48:3a:59:8e:0e:23:88:65:c6:
9b:6a:61:09:91:cf:a1:28:c9:e9:8a:c8:0f:88:05:
25:e5:6c:ee:64:12:01:f2:cc:c8:bd:90:98:86:99:
03:ad:09:f0:52:9c:24:cb:89:f7:a1:37:34:f6:02:
a7:63:c1:af:36:17:df:aa:d2:82:87:e2:37:5a:9e:
12:e8:0c:c1:14:f4:6f:a9:a2:40:92:00:e8:9c:01:
f4:24:8e:bc:c5:c8:ba:c4:aa:76:c9:d0:2a:fe:72:
8e:19:50:4a:37:b1:23:eb:1e:26:f0:98:35:54:b2:
83:e5:ae:ff:bc:f8:f8:19:1b:f9:d0:49:a0:cd:db:
69:f5:2b:6d:32:a3:21:2a:4a:d0:aa:30:0a:10:7b:
c5:53:d1:af:41:33:23:33:d1:31:c0:1f:aa:81:1a:
63:10:25:45:f8:14:01:16:31:12:25:9c:20:9f:f0:
4e:03:4f:65:e5:60:8f:28:75:13:2f:7f:af:67:63:
0f:f7:29:4a:6b:38:11:90:75:9b:a5:41:f5:be:99:
3b:cc:d3:c6:6d:fd:a8:ab:d2:d4:14:82:69:99:b4:
48:e1:01:b1:75:2e:a7:73:fc:47:75:b0:c5:49:f8:
2b:99:18:12:b5:2f:2e:c2:af:3e:3d:1e:22:91:94:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:87:90:F1:46:2B:3E:D2:02:C3:A7:17:0E:FC:3E:CB:A2:FB:CA:84
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BoeQ8UYrPtICw6cXDvw-y6L7yoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.217.0/24
Signature Algorithm: sha256WithRSAEncryption
08:af:16:8e:ad:30:43:d6:81:ab:5c:90:4f:fd:44:e8:50:ec:
9b:e3:6e:02:a1:6b:93:64:56:48:f5:77:41:dc:d9:f6:54:ce:
eb:aa:34:84:33:ed:cf:8f:59:b7:d1:93:15:5c:26:c3:6d:70:
58:34:9e:e3:cd:f2:44:43:88:b5:e1:e5:03:8e:e4:f8:42:1e:
69:5e:e2:a2:1b:88:f7:98:71:3f:43:dd:f5:04:9b:52:2a:af:
30:63:9d:ff:48:eb:df:38:2d:f4:ba:16:30:31:93:db:a4:00:
f9:2a:e1:80:bf:31:87:5a:0d:07:85:8d:8c:93:78:c0:18:8d:
ce:98:7d:d9:bd:a5:b0:f8:51:c3:72:99:3c:d9:f8:03:69:d0:
f4:9c:16:bd:1b:9d:81:ff:a6:54:2c:0f:00:34:cb:c4:13:49:
4d:1b:4c:5f:12:b5:41:ea:fa:92:60:ae:01:db:a9:79:1b:ec:
74:2e:53:e1:76:78:f4:ac:bc:c1:bc:49:f3:6a:27:1d:e3:86:
ea:0d:83:f5:a0:70:a8:16:aa:42:a9:5b:85:a8:b0:b6:f3:c5:
96:6a:74:ed:9b:63:4a:7a:61:a0:52:20:9a:d5:96:03:8c:6f:
d5:f3:6e:df:32:fe:e7:9f:88:59:68:96:aa:71:db:e7:2a:09:
ee:72:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 05:24:00 2023 by rpki-client on console-ams.rpki-client.org