Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BpVizmlAcr0ki8mlI4mqL68vmfQ.roa
File: BpVizmlAcr0ki8mlI4mqL68vmfQ.roa (raw, json)
Hash identifier: gC1y05uWcaD11K0h7yOj+mTLewRXhxEYRCf2wkeGpaM=
Subject key identifier: 06:95:62:CE:69:40:72:BD:24:8B:C9:A5:23:89:AA:2F:AF:2F:99:F4
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018AEFFBD920664EAF5A3EB913FAC443CDC1
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BpVizmlAcr0ki8mlI4mqL68vmfQ.roa
Signing time: Mon 02 Oct 2023 10:42:54 +0000
ROA not before: Mon 02 Oct 2023 10:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39364
IP address blocks: 45.94.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:fb:d9:20:66:4e:af:5a:3e:b9:13:fa:c4:43:cd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 2 10:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=069562ce694072bd248bc9a52389aa2faf2f99f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:8c:f4:59:ff:c3:2b:bb:10:ab:10:a9:67:
38:68:71:04:d1:36:75:9b:d2:9a:1f:f7:c2:b0:16:
3a:d8:58:cf:9d:2b:58:f1:b2:d2:2d:3b:bc:b4:2e:
b4:f9:92:2e:08:f1:ae:da:90:42:e0:fe:97:ac:c1:
6c:c5:a6:3b:bd:7d:eb:6b:60:d6:99:ac:c3:64:14:
95:48:6c:c1:6b:75:16:b4:af:69:82:8e:05:92:6e:
3c:73:cc:6b:9f:48:a8:8e:d5:3a:66:58:23:9e:38:
6b:3f:81:65:1a:d9:c1:fc:e2:88:20:58:34:c0:23:
87:dd:e1:96:47:51:e6:d8:b6:fc:55:c4:84:eb:b0:
d1:87:08:46:f5:dd:0b:0c:14:c8:04:a2:e9:0b:5e:
50:41:f9:fe:34:b1:eb:84:7e:73:51:15:ae:ef:fd:
7a:62:21:9e:fd:e0:eb:67:23:00:09:53:d6:29:15:
33:29:25:13:b7:34:34:21:85:05:05:bb:b2:a9:87:
5b:eb:3c:41:a8:47:46:53:bd:52:95:84:24:5f:95:
42:f7:1e:72:3f:46:db:d1:de:e2:d2:10:33:f2:3d:
56:9a:ef:96:bb:d6:9b:93:d5:ff:4e:e5:86:c7:d8:
17:c4:60:70:aa:ae:68:5c:f6:d2:f2:27:98:bb:da:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:62:CE:69:40:72:BD:24:8B:C9:A5:23:89:AA:2F:AF:2F:99:F4
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BpVizmlAcr0ki8mlI4mqL68vmfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f3:bc:0b:d0:f9:a8:e1:02:4d:49:17:92:94:0e:7a:07:62:
4a:28:4f:55:72:bf:a8:8e:32:8b:6c:65:d4:7b:21:47:af:72:
08:8e:d5:a7:d9:3d:48:e2:b3:33:60:f9:76:06:cc:45:98:8b:
26:83:0e:b6:98:2e:73:29:00:8b:44:82:0b:bf:ae:16:2f:e5:
5e:04:cf:45:46:bc:09:5d:ca:b3:fb:9d:9d:2c:a4:0b:74:92:
59:95:7f:f3:87:9a:00:79:27:2f:96:7d:37:47:0f:d9:c1:5c:
94:9b:41:1f:b3:30:1a:d3:d0:50:92:9a:17:9c:ff:ce:05:7d:
74:ec:dd:ee:c4:6d:7b:50:c6:46:08:bf:2e:ae:42:6a:9a:b8:
be:41:1b:e3:b1:97:33:93:df:22:e5:8c:1f:f0:81:fe:ba:e8:
25:f9:22:7b:22:ed:5c:fe:af:71:a6:bc:f4:4d:9a:25:3d:ea:
1a:59:08:60:6c:7f:0a:74:2f:db:f4:2a:d6:b4:3b:91:35:9a:
4a:ea:4b:df:1e:df:a5:c8:f5:c9:23:8e:0b:9c:e6:a0:52:40:
17:87:14:8a:45:f8:7a:6d:c4:74:32:42:5f:6b:98:27:11:14:
89:dc:fc:6b:10:06:57:54:7e:34:75:97:78:19:91:db:94:ed:
c8:57:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 23 13:06:45 2023 by rpki-client on console-fra.rpki-client.org