Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BGUVHeEMLMs6JxFhDBqxebNVxq4.roa
File: BGUVHeEMLMs6JxFhDBqxebNVxq4.roa (raw, json)
Hash identifier: Ztm9WcOPfEH9QvQSFmW9yDTa8RnIKdxwXByT2PKFNPY=
Subject key identifier: 04:65:15:1D:E1:0C:2C:CB:3A:27:11:61:0C:1A:B1:79:B3:55:C6:AE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188FD1F2291C0A6C40263998AEF515C0429
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BGUVHeEMLMs6JxFhDBqxebNVxq4.roa
Signing time: Tue 27 Jun 2023 13:50:56 +0000
ROA not before: Tue 27 Jun 2023 13:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 89.39.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 15:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:1f:22:91:c0:a6:c4:02:63:99:8a:ef:51:5c:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 27 13:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0465151de10c2ccb3a2711610c1ab179b355c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:08:79:18:2c:d2:d6:b2:a0:04:2f:e5:3c:
34:dc:9c:62:d6:7c:b6:68:1f:36:a4:e8:12:aa:ab:
30:bb:95:99:f7:9b:d6:f7:3d:71:e9:98:0d:2d:64:
c9:24:90:e0:ab:24:e9:bb:95:70:64:a5:c7:71:2f:
e4:f3:2b:91:f8:b4:14:13:71:0d:85:66:38:26:51:
dd:30:ab:48:35:c0:69:4e:0a:67:72:63:90:e7:16:
97:bf:38:e6:16:aa:57:17:02:98:6c:bf:b8:8c:90:
e6:52:0f:f1:01:d5:92:d4:4f:a2:90:a7:18:2e:f0:
8c:32:a3:b7:be:d9:37:dd:44:35:25:03:88:7b:4f:
b0:8e:9a:91:6f:0a:6b:7b:ba:48:f0:e9:1b:ae:89:
30:1c:2b:2b:c1:12:53:ff:73:6c:f9:82:d3:ce:cd:
f2:f3:61:53:c2:33:05:5f:55:b2:6a:0f:01:db:4c:
3a:0c:09:67:f1:e8:32:55:fd:b4:0f:8f:87:e1:97:
02:91:4f:a4:7a:bd:1d:f8:70:89:f8:2c:f9:06:9e:
01:65:e8:c0:6e:e6:d7:78:cb:46:1f:08:61:c9:56:
38:1e:d1:f0:1b:f4:6d:03:af:b4:45:58:b9:a9:00:
0b:17:26:60:bd:bf:d9:59:ad:0b:4e:d8:b8:fc:39:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:15:1D:E1:0C:2C:CB:3A:27:11:61:0C:1A:B1:79:B3:55:C6:AE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BGUVHeEMLMs6JxFhDBqxebNVxq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.125.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ac:ed:c5:a4:3e:e9:e6:14:ca:60:d5:02:6e:50:80:e7:b5:
51:40:21:38:e0:1b:56:68:6a:c3:23:57:e0:e7:d3:b6:17:a2:
b6:5c:51:2c:79:ab:3e:7b:5c:3e:ac:39:67:07:c8:8f:8a:38:
e8:c3:d7:f7:d5:26:23:2b:bd:a2:74:b8:59:6e:b2:a4:5a:d4:
ec:24:9a:8e:9c:89:e4:8d:a8:6f:4d:db:19:29:38:4c:b1:09:
9f:e6:0b:54:76:f4:58:d2:9d:46:e3:41:43:b4:9b:72:83:9a:
7f:c1:40:ad:e5:d0:3f:18:b8:f0:62:81:e5:d8:18:c5:ef:51:
5e:44:32:8e:11:31:10:ee:9a:a7:96:fe:39:73:f5:d1:0a:0b:
5e:80:9d:fe:9b:96:fd:af:41:aa:35:55:97:ea:69:1b:66:e2:
0e:2c:1b:74:8a:6a:5a:cc:d9:e1:5b:5f:7d:b2:1e:e6:51:c8:
5c:aa:09:03:7e:f5:bb:ac:8a:e2:9d:c7:5c:a9:24:37:f8:cc:
be:24:1a:12:0b:92:04:ca:e2:c5:48:8c:1a:6c:9e:37:6b:f7:
22:0e:d2:30:fb:06:04:e6:5d:6e:58:12:61:0a:a6:02:7a:f4:
a4:fb:52:86:b7:af:66:e0:a7:f8:e7:22:50:94:42:15:b2:2e:
ee:40:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org