Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/BGNWLn1CUUMDzI1qpmQYjOkTO3E.roa
File: BGNWLn1CUUMDzI1qpmQYjOkTO3E.roa (raw, json)
Hash identifier: 0PAnWicGbPx2ebuhiCz/Fsp0cowHyKpZnTEbUsI6vZs=
Subject key identifier: 04:63:56:2E:7D:42:51:43:03:CC:8D:6A:A6:64:18:8C:E9:13:3B:71
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 0189E4D3461B74E2FFD6CB8CB9ABEB9DCD64
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/BGNWLn1CUUMDzI1qpmQYjOkTO3E.roa
Signing time: Fri 11 Aug 2023 13:39:58 +0000
ROA not before: Fri 11 Aug 2023 13:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 31.14.162.0/24 maxlen: 24
31.14.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:d3:46:1b:74:e2:ff:d6:cb:8c:b9:ab:eb:9d:cd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Aug 11 13:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0463562e7d42514303cc8d6aa664188ce9133b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:35:82:ce:3b:f4:e7:fc:04:1a:2a:ec:a7:
08:ce:aa:92:14:45:7f:00:f0:b3:d0:cd:e0:b6:d6:
fd:0f:30:95:b2:3a:f9:30:cd:61:7f:7c:11:eb:72:
16:4a:9a:09:24:d4:2e:47:a5:ec:b7:a9:df:17:8c:
c9:56:91:18:9b:7a:ae:a5:0c:16:d2:b5:2b:33:da:
1c:1b:4b:28:c1:bc:37:f4:77:b7:24:59:9b:8e:75:
f8:d5:78:17:98:54:6e:56:f9:d5:e1:b6:9b:c4:d2:
1a:26:75:99:ba:a7:7d:e3:54:2a:c2:33:18:2b:31:
1e:98:a5:04:d8:c0:22:89:ea:26:b4:cd:8a:63:9d:
68:42:39:c0:dd:28:fd:2e:d9:d1:46:8b:b4:56:27:
46:a1:87:5c:03:0b:22:28:92:e9:e0:9c:cd:21:ad:
2d:ea:38:5c:00:41:58:08:01:1f:8c:e1:2f:88:4b:
74:70:42:4d:fa:5d:5e:57:9e:de:e0:67:25:02:58:
f8:e9:c6:41:be:d6:0c:ef:48:de:92:97:d6:67:ab:
ed:e1:d2:f9:4f:3b:ef:38:ff:f8:87:78:3b:39:41:
c0:52:47:5a:e1:ca:a2:bc:34:e0:c0:b2:bc:ed:2e:
73:d2:c2:41:9c:ed:ab:7f:5e:7f:2b:93:d8:e5:70:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:56:2E:7D:42:51:43:03:CC:8D:6A:A6:64:18:8C:E9:13:3B:71
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/BGNWLn1CUUMDzI1qpmQYjOkTO3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.9.0/24
31.14.162.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b2:b1:d3:f5:17:0e:b3:dd:07:7a:70:58:c6:e8:40:ff:ac:
20:de:53:e8:a9:48:8c:c8:e3:eb:b4:cd:23:45:13:6b:6a:32:
a2:2e:13:27:ba:ac:37:98:90:93:9d:42:56:48:3c:64:77:6f:
71:54:4b:10:48:86:0e:85:da:7f:12:fb:28:07:ce:69:1d:8e:
2e:71:70:07:50:c6:c4:e6:0a:85:4c:bd:68:44:b8:2c:69:a4:
e3:19:a3:bf:33:cf:a4:02:70:44:c2:9d:d6:3c:2f:4f:83:22:
3f:62:c4:ab:06:d3:cb:74:b6:6a:5a:1b:5b:c9:e0:16:2d:f6:
d5:ae:d6:eb:b7:1d:83:1f:7d:1b:58:1b:6a:d3:28:53:aa:5b:
c9:a7:bb:b2:d2:60:4a:be:1d:c9:db:d7:91:e7:f4:3b:79:9a:
ec:7a:56:10:6d:70:72:ad:84:9b:c5:95:15:08:0d:72:74:2b:
e8:3a:09:f7:d9:7c:34:01:43:1e:e1:b5:f0:f1:ec:48:26:0d:
4b:82:c2:00:56:ab:96:6c:e6:f0:cf:0d:c0:9e:6a:18:2b:cc:
c9:92:e6:27:80:22:79:c2:d1:19:72:65:cb:89:83:69:08:dc:
97:cf:88:a5:ca:11:11:56:90:45:5b:d4:27:e2:84:29:90:56:
a3:0c:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:14 2024 by rpki-client on console-ams.rpki-client.org