Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/BWrJBMYsQM3Q8gkFW62MxaCWpxE.roa
File: BWrJBMYsQM3Q8gkFW62MxaCWpxE.roa (raw, json)
Hash identifier: NyD3r5dYitpb4zkWkMb/U9FUkoLFXL1coF+L9KLGRtQ=
Subject key identifier: 05:6A:C9:04:C6:2C:40:CD:D0:F2:09:05:5B:AD:8C:C5:A0:96:A7:11
Certificate issuer: /CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Certificate serial: 0187B6DF034BA4CEC22AA861C17A6F2CAD7B
Authority key identifier: 97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/BWrJBMYsQM3Q8gkFW62MxaCWpxE.roa
Signing time: Tue 25 Apr 2023 05:24:41 +0000
ROA not before: Tue 25 Apr 2023 05:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212713
IP address blocks: 80.89.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b6:df:03:4b:a4:ce:c2:2a:a8:61:c1:7a:6f:2c:ad:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Validity
Not Before: Apr 25 05:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056ac904c62c40cdd0f209055bad8cc5a096a711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:ed:fb:3f:5d:9e:86:9c:e4:78:29:cf:9d:
89:ca:fc:47:26:46:a2:a2:93:31:7d:fa:db:23:a5:
48:0a:65:b2:4e:11:05:2a:7e:65:94:b0:45:38:81:
90:e0:f7:62:5a:d7:8a:9a:e1:64:90:f9:32:70:c1:
19:12:79:d1:bf:a1:10:f0:ed:e4:e9:23:97:8c:07:
7e:a8:5a:85:2e:74:bd:5b:04:13:a9:11:43:ac:e6:
ee:f3:1e:3b:db:ea:60:12:f1:a0:45:dc:79:4f:e9:
ba:af:e4:cb:59:c1:03:1b:66:12:47:0b:68:31:ec:
e7:48:9a:37:4b:bc:de:94:5b:71:63:7b:50:b3:3a:
da:59:64:3b:8a:6a:93:cd:eb:7f:6f:c2:3a:99:a7:
3e:ca:1d:27:54:5b:3d:d0:0f:c1:c8:06:4d:26:92:
5e:a0:e1:9e:c1:c5:55:1b:a6:e3:d4:14:d6:2c:a6:
7f:73:14:7b:ed:a7:6d:46:7f:25:8a:56:0f:bf:28:
51:fb:6e:86:5b:51:36:c0:67:ea:95:d0:9d:49:f6:
72:3d:1b:a3:20:90:d5:90:c0:b0:26:d7:8a:4c:c4:
e5:72:e4:0b:94:24:71:ac:84:e5:d2:1e:b6:20:28:
8e:a3:91:c0:57:77:11:20:02:8b:81:a8:59:89:13:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:C9:04:C6:2C:40:CD:D0:F2:09:05:5B:AD:8C:C5:A0:96:A7:11
X509v3 Authority Key Identifier:
keyid:97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/BWrJBMYsQM3Q8gkFW62MxaCWpxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d9:15:00:ea:50:1a:c8:4c:58:0d:dc:51:1e:ba:cd:a1:1d:
2a:04:f9:9d:b4:af:9e:8d:0d:69:56:6e:9a:30:88:ac:82:e2:
7b:9b:cb:2c:02:a8:9c:ad:a1:80:24:6f:06:d1:1e:e8:c6:84:
0d:ae:32:1e:3d:f4:eb:4f:af:da:3e:e8:09:c9:8c:33:33:5a:
b6:78:e7:65:59:44:b5:d8:37:a1:e4:8c:14:72:7c:68:50:72:
83:3b:6b:e6:0f:e6:99:cb:c0:1f:30:6b:7e:98:24:8d:63:85:
42:36:00:be:cd:bc:94:9e:dd:4e:86:0e:1e:8c:54:64:0c:db:
25:60:bd:4a:a9:fa:00:d3:b2:dc:12:c0:48:c8:3d:a6:dd:9e:
8f:97:3d:6f:6e:4a:1e:0a:49:9d:6c:e1:b2:97:e9:95:ba:ea:
d0:0c:26:33:1e:d1:f5:01:90:a0:c8:e6:e4:53:8b:9a:15:57:
b8:e9:23:53:d7:35:da:7d:04:71:9f:2d:7f:62:35:ee:68:05:
39:79:46:bc:e4:08:2b:a6:29:e0:94:bc:50:75:5d:1f:3c:db:
0f:0e:be:4d:61:ed:d8:68:86:c2:bb:58:9d:70:0f:5f:4b:85:
de:06:a7:39:21:9b:39:6e:76:d2:96:19:75:1d:9f:70:5f:8e:
12:c5:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:45 2024 by rpki-client on console-fra.rpki-client.org