Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/BBpXz1JkiBoLfUmfBECaseKUcVk.roa
File: BBpXz1JkiBoLfUmfBECaseKUcVk.roa (raw, json)
Hash identifier: AO964MA7L+S1xe+wehUSK3wQEhnPd1T70588LJgVPAg=
Subject key identifier: 04:1A:57:CF:52:64:88:1A:0B:7D:49:9F:04:40:9A:B1:E2:94:71:59
Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial: 018570398FC9106804A8C28E8AD2FE558E75
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/BBpXz1JkiBoLfUmfBECaseKUcVk.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207294
IP address blocks: 188.190.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:8f:c9:10:68:04:a8:c2:8e:8a:d2:fe:55:8e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=041a57cf5264881a0b7d499f04409ab1e2947159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:13:8d:94:2f:58:88:43:ab:dd:54:68:47:
52:c6:75:70:7c:75:8f:cd:9b:bb:c9:9f:30:8b:13:
67:46:f4:6e:e9:7b:38:b0:b8:62:6d:e3:53:25:a9:
17:7e:7e:22:13:ab:27:67:c9:49:21:ea:64:23:1b:
e6:d5:ce:7f:8b:ff:68:1f:f7:b6:e8:66:12:e4:c6:
c0:a5:2a:1f:7b:41:c3:4b:ca:21:dd:44:77:c3:e5:
6b:2f:f6:3a:6a:38:c4:46:81:b9:e9:cd:17:17:38:
5d:83:28:89:d1:d6:1b:dd:b1:29:1f:67:96:3e:62:
31:f5:f6:1f:5f:58:94:9f:f3:39:c3:8b:75:28:c0:
dd:bf:6c:0f:9a:e3:24:0a:20:6d:98:bb:23:6e:3a:
35:97:79:3e:b2:36:ed:f1:90:22:f1:3d:df:51:51:
84:e1:27:01:ab:4f:4d:d6:70:28:fa:95:26:be:cb:
e8:6f:7a:6a:ac:7f:e4:f4:3f:1d:ca:74:ab:0f:d4:
bb:46:14:ca:f2:f6:ad:c7:61:4a:2e:2a:f4:01:e4:
45:54:6e:38:75:89:1b:71:a8:09:d4:28:33:91:57:
0a:d0:31:fc:15:29:97:87:11:db:c1:81:89:4a:85:
5b:04:a8:28:75:1a:b0:f3:84:42:2c:a8:29:c2:24:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:57:CF:52:64:88:1A:0B:7D:49:9F:04:40:9A:B1:E2:94:71:59
X509v3 Authority Key Identifier:
keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/BBpXz1JkiBoLfUmfBECaseKUcVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.124.0/22
Signature Algorithm: sha256WithRSAEncryption
64:81:57:61:8c:58:64:f4:62:9d:3c:df:64:a3:c9:ee:a1:99:
ec:ea:0a:8f:37:1d:da:8b:2e:d6:d0:7c:b0:43:cf:dd:72:47:
65:fe:14:3b:59:ea:53:db:f0:3f:ab:db:1b:6c:3a:da:1f:d7:
5d:12:d3:c1:c0:69:d9:7f:d3:d3:9c:40:90:c3:14:8d:3c:10:
f5:c5:e1:59:56:7f:de:78:89:fb:35:82:ef:90:ba:f0:3c:cb:
9e:bd:8f:06:68:c7:f1:e7:4e:76:d3:b1:aa:e1:f4:e1:7f:50:
93:f9:a5:b1:69:f3:1a:92:0f:3f:6a:8f:08:4b:1f:0b:13:54:
02:74:b4:f2:64:f9:5d:16:85:96:22:2f:71:0d:25:79:d7:7d:
d4:e3:95:a4:2c:91:28:f9:9c:4c:9d:ea:63:27:0c:cf:eb:29:
ef:80:6b:90:4a:43:ec:bd:d3:f8:1e:b6:a6:06:89:bf:b4:ac:
6d:b9:b3:84:38:27:c6:43:3c:3e:6a:47:21:c1:3c:29:00:59:
ee:14:39:02:66:01:8e:d8:ea:56:f2:81:b1:8d:9a:58:fc:d2:
10:71:c9:88:8a:85:33:63:4c:2a:6d:18:08:a2:2d:be:3e:a3:
51:ae:1e:e0:c4:91:21:eb:4a:66:b9:55:4a:d3:0b:81:76:5d:
2e:f0:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:16 2024 by rpki-client on console-ams.rpki-client.org