Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/BpRW5-nU2XhwOPNkldEihh6Ukfo.roa
File: BpRW5-nU2XhwOPNkldEihh6Ukfo.roa (raw, json)
Hash identifier: tJ0LsYc2NoliPgi0BmFdZjcsFCGQMmoU6heIuSDFiAc=
Subject key identifier: 06:94:56:E7:E9:D4:D9:78:70:38:F3:64:95:D1:22:86:1E:94:91:FA
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 018CC26D0E2057D523E82323A9F09D049C85
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/BpRW5-nU2XhwOPNkldEihh6Ukfo.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25581
IP address blocks: 91.224.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0e:20:57:d5:23:e8:23:23:a9:f0:9d:04:9c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=069456e7e9d4d9787038f36495d122861e9491fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:80:6d:2f:67:ee:1d:75:7c:91:01:7d:52:
70:1f:c0:bc:5e:4f:8d:c6:cd:a0:25:38:ac:73:b6:
ce:e6:11:dc:1a:f3:e3:cf:2d:87:d2:b0:d1:94:b2:
48:72:b3:db:76:5f:b5:59:91:3f:41:2c:2a:a0:5d:
64:45:0e:75:a8:29:2b:6c:df:8e:e4:34:3e:bb:b6:
fa:92:b9:3d:8f:ae:d9:87:25:de:ef:5c:3a:c8:40:
39:ed:3f:b8:b6:b9:1c:0c:73:5f:83:5a:d4:25:1d:
15:62:3e:4e:76:ec:6f:67:47:6a:b7:ee:c1:dc:c0:
38:c6:52:67:c6:2d:06:5b:42:e0:8b:eb:a7:31:4f:
9e:f5:d4:02:96:5a:27:5b:16:9f:94:17:3e:1c:69:
b8:6d:ba:d6:79:d4:0f:5d:9e:a8:55:6c:3b:f6:cf:
51:1c:8b:18:e5:11:6d:fa:10:4d:89:fd:20:3c:dd:
2a:e0:24:f2:35:ed:9e:fb:fe:e8:d7:af:1d:6e:36:
28:c0:7a:67:90:dd:d3:68:15:f5:a2:8e:d1:c4:77:
79:b7:81:3d:92:ec:df:5a:77:8a:3a:d0:3c:c6:66:
bb:82:4e:b3:7a:dd:f3:5f:fa:d7:01:3f:b5:0c:06:
7e:b6:30:c7:ec:34:1f:85:ef:b4:85:2c:e8:48:48:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:94:56:E7:E9:D4:D9:78:70:38:F3:64:95:D1:22:86:1E:94:91:FA
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/BpRW5-nU2XhwOPNkldEihh6Ukfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.94.0/23
Signature Algorithm: sha256WithRSAEncryption
70:f1:73:be:eb:ae:a9:94:3f:ca:02:0a:d4:7c:81:4e:c8:22:
e1:dc:27:7c:ac:f7:fc:9e:a9:b9:48:e0:03:ed:b4:6b:63:ee:
e2:0b:78:28:9a:fe:8e:7a:a0:1f:8a:75:b9:ad:e2:46:90:b5:
f3:a9:aa:e6:12:e0:b2:95:a0:78:5d:c0:43:db:7b:5b:09:fb:
61:9e:90:3b:12:f6:1d:d1:2f:06:dd:f4:02:68:57:ae:52:3c:
b7:69:43:0f:f2:28:0c:a3:fc:6a:98:26:7f:63:de:77:3c:8c:
fa:13:d0:9a:14:bc:73:ff:24:92:b3:2f:83:28:4e:c7:0a:36:
d0:27:e7:bc:af:10:2f:f0:0a:d5:44:4e:3f:b3:95:5e:ab:11:
c4:0f:e8:f9:bb:2b:6a:8c:c0:8d:69:92:04:ec:1a:5a:49:b1:
3b:38:81:76:75:ef:dc:4e:17:bd:67:13:81:01:5b:5c:7f:b8:
df:1a:4a:fd:8e:09:10:f5:c3:ea:dd:a5:f5:22:30:cd:27:2c:
3d:6b:d2:b2:09:f5:c8:70:77:ab:2d:7c:93:5f:c3:59:a3:63:
72:53:16:df:9b:58:57:90:0d:1f:c0:9d:83:27:7f:5e:ba:64:
da:88:c3:e6:54:4d:a3:1d:71:e8:09:a0:23:54:b3:a7:e3:8e:
12:51:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:54 2025 by rpki-client