Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/BDp-kFxck15Wo_sNAksOGU6lDKE.roa
File: BDp-kFxck15Wo_sNAksOGU6lDKE.roa (raw, json)
Hash identifier: rhvDd13+e622JfiP8+V30LPQsfkklFr6b/aHXF+jQ0A=
Subject key identifier: 04:3A:7E:90:5C:5C:93:5E:56:A3:FB:0D:02:4B:0E:19:4E:A5:0C:A1
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A350E74CAB1692A587949FD74A32A
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/BDp-kFxck15Wo_sNAksOGU6lDKE.roa
Signing time: Sun 01 Jan 2023 03:05:03 +0000
ROA not before: Sun 01 Jan 2023 03:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60067
IP address blocks: 141.101.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:35:0e:74:ca:b1:69:2a:58:79:49:fd:74:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=043a7e905c5c935e56a3fb0d024b0e194ea50ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:d5:91:95:ba:3d:17:d7:1a:a0:5b:2c:16:
04:96:8d:8f:93:d6:6d:b2:49:61:b8:67:c0:e9:09:
3e:e6:1a:21:d7:3e:50:38:5f:ce:ef:f8:41:d6:6d:
fc:c0:d1:55:33:6a:ea:85:4c:ee:74:91:73:3f:8e:
e8:89:3f:fa:eb:02:ce:74:8f:15:2f:d8:46:ef:a7:
f1:4f:11:37:40:55:f1:a3:2f:01:7d:e9:f2:6c:0f:
3d:73:98:3f:31:c8:1e:ad:ac:52:45:a5:ff:58:93:
93:43:5f:3b:04:11:24:79:1f:a7:ab:dd:a9:c1:af:
e9:ff:e5:54:49:38:0b:10:f9:c8:c2:14:c0:e7:d6:
d8:e0:ae:77:3e:94:cc:d7:25:12:ee:7c:cd:d0:f0:
13:57:8f:9f:c8:a3:d0:27:9c:b2:ff:b9:8d:cb:c8:
95:1e:9f:9f:da:cd:0c:24:9c:0b:9b:3a:df:af:cd:
7d:20:ce:3a:27:c9:c0:58:c0:74:35:7a:ea:3d:64:
45:03:59:c5:74:23:f7:53:49:de:bd:a5:c7:6d:59:
06:40:f4:83:0e:0c:86:70:cd:12:1f:69:a0:d6:e0:
84:98:6d:cc:86:23:59:eb:d3:a7:77:9b:52:5f:be:
f8:64:6d:84:c2:c7:10:9f:cc:57:d1:03:78:6d:c8:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:7E:90:5C:5C:93:5E:56:A3:FB:0D:02:4B:0E:19:4E:A5:0C:A1
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/BDp-kFxck15Wo_sNAksOGU6lDKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.200.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e7:36:56:6f:ed:be:84:aa:86:43:44:0a:10:d0:74:62:d3:
74:93:29:0c:62:de:9b:90:f8:40:6d:29:ff:7d:9a:f2:d5:7e:
b5:41:10:c1:4d:0c:e6:40:fc:09:aa:21:05:b7:eb:fc:55:9a:
18:1c:e5:84:ce:ff:5c:53:d8:58:f4:82:e9:ed:18:27:99:9d:
07:b2:1c:63:54:1d:4b:0c:74:85:fb:56:cb:24:24:19:d2:96:
25:ba:fb:4f:7a:87:d4:2e:72:7e:19:65:ee:c5:ad:c2:ff:b1:
9a:00:cd:91:5e:1b:a8:a0:b6:97:1e:33:1d:0a:79:b4:89:40:
a9:20:7e:82:5c:f6:32:f5:f2:1f:68:03:f5:be:92:77:54:a1:
19:a7:03:8b:0e:53:4d:c0:81:c4:46:36:13:73:b8:d0:06:e6:
33:a3:55:5e:ed:37:3f:17:c8:c7:e5:b2:20:4d:c6:2d:d9:f6:
84:9a:c4:de:a9:ce:a0:0c:6a:6d:56:9a:b4:1e:d6:5f:dd:dd:
f2:60:5d:4b:17:2e:d9:ae:42:1e:91:16:24:3e:06:8d:06:3b:
4d:39:bd:02:ee:b8:2f:3a:af:98:6d:27:9c:da:66:8d:6b:f7:
da:c1:19:bb:a9:4f:cd:83:64:3f:9a:ce:75:71:e8:16:64:7d:
7c:dd:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org