Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BHm86VQqCgCa9FF-50b6WqzNR9w.roa
File: BHm86VQqCgCa9FF-50b6WqzNR9w.roa (raw, json)
Hash identifier: IiBcafQbURXLwS9n/9hFf3B+IrHX+uW5C+/iAU8v3ZA=
Subject key identifier: 04:79:BC:E9:54:2A:0A:00:9A:F4:51:7E:E7:46:FA:5A:AC:CD:47:DC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C13098AC7140DBB5AD257BD9ACC6D4835
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BHm86VQqCgCa9FF-50b6WqzNR9w.roa
Signing time: Mon 27 Nov 2023 23:07:21 +0000
ROA not before: Mon 27 Nov 2023 23:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32167
IP address blocks: 89.213.179.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:13:09:8a:c7:14:0d:bb:5a:d2:57:bd:9a:cc:6d:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 27 23:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0479bce9542a0a009af4517ee746fa5aaccd47dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:43:4d:48:f2:27:53:b2:7d:98:ff:df:52:8a:
b0:2e:a5:c8:25:3d:15:e4:16:29:a2:65:06:8b:c3:
40:6f:d6:6f:66:3b:79:31:f3:56:2f:6f:8b:88:1a:
3c:82:41:6d:77:67:b9:b7:81:38:7d:da:3d:20:23:
7d:31:96:a6:a6:22:c7:d6:e5:af:db:6e:ba:72:62:
5d:48:44:09:bb:50:0e:cc:4a:96:a1:47:d1:c9:61:
51:80:8d:5f:cd:67:96:25:4c:44:9f:1f:f5:49:57:
37:70:c1:47:ae:76:8a:b3:72:cd:1b:ac:9d:1b:f0:
a8:59:53:75:89:04:a0:dc:fb:0b:f2:52:a7:88:8b:
60:19:13:bd:10:fd:bf:c8:a4:21:64:6b:e3:3a:53:
fc:0f:55:24:26:0f:f9:eb:54:4b:61:af:54:b8:1d:
71:f9:91:e6:8f:cf:a5:83:03:e0:7e:4c:7f:29:48:
0b:56:a5:e0:d9:9c:9f:ac:6e:08:ea:b3:7d:7f:67:
c6:2b:d2:91:a2:95:8d:e7:cf:f7:5c:e5:47:4d:f5:
a5:8f:38:3b:e4:e9:0a:33:60:fa:26:72:45:cf:0b:
8e:01:5e:a6:53:af:82:7c:20:ec:05:2b:3d:5f:90:
2c:8e:06:ef:6f:36:c8:c1:6d:e8:53:31:67:5b:d9:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:BC:E9:54:2A:0A:00:9A:F4:51:7E:E7:46:FA:5A:AC:CD:47:DC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BHm86VQqCgCa9FF-50b6WqzNR9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.42.0/24
89.213.179.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d0:ef:80:17:82:93:81:bf:f5:ed:2a:81:dc:8a:d8:5b:cf:
4f:2c:d9:c5:c0:fa:1b:6e:ea:e9:be:56:bf:63:ab:57:f3:2b:
f5:ac:a1:09:24:33:62:5e:e3:82:21:25:45:22:3c:e9:a8:bd:
0c:b3:72:c3:8c:c9:19:73:79:fa:70:e5:41:db:55:71:18:30:
22:dc:68:ae:d0:25:35:52:18:a1:71:f6:67:fa:78:98:e4:30:
18:b8:a7:62:a4:17:ab:55:46:d2:78:f5:ef:5f:6a:b4:41:de:
bf:3f:d1:c4:c4:4c:be:88:02:bc:89:64:68:39:4a:8d:a7:fd:
ba:4a:5c:46:0d:12:1a:35:9a:9b:00:06:ac:bb:cf:96:63:61:
80:8a:e7:7f:9e:ab:d8:70:18:a9:a7:57:65:a7:bb:ff:ad:c6:
d2:5c:07:b8:b0:3f:32:4b:35:1d:28:9b:e2:36:fc:5b:b8:2c:
c6:49:ea:d9:e1:38:6f:55:d1:33:43:ac:51:cb:b7:64:c8:d0:
0c:6a:ea:28:6f:e6:36:ea:a8:4c:66:e6:0e:5e:0b:2b:f4:fe:
62:40:9e:fc:24:50:66:8f:82:24:66:b2:ef:20:bb:56:29:40:
4a:b7:ec:a7:72:3f:f1:88:5d:8f:ec:34:bd:5e:2d:6a:47:e4:
79:36:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org