Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/BVEkcRGvMxfES5a8wTKGsRcOLOg.roa
File: BVEkcRGvMxfES5a8wTKGsRcOLOg.roa (raw, json)
Hash identifier: xLyOAxcZ9Y4Y84s2x+x7coq7oP0/sh0/A46jwZHpBfY=
Subject key identifier: 05:51:24:71:11:AF:33:17:C4:4B:96:BC:C1:32:86:B1:17:0E:2C:E8
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 018B9464CDB2B652A610525C2223E0EE48D8
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/BVEkcRGvMxfES5a8wTKGsRcOLOg.roa
Signing time: Fri 03 Nov 2023 08:55:16 +0000
ROA not before: Fri 03 Nov 2023 08:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12978
IP address blocks: 91.233.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:64:cd:b2:b6:52:a6:10:52:5c:22:23:e0:ee:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Nov 3 08:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0551247111af3317c44b96bcc13286b1170e2ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:3e:c2:2f:1d:8f:c4:8d:ff:fd:f1:12:87:
8c:48:a6:49:fb:c6:67:55:32:f4:58:52:98:21:b5:
e4:7c:4e:a6:de:cb:6f:2f:b8:65:eb:1f:8c:5d:fc:
83:c4:1e:07:c6:d8:9e:fc:6b:95:2c:6e:8a:d0:cf:
85:c9:34:fe:1c:59:a1:d5:7d:67:93:16:fa:b7:2e:
d5:28:5e:a7:d3:8f:f4:22:b5:2b:cb:c0:fd:be:e9:
ba:d9:69:d0:5a:b1:db:0f:12:c5:55:07:32:36:74:
47:72:08:b0:c7:be:9b:47:05:86:90:bb:ef:44:2b:
fb:67:c8:2d:b4:ba:f9:d9:98:8b:6f:fb:78:4f:c4:
e2:79:07:12:0b:a6:ab:6b:bc:ce:5a:17:1d:48:aa:
d9:55:4c:ea:38:a3:cc:de:98:24:65:c5:b6:0b:fc:
e3:35:a0:ad:1a:9d:2b:98:39:44:1a:6c:93:3a:27:
76:03:4f:84:00:15:02:58:7a:b9:ad:0c:8f:b2:83:
5d:9a:65:c4:60:73:56:90:a3:06:41:a5:2f:a2:38:
c9:70:d6:99:49:07:4c:05:01:f4:51:d5:c4:a8:2e:
5f:59:61:32:91:d4:ad:40:13:a7:9f:1f:a8:e2:ee:
1e:38:8c:65:f9:1b:b5:f3:19:1e:9c:62:b0:ab:17:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:24:71:11:AF:33:17:C4:4B:96:BC:C1:32:86:B1:17:0E:2C:E8
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/BVEkcRGvMxfES5a8wTKGsRcOLOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1b:c0:03:48:39:b0:77:2b:a2:34:61:b5:01:fd:53:6a:45:
f6:e0:39:ff:69:cd:1f:61:b9:74:f4:63:12:c5:9b:cf:74:20:
5c:01:5b:25:e4:4f:5e:4d:bc:dc:9c:4d:12:ec:65:29:bc:f5:
19:23:40:b0:7f:e0:54:a2:28:89:64:64:c9:ca:cc:87:56:53:
e1:40:1a:66:69:a5:0c:b2:7b:d3:19:a9:3b:11:05:c6:aa:e2:
87:2e:b1:46:4c:71:59:8d:54:12:53:1b:18:5a:6b:60:f4:b1:
2f:be:80:ba:34:ee:36:1b:6c:f2:23:77:9f:eb:79:cb:a7:22:
a1:b2:3f:87:da:f7:f7:6f:fe:06:ba:dc:35:5a:99:a8:c4:e8:
63:91:46:ea:25:a6:81:65:ab:cc:1b:14:48:b3:96:a2:ce:0a:
cb:56:69:59:20:5c:cf:b7:dc:0c:8b:ec:91:9b:15:51:28:ac:
f2:63:28:86:17:bb:65:c1:af:b6:36:96:cb:ca:12:eb:75:59:
1b:36:7d:d9:4f:f6:fb:ec:95:88:94:cc:8c:66:f2:49:51:fd:
91:6c:43:a1:0f:18:2a:9f:bb:b1:a4:af:ac:e2:79:a7:89:48:
c2:8a:e1:1c:6a:24:e2:03:85:af:f9:4e:75:e4:86:92:4b:1c:
e7:71:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:31 2024 by rpki-client on console-fra.rpki-client.org