Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/buvoo9afz0yNpakGgRnRUcvR2Z8.roa
File: buvoo9afz0yNpakGgRnRUcvR2Z8.roa (raw, json)
Hash identifier: RPjrAfZi016VrdVDeNSp8I9scT/GyRcuEsb4KGonyhw=
Subject key identifier: 6E:EB:E8:A3:D6:9F:CF:4C:8D:A5:A9:06:81:19:D1:51:CB:D1:D9:9F
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01867D9F9BE29AECCB45946E8F48CB30BD9A
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/buvoo9afz0yNpakGgRnRUcvR2Z8.roa
Signing time: Thu 23 Feb 2023 09:34:17 +0000
ROA not before: Thu 23 Feb 2023 09:34:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26380
IP address blocks: 5.32.43.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:9f:9b:e2:9a:ec:cb:45:94:6e:8f:48:cb:30:bd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Feb 23 09:34:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eebe8a3d69fcf4c8da5a9068119d151cbd1d99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:41:da:db:ea:3e:a0:44:a6:79:1d:6c:f4:
04:07:e5:db:36:c6:b4:d0:38:07:53:5d:d6:48:f6:
8a:1d:7c:7e:12:51:0a:2e:aa:a3:2e:3d:d8:8a:37:
e1:56:e3:e5:1c:a4:7c:d1:9d:9a:1d:b7:96:62:5e:
22:aa:28:b0:de:9a:67:c3:a9:22:1c:87:10:09:23:
3d:ae:f3:d5:5b:f0:2f:44:08:8b:5c:69:52:22:1f:
65:34:21:cc:c3:80:a5:d9:ae:da:2b:c7:61:2b:63:
49:05:6a:7d:fb:63:9c:73:44:61:17:7c:02:1d:38:
5c:77:80:d7:25:b9:ff:e6:2d:60:86:d1:c8:f1:8f:
26:58:8c:6e:1b:6a:dc:76:33:7c:8c:dc:f5:96:c5:
30:93:8f:da:ea:53:8b:45:41:c7:6d:d5:5a:5b:2d:
a2:24:b8:8e:09:f5:b5:30:e5:93:a2:63:93:a7:b6:
d5:e9:a5:5d:da:0d:3c:8f:86:11:73:3b:b3:41:c0:
e0:94:9d:0b:76:27:6f:e1:60:5d:a0:f1:ef:1e:71:
54:85:6a:04:0b:b1:cb:df:a9:ae:58:6b:85:0e:1a:
96:ff:c0:17:4e:2e:9c:8a:6d:38:3f:04:46:99:3b:
10:d2:90:bd:63:f1:a0:3b:b3:46:f0:84:38:03:30:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EB:E8:A3:D6:9F:CF:4C:8D:A5:A9:06:81:19:D1:51:CB:D1:D9:9F
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/buvoo9afz0yNpakGgRnRUcvR2Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.43.128/25
Signature Algorithm: sha256WithRSAEncryption
02:76:b7:a8:57:36:3e:ed:7c:b6:e3:22:c6:c0:c2:c6:29:19:
d5:41:02:fa:3d:a8:86:e4:b4:fe:f0:29:68:61:4f:ee:5d:87:
c2:9b:df:d4:ce:7a:ee:0f:78:54:49:a4:52:4b:c1:13:6b:c5:
ee:5e:c7:1a:8a:80:d4:60:46:65:66:83:9e:1a:a6:86:29:6b:
99:70:73:7e:b7:d7:26:ce:96:4f:df:19:96:25:0d:46:78:8a:
5b:c0:cf:4f:1b:23:eb:7f:4a:88:d9:59:f1:b0:9e:aa:b2:e0:
88:3f:6f:9e:c0:3b:de:e7:56:17:29:02:b2:f7:a9:69:7a:e9:
ed:43:4e:bd:2f:53:6e:f0:6d:6d:4f:d6:0c:e8:26:2c:ca:ac:
fb:ae:99:3d:6b:01:a9:17:9e:c1:f6:a3:3c:db:7d:b3:0f:ab:
8d:ec:ad:e0:7d:19:05:48:c6:d9:dc:41:8b:76:b1:69:83:04:
45:f9:c3:19:ec:b3:3a:cf:24:87:33:a3:e6:fe:d0:84:d5:74:
dc:67:5e:1f:a3:a5:de:df:ea:b4:9f:c6:8b:f8:a6:d7:d4:db:
50:31:ab:b9:9f:9a:a7:2a:e2:ed:d9:0d:f4:37:cd:3b:a6:16:
8c:fc:c4:b3:0c:a8:f9:ea:a1:20:bf:13:a1:9f:3d:bf:6f:68:
2d:94:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org