Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/BgsEUF5IE3GL8_PzXIthdBkL-v8.roa
File: BgsEUF5IE3GL8_PzXIthdBkL-v8.roa (raw, json)
Hash identifier: 088g0uzs+kgq8IEdC8QNARnL+J3zlihc+GjnxQ4jCqc=
Subject key identifier: 06:0B:04:50:5E:48:13:71:8B:F3:F3:F3:5C:8B:61:74:19:0B:FA:FF
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018751F4DD0FC3BD5A8B6801C3AE299CA7B6
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/BgsEUF5IE3GL8_PzXIthdBkL-v8.roa
Signing time: Wed 05 Apr 2023 15:06:54 +0000
ROA not before: Wed 05 Apr 2023 15:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.143.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:f4:dd:0f:c3:bd:5a:8b:68:01:c3:ae:29:9c:a7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 5 15:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=060b04505e4813718bf3f3f35c8b6174190bfaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:55:3d:84:8b:c6:a1:f4:75:e3:2f:e8:a2:
5b:7e:48:da:b1:29:3c:75:39:d9:24:d0:44:60:55:
ee:7f:2e:1d:83:02:75:ca:4f:31:eb:c0:23:d3:e7:
a3:a6:af:5b:97:33:1b:c1:6d:e5:0e:61:90:6e:05:
99:4d:b6:c2:f9:86:0b:50:b8:5a:0c:34:7b:c4:da:
49:4c:e7:c4:52:06:cb:f2:da:14:36:46:ca:79:62:
7d:a4:2f:dc:df:2d:99:ec:dc:1e:d4:bd:44:d7:dc:
a2:93:a2:23:da:e6:91:f5:56:15:8b:69:4e:48:21:
21:cd:2d:0c:81:8d:ea:b5:3d:7f:d4:29:a8:25:47:
00:60:83:23:11:0e:4f:59:25:76:75:6e:84:b9:80:
ec:56:3f:3b:99:59:b1:6b:55:f1:ac:47:07:2f:5b:
c7:7f:56:dd:40:54:22:37:30:7f:90:47:0d:c0:b5:
86:9b:4b:73:d5:6f:f8:83:54:36:be:fa:5e:e4:4c:
ca:04:65:9e:82:9b:20:e3:75:eb:fd:24:74:d9:10:
e5:f0:10:7a:c2:e8:6d:99:dc:b5:8f:94:84:84:81:
b9:25:94:45:6d:a9:ea:ab:9e:ef:40:98:83:8f:2a:
8c:d2:ca:d6:b6:38:a2:4c:90:c8:58:ed:dd:4b:af:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:04:50:5E:48:13:71:8B:F3:F3:F3:5C:8B:61:74:19:0B:FA:FF
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/BgsEUF5IE3GL8_PzXIthdBkL-v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.163.0/24
Signature Algorithm: sha256WithRSAEncryption
56:53:90:5b:76:13:ce:a9:d3:71:26:fe:b7:d7:33:d9:47:20:
04:91:41:8c:3f:86:5c:62:84:f3:51:8d:15:a6:c9:87:de:26:
ef:9d:38:30:ec:fb:24:9d:a2:f9:36:0b:98:cc:8e:7e:85:c5:
09:5c:12:19:b7:bc:1c:0c:73:9b:d8:4d:de:05:bb:94:50:0b:
3f:77:f0:6b:bf:17:d3:86:54:86:ca:02:a8:98:f1:49:32:7b:
ec:6a:65:f4:77:1e:f2:d0:3d:3a:27:e6:8e:00:42:69:16:b7:
28:fd:1a:68:2d:c0:09:f8:36:b8:9e:82:43:3c:ea:0f:19:2f:
1c:a8:63:ae:21:9a:eb:2c:5c:57:09:0f:d9:85:32:c3:aa:cb:
90:1c:e7:9b:5a:85:4b:26:dd:d6:48:d0:02:be:bc:e7:c8:3a:
d8:1e:07:05:63:1f:9a:ee:d1:70:8a:9b:d7:a3:dc:9d:2e:0c:
56:c9:bf:02:fd:7a:03:da:c7:29:be:73:70:88:8e:bb:16:32:
59:85:12:5b:4e:15:80:3d:a1:60:4c:5e:c5:9e:9c:c7:dc:10:
bf:a3:5e:c0:02:1c:23:c0:97:1c:4a:fd:8a:f7:0f:db:4e:3b:
ec:7d:98:27:e6:91:7c:ee:b3:18:33:2c:fe:fd:a8:35:78:82:
24:25:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:46 2023 by rpki-client on console-ams.rpki-client.org