Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BeJYG6Zei-EDJM7f6S4CXO1I4wg.roa
File: BeJYG6Zei-EDJM7f6S4CXO1I4wg.roa (raw, json)
Hash identifier: CD6RxQinCMOWGGia0/yUuyGSDa4tySOZZxxtclaVMpE=
Subject key identifier: 05:E2:58:1B:A6:5E:8B:E1:03:24:CE:DF:E9:2E:02:5C:ED:48:E3:08
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018972C039400FA4B76CA5DFA2D652EE9067
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BeJYG6Zei-EDJM7f6S4CXO1I4wg.roa
Signing time: Thu 20 Jul 2023 10:02:27 +0000
ROA not before: Thu 20 Jul 2023 10:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52125
IP address blocks: 46.19.70.0/24 maxlen: 24
185.166.198.0/24 maxlen: 24
94.198.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:c0:39:40:0f:a4:b7:6c:a5:df:a2:d6:52:ee:90:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 20 10:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e2581ba65e8be10324cedfe92e025ced48e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:be:b2:e3:64:d0:e0:fd:3a:de:7b:3b:58:
c2:7d:22:1e:07:d6:0f:e5:65:fc:ff:2c:b6:39:4d:
04:bc:fd:44:6f:07:a7:f8:f3:81:ed:f6:ec:51:1e:
39:3c:3c:6b:b5:be:a3:aa:29:ac:8a:00:97:5f:45:
83:b1:63:21:08:d0:a8:52:c0:8e:cb:df:b7:63:4b:
f5:69:fb:02:b8:9e:7e:7c:41:b8:49:a3:5b:13:a9:
15:4d:15:d5:46:9b:9a:33:6a:5a:cb:c0:90:d2:9e:
9c:f6:d6:33:fa:71:6e:29:d3:ab:01:64:18:da:13:
fb:bc:7b:5d:9b:a7:8c:79:ca:2b:02:9e:d9:1b:09:
52:6c:c6:15:58:11:96:47:de:11:b1:c3:cf:87:c1:
ad:a4:c2:9b:cd:cd:96:3f:72:23:59:e3:fd:a9:dd:
d9:36:ef:1e:25:66:fd:cb:14:88:39:e9:ba:eb:a4:
a7:90:10:5d:1f:00:0d:f6:9a:65:07:c1:28:50:3c:
69:15:fb:77:73:74:2e:39:fd:d1:45:aa:7d:80:ff:
fa:67:4c:f6:e0:4c:63:dd:a5:93:8d:6e:0f:84:f2:
98:cb:84:09:a7:e7:d0:22:d5:49:9a:15:1f:35:91:
d9:6d:7b:4e:a9:22:41:c8:57:d1:62:63:a1:9e:a7:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:58:1B:A6:5E:8B:E1:03:24:CE:DF:E9:2E:02:5C:ED:48:E3:08
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BeJYG6Zei-EDJM7f6S4CXO1I4wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.70.0/24
94.198.222.0/24
185.166.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ef:69:08:2b:20:c3:e1:80:06:3c:32:39:88:08:b1:d8:c3:
66:c1:68:48:11:9d:98:3b:5b:d3:27:2c:86:74:c9:6e:65:7e:
38:66:7a:a8:19:64:fe:06:a4:39:00:34:cb:de:10:ab:2e:2b:
e8:45:be:0b:52:61:03:8a:83:59:68:2f:da:aa:89:23:82:b1:
ee:1b:50:ba:c5:b1:cd:6c:fa:23:bd:ec:40:ef:bc:d5:40:53:
0e:f0:75:ee:8b:4c:f1:ae:07:64:d3:54:e2:2d:27:3a:9b:33:
5c:29:94:9d:a2:88:ab:f1:48:4a:ba:75:00:69:11:49:c8:9e:
98:b9:f0:49:73:31:0a:50:96:f8:61:8b:d6:40:c9:5b:13:3a:
08:9a:a0:89:4c:a1:2c:af:72:b2:40:b2:48:7b:5d:3f:56:3c:
e8:c3:e3:f6:33:43:72:64:7c:1f:d9:13:f4:94:2f:79:05:6a:
87:50:fd:9b:a0:6e:18:f0:5c:e7:e9:31:24:f6:80:92:31:94:
48:3e:c2:e9:98:31:52:92:f8:d6:69:3c:12:b7:2e:6c:d8:83:
d8:d4:e4:ce:b6:21:c9:03:4a:df:13:07:29:8a:cc:58:39:cc:
c8:b0:c6:3d:23:b3:60:cd:28:f7:e9:0c:8c:c8:33:7b:5a:bc:
42:86:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org