Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa
File: BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa (raw, json)
Hash identifier: Fh3JMDwm/jrZM+SfdumMc8JOKmLthI6uXQdC+NLky94=
Subject key identifier: 05:55:27:58:4F:B9:41:E2:92:BC:AF:EF:C8:66:B7:63:67:7D:83:D5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A41C32DEBC51046A35132728799DF3457
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa
Signing time: Tue 29 Aug 2023 14:47:04 +0000
ROA not before: Tue 29 Aug 2023 14:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 89.46.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:c3:2d:eb:c5:10:46:a3:51:32:72:87:99:df:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 29 14:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=055527584fb941e292bcafefc866b763677d83d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:21:b1:5c:45:86:7b:5f:69:8c:0a:8d:6d:
c0:db:11:2f:ce:e0:88:54:58:1c:d2:48:b8:27:53:
f5:43:d6:2d:00:de:ad:61:1d:d8:b9:be:3f:fa:f1:
0e:36:be:54:a4:c4:00:5e:8a:2a:8a:ec:1b:17:2c:
40:c9:e0:e6:56:50:d6:cf:fe:26:b7:8f:6e:30:2a:
f7:75:f2:2f:42:8c:35:e2:9c:61:60:36:78:52:f6:
8b:3a:2e:38:e0:8d:be:e1:66:b8:58:27:de:ec:fd:
6f:d5:e0:35:8f:5f:e2:68:06:db:2d:dc:6a:8f:50:
eb:a3:80:0b:7c:f6:c7:db:d3:8f:14:b1:e1:de:ab:
79:7f:c4:14:37:4a:d4:32:02:6b:c8:e4:01:8d:4c:
09:ec:52:52:07:9f:37:7e:b8:7a:55:8c:7c:6e:b2:
6a:82:b4:3d:85:33:dd:b0:dc:b1:3c:c3:99:71:08:
67:d7:6c:59:8c:fb:1f:e0:54:c9:01:c3:63:0a:d8:
59:96:0c:f2:0c:6c:b0:48:29:3d:65:bc:a9:ae:9c:
35:0a:e1:9f:35:f0:d3:18:89:3f:a8:19:09:9c:64:
69:d5:75:dc:b4:b7:b6:e2:d7:90:47:21:59:b0:88:
8e:d1:2c:c3:f2:5b:79:7b:65:7a:e4:ec:f8:a3:ca:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:55:27:58:4F:B9:41:E2:92:BC:AF:EF:C8:66:B7:63:67:7D:83:D5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.4.0/24
Signature Algorithm: sha256WithRSAEncryption
85:65:88:2d:fd:27:96:a8:99:77:64:a9:5d:96:2b:91:e6:ac:
62:27:9f:68:83:af:63:45:b6:fd:dd:83:6f:fa:43:28:98:d3:
d1:67:b3:3e:7a:0f:c1:17:30:bc:e1:9e:fd:4f:a4:42:93:54:
a2:f1:82:c1:f2:b9:da:1a:d7:5f:87:5e:85:30:8d:ca:15:3e:
c8:4a:d0:f3:68:94:a1:89:73:12:66:6d:c6:a8:74:99:90:ac:
52:ec:89:66:09:12:c9:4d:09:9c:02:d2:e0:bf:04:58:7b:da:
86:b2:01:ec:bc:bb:5c:df:01:5c:79:82:18:86:48:5a:2c:a9:
71:94:ef:53:cf:8a:b7:22:4f:6e:f6:42:fa:54:24:a6:3b:77:
0e:d5:27:7f:1d:fd:13:74:00:1b:31:3f:8a:0e:07:0e:fb:de:
17:96:66:9b:40:9b:48:ad:a3:0c:48:66:14:18:ab:6a:b5:39:
ac:d3:2e:10:0d:1e:d0:42:25:ac:e6:a1:44:c6:7e:80:74:aa:
cd:f6:e5:ed:6e:e6:e5:04:ad:24:51:56:cb:a4:ca:61:0f:e0:
11:ef:2a:9a:2e:82:bb:53:29:42:4c:ec:2b:a3:24:b0:f0:88:
ac:e8:a1:77:5e:7f:38:7f:f0:a9:04:39:c2:ed:01:f6:09:40:
9c:59:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 14:25:15 2023 by rpki-client on console-fra.rpki-client.org