Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BWzF6NpElqO-OQHRd84Bbq3f0SY.roa
File: BWzF6NpElqO-OQHRd84Bbq3f0SY.roa (raw, json)
Hash identifier: BS7guy77Mib1FZwedZkmFNciod9dChdOIE6yjPanu7U=
Subject key identifier: 05:6C:C5:E8:DA:44:96:A3:BE:39:01:D1:77:CE:01:6E:AD:DF:D1:26
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189892BD59FC15FA7EB9824F93DDE46F599
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BWzF6NpElqO-OQHRd84Bbq3f0SY.roa
Signing time: Mon 24 Jul 2023 18:31:38 +0000
ROA not before: Mon 24 Jul 2023 18:31:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 89.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 05:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:89:2b:d5:9f:c1:5f:a7:eb:98:24:f9:3d:de:46:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 24 18:31:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056cc5e8da4496a3be3901d177ce016eaddfd126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:80:40:84:52:c9:f1:76:ac:7f:ec:37:3e:
52:2d:13:6f:d7:ea:6a:3d:57:4c:fc:35:f2:a8:53:
87:a5:e4:43:c2:c1:fd:b8:eb:6c:bf:95:dd:c5:9c:
b6:68:63:fb:9c:5d:49:36:e1:02:c9:70:1c:ff:93:
3d:0d:d8:ae:72:7e:a2:d4:ff:b2:da:e7:00:31:95:
14:9e:c5:51:e6:71:d8:75:53:57:53:d8:0a:e6:09:
ca:52:6e:aa:69:89:3c:c6:da:48:9b:ab:ad:61:09:
68:eb:c8:a3:23:44:c3:20:9c:b1:eb:cb:e0:79:8d:
76:84:8d:c2:a2:5b:d5:56:66:ed:01:2b:9f:a3:30:
40:6d:e9:90:64:cd:ff:d0:f2:a8:b9:c8:32:94:bd:
3c:34:c2:c7:ae:e7:53:e2:d5:3a:b5:57:73:ba:c4:
a8:d1:1d:70:7c:ab:8a:5c:83:c5:f9:04:9b:64:75:
f4:ce:09:41:3f:97:c3:9d:b7:80:87:e5:c5:7c:fb:
f2:a8:6b:26:e4:32:fc:e1:7b:f4:90:98:6e:ca:f9:
0f:39:d7:9e:a3:2d:a2:ee:88:1b:62:a3:e9:c5:d2:
54:cf:9d:50:ff:30:aa:b3:08:e4:03:06:f5:6a:13:
f0:25:32:6b:53:4e:fd:3a:64:81:a7:af:cd:b3:62:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:C5:E8:DA:44:96:A3:BE:39:01:D1:77:CE:01:6E:AD:DF:D1:26
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BWzF6NpElqO-OQHRd84Bbq3f0SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:71:34:cf:a2:83:b8:47:a2:de:09:82:3d:0d:5e:45:8e:31:
d4:4b:6f:7c:4a:a4:68:26:ac:a1:42:46:d9:5a:ff:fb:53:86:
06:6a:09:56:27:eb:d1:58:0a:b9:5b:ab:b4:dd:fa:5a:71:bb:
53:e5:88:63:99:14:23:ec:9a:f3:3a:96:4d:7a:b8:56:b3:a6:
b0:51:7c:ba:50:b4:6f:f7:29:8c:2a:b7:63:bf:9b:d0:20:19:
72:95:e8:22:17:7b:ca:5b:7b:95:0e:97:4b:b4:77:f5:90:12:
70:17:f0:65:82:d3:85:e5:51:be:27:65:ff:77:ef:05:fa:26:
e7:cb:75:ca:0b:d4:86:96:73:eb:95:55:41:52:c8:de:8a:05:
e5:89:5b:16:64:e6:e0:6a:c7:8b:fe:17:46:d5:d4:2d:a7:af:
c1:8e:02:a1:f1:af:8c:9f:c2:b1:8d:6f:31:a2:5b:cc:d0:04:
07:7e:82:4a:e8:79:83:f0:7c:0d:f9:e9:8a:63:aa:a7:e5:c2:
4b:82:8a:15:fa:16:a1:51:50:90:fb:b1:0f:f5:14:9c:db:fa:
4f:6a:6d:38:d0:d7:3b:ff:fe:94:56:2a:ea:93:61:04:da:75:
63:2e:4d:23:7f:ca:de:2e:24:55:6a:58:3f:27:a9:e5:f9:68:
19:53:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org