Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BJl9zhisPhQBGXy6eUp7nHV-z-U.roa
File: BJl9zhisPhQBGXy6eUp7nHV-z-U.roa (raw, json)
Hash identifier: o869EkfND3GWV7Xw3gEFyPZUXP7mUkMG83CVerZ5rLk=
Subject key identifier: 04:99:7D:CE:18:AC:3E:14:01:19:7C:BA:79:4A:7B:9C:75:7E:CF:E5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D69E4291A83232377F3540098DB6316EA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BJl9zhisPhQBGXy6eUp7nHV-z-U.roa
Signing time: Fri 02 Feb 2024 12:56:16 +0000
ROA not before: Fri 02 Feb 2024 12:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210558
IP address blocks: 45.80.158.0/24 maxlen: 24
45.92.1.0/24 maxlen: 24
185.241.208.0/24 maxlen: 24
203.159.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:e4:29:1a:83:23:23:77:f3:54:00:98:db:63:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 2 12:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04997dce18ac3e1401197cba794a7b9c757ecfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:fc:a9:ee:75:1a:04:90:15:7d:06:5a:2f:
9b:f4:71:8d:34:d4:c2:7b:25:33:aa:a0:33:ab:4c:
ce:29:f6:9a:a4:41:c2:4d:69:4e:8a:40:2d:a1:6e:
93:42:ac:2c:0b:01:3a:ef:63:1a:77:88:5a:b2:79:
e4:63:6e:fe:85:db:95:d7:09:cf:fc:09:c4:23:bb:
5b:39:1e:ae:4d:f6:55:21:79:d8:e3:f9:7c:80:f1:
43:28:ec:60:52:cf:8d:2e:d9:8e:fd:aa:94:26:4c:
b1:2f:65:2f:44:84:af:1c:fc:9c:86:10:f5:27:53:
7d:ac:55:e3:49:86:11:4a:88:26:11:9e:76:13:de:
68:80:ba:17:04:fd:2e:6a:ab:c0:a0:1c:7c:03:46:
6b:d6:86:df:19:41:4b:6a:40:ef:a4:ec:92:95:a6:
0e:96:a1:3f:b3:19:02:f8:23:ff:51:18:d4:96:d9:
95:8f:3d:95:15:11:43:9a:cb:11:55:20:33:1b:de:
2f:d4:94:0e:78:07:c7:ce:38:63:b1:5f:ee:8a:f1:
85:87:55:97:4b:ec:9f:9e:ba:1e:d2:c1:4a:dc:54:
68:44:dd:07:f7:f9:11:76:fa:bf:18:f5:d9:b6:37:
33:12:a8:d7:67:26:6e:c5:06:df:48:e4:d5:dc:dd:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:7D:CE:18:AC:3E:14:01:19:7C:BA:79:4A:7B:9C:75:7E:CF:E5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BJl9zhisPhQBGXy6eUp7nHV-z-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
45.92.1.0/24
185.241.208.0/24
203.159.90.0/24
Signature Algorithm: sha256WithRSAEncryption
52:64:fa:24:54:05:ee:78:51:78:be:1c:69:77:35:2b:b3:5a:
57:3a:19:0d:e3:1a:96:c6:a7:d6:2f:07:95:54:1d:12:4e:58:
e6:20:19:fc:d1:39:f2:12:aa:16:e0:9a:a0:0e:5d:f5:a6:8a:
29:e7:fa:b0:73:16:a4:a4:b9:08:0d:28:90:10:46:e6:b0:e2:
3b:1c:60:20:94:57:66:b5:89:14:64:85:d3:73:f8:06:16:8f:
6f:49:5d:b0:a1:da:2e:2d:75:33:a6:d7:06:a6:ab:f7:eb:13:
ab:e5:04:dc:01:a4:b0:d3:56:61:ba:48:47:50:b6:52:3e:32:
a1:fb:dc:cf:a3:37:7f:72:38:4a:05:41:06:8b:f5:a4:02:87:
78:ec:92:97:a3:4b:46:c3:e0:ef:4e:9c:e6:5b:3f:9b:ed:25:
a1:cd:04:4c:cb:22:ee:b0:6b:27:ef:65:b5:5c:d5:d1:2b:4a:
46:b5:01:e2:4d:80:fc:1e:b8:46:0e:d5:51:19:fd:e3:c3:e8:
31:31:d9:66:42:f5:98:25:32:52:21:6a:30:8a:45:07:fc:05:
23:dc:07:92:46:80:46:a4:c2:05:d4:34:87:73:33:49:da:53:
4f:4e:12:81:ca:cf:23:2b:77:39:5b:dd:07:8d:1d:70:74:6e:
12:41:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:40 2025 by rpki-client