Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/BJaGo-0C8HvC5GENgpdrwbO3_DA.roa
File: BJaGo-0C8HvC5GENgpdrwbO3_DA.roa (raw, json)
Hash identifier: q292C/uKOYqYKyOuHTGgrYyz9+hzKJK1Ter54wB0has=
Subject key identifier: 04:96:86:A3:ED:02:F0:7B:C2:E4:61:0D:82:97:6B:C1:B3:B7:FC:30
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 01857102D004182C6285DA1EB05701192419
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/BJaGo-0C8HvC5GENgpdrwbO3_DA.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202179
IP address blocks: 185.50.180.0/22 maxlen: 22
185.50.181.0/24 maxlen: 24
185.50.182.0/24 maxlen: 24
185.50.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 10:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:d0:04:18:2c:62:85:da:1e:b0:57:01:19:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=049686a3ed02f07bc2e4610d82976bc1b3b7fc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:f6:8e:99:a6:50:05:bf:0b:d5:18:29:88:
ce:6d:c5:79:4c:a2:e2:a3:9d:98:15:9d:57:69:2e:
72:4c:78:48:e1:db:36:6a:79:39:21:ae:7e:c0:6f:
fb:d0:fa:ce:9c:fa:2b:09:01:84:7e:84:fd:6a:bc:
c0:a0:95:b8:9e:a3:f2:d8:c5:3e:9c:0c:ae:a6:49:
6f:b6:ea:83:84:10:3e:bd:e2:3b:1c:ab:86:2f:54:
42:12:5e:fa:9a:0a:c9:4e:a1:76:8c:3d:4d:24:9c:
99:f8:56:1e:cf:f8:c3:e4:ab:2f:e7:ee:8d:c1:67:
e6:31:3c:5b:49:d2:a4:f4:19:11:b6:96:b9:a8:ca:
f9:20:cc:6e:a4:7d:c5:60:33:48:85:16:4b:fd:f3:
18:56:fb:7f:ff:d2:28:97:43:24:7d:1f:1e:d3:3d:
0a:c9:ff:b2:5c:91:ac:cf:15:e6:27:68:7d:a5:8e:
4b:2d:46:46:9f:20:0b:d5:93:5f:cc:b3:6e:23:36:
16:bb:2e:50:1d:bf:47:4c:52:b1:2f:3c:04:92:d6:
3c:37:34:68:a0:c8:d7:f0:9b:f6:3b:56:32:4a:0e:
04:4a:df:5a:45:c6:60:61:c1:40:64:d8:1f:cd:aa:
7c:6f:98:41:1a:98:cd:d4:80:ee:74:25:13:bf:75:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:96:86:A3:ED:02:F0:7B:C2:E4:61:0D:82:97:6B:C1:B3:B7:FC:30
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/BJaGo-0C8HvC5GENgpdrwbO3_DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.180.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ec:42:03:7d:f6:eb:98:21:01:48:d9:eb:68:14:b2:5d:f2:
83:9a:e8:c0:9a:aa:66:0a:66:03:22:5d:7a:0a:cf:14:a7:76:
44:ce:2c:c6:18:40:a4:61:96:0a:ae:a3:f3:a1:cd:aa:ca:75:
f4:c0:03:ed:86:d5:dd:20:43:58:96:e1:85:ed:e3:81:7c:d9:
b3:d9:9c:b1:6b:21:95:31:20:af:ea:9a:cc:4e:b1:5a:09:69:
96:09:84:f4:f6:91:8f:3e:55:d8:fc:87:3e:a9:52:c8:42:e6:
55:7b:c6:74:49:0d:f4:ab:29:ea:2f:71:3c:c2:e6:59:1b:f6:
ed:ea:17:5e:2e:5a:74:25:50:c5:79:b2:f9:59:01:89:9d:f5:
39:db:73:b9:49:64:ea:b5:a2:ef:c6:4a:d9:a6:11:11:8a:c7:
2f:80:fd:d1:7c:56:51:db:09:90:5a:b4:63:5b:aa:4f:be:af:
47:1f:44:1b:0b:36:b9:b9:87:b8:12:56:b2:74:f7:97:ad:4b:
52:ba:6b:fb:ce:c2:0c:29:a2:08:8c:4c:56:24:7c:ca:ef:14:
74:cd:53:63:3b:ae:0b:09:23:8d:44:83:90:5e:f4:75:70:ed:
af:ff:ae:b9:26:87:9b:cd:59:0a:6f:42:80:73:40:23:31:d0:
4a:eb:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:43 2024 by rpki-client on console-ams.rpki-client.org