Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/BMgCipe3WsVkxt0zWwc5hwrFjWw.roa
File: BMgCipe3WsVkxt0zWwc5hwrFjWw.roa (raw, json)
Hash identifier: dMi5eLX+/9+xU/y4H3SbQNjpuy/9NSBqJW8GeaCwqBg=
Subject key identifier: 04:C8:02:8A:97:B7:5A:C5:64:C6:DD:33:5B:07:39:87:0A:C5:8D:6C
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 018CC87009A435B769857E9F196F5993EC65
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/BMgCipe3WsVkxt0zWwc5hwrFjWw.roa
Signing time: Tue 02 Jan 2024 04:30:34 +0000
ROA not before: Tue 02 Jan 2024 04:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 80.67.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:09:a4:35:b7:69:85:7e:9f:19:6f:59:93:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Jan 2 04:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04c8028a97b75ac564c6dd335b0739870ac58d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:8b:36:2e:b9:7e:94:07:c1:27:ea:27:73:
fe:53:d4:03:6d:b9:62:87:b9:8e:27:78:91:f3:ca:
2d:38:9f:36:17:e6:52:c8:5e:6a:25:f5:ff:b3:01:
78:ee:d0:4d:11:43:8d:3c:df:87:c5:f1:08:a7:6c:
0d:59:54:3d:21:bd:4c:a9:a3:45:f8:50:03:e6:bc:
dc:8c:64:39:e9:11:2b:d0:4c:0b:6e:f5:ce:e9:29:
5d:b6:4f:54:80:03:4b:4d:ae:81:d1:c5:17:6c:67:
56:11:be:eb:ac:9a:11:8f:cb:14:59:9e:11:54:2e:
06:70:55:6c:50:1f:fb:32:a1:aa:53:bf:36:a5:8c:
b0:bf:0f:1b:9d:bb:4d:7f:dc:29:b2:a0:99:15:51:
3a:3b:1a:fc:dc:70:f7:68:e0:44:5f:b1:cb:3d:f6:
80:81:9d:fd:7e:d8:1d:de:80:42:d4:ee:04:77:83:
1a:a6:f9:82:81:97:65:4a:99:cc:4a:86:f0:8b:c8:
c2:1c:24:b9:fb:d5:9b:4c:bd:c6:37:89:fc:6f:18:
63:ff:24:2a:3b:d2:f0:4c:c6:44:f1:8c:59:52:53:
45:f8:a1:91:89:e1:9a:26:2c:cf:cf:7d:c7:54:e2:
9f:08:17:fb:c3:d4:2f:be:bf:64:d8:4e:12:ae:9f:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:02:8A:97:B7:5A:C5:64:C6:DD:33:5B:07:39:87:0A:C5:8D:6C
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/BMgCipe3WsVkxt0zWwc5hwrFjWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b2:20:5a:19:30:9f:4e:66:b9:00:95:74:93:c6:ec:6d:82:
62:54:c7:95:26:43:49:89:dd:91:0c:36:de:16:10:f5:8c:f7:
c4:ee:e6:6c:75:cf:ec:e6:cb:46:f3:3d:be:0d:83:c5:b4:e4:
77:6c:65:43:0c:25:ce:11:a9:4b:70:f4:13:b2:66:e2:6f:73:
4c:e0:0e:08:6c:87:93:4f:ca:13:bc:ef:de:8d:89:12:c0:65:
1e:6e:40:e8:af:08:1f:9e:12:99:60:83:4b:e1:52:62:96:84:
d3:86:47:15:83:61:60:b0:74:53:5a:7e:17:4e:a6:16:9a:b5:
f1:fd:f7:3b:bf:e0:5f:c0:b4:06:6e:d1:98:b6:69:4a:61:49:
fa:83:f1:e2:ac:6d:41:dd:90:2a:21:fc:ac:bd:61:bb:3b:ae:
9d:c2:a7:79:34:09:23:3b:c9:e9:2a:ab:24:3c:25:d5:58:e6:
11:70:10:91:89:cc:0a:5b:2e:53:5d:bf:1c:1c:2d:b8:dd:8c:
d8:fc:f4:fc:a1:54:dc:c3:3c:ed:7f:db:ca:a1:88:6b:ec:bb:
1d:d7:7c:51:3d:57:c4:43:ed:9a:96:bc:8b:ee:14:ea:53:02:
50:dc:a4:d4:fe:2f:41:45:2d:a1:d0:92:6b:c5:3b:ff:1d:21:
df:48:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:46 2025 by rpki-client