Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/BFgQvZj07z5YK-A_j7jYPFOWbJc.roa
File: BFgQvZj07z5YK-A_j7jYPFOWbJc.roa (raw, json)
Hash identifier: wzOeIZsfBSMsAwpLq5xGoo/bC//WVqNGe+rLpCSQD2w=
Subject key identifier: 04:58:10:BD:98:F4:EF:3E:58:2B:E0:3F:8F:B8:D8:3C:53:96:6C:97
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018805A3053CA802F5349EBA516B32C14D18
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/BFgQvZj07z5YK-A_j7jYPFOWbJc.roa
Signing time: Wed 10 May 2023 12:29:09 +0000
ROA not before: Wed 10 May 2023 12:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:a3:05:3c:a8:02:f5:34:9e:ba:51:6b:32:c1:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 10 12:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=045810bd98f4ef3e582be03f8fb8d83c53966c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:28:a2:50:6a:7a:f6:19:03:05:5d:c1:0b:
be:7a:59:79:61:b6:99:82:b0:7b:d7:ad:f6:2b:ff:
72:f9:c8:99:39:81:5f:05:e2:35:33:52:ef:48:11:
a0:b3:5e:9e:ed:61:ef:ea:45:7d:57:2a:8c:03:65:
84:c1:f9:60:3e:0e:a5:3a:bd:a8:e3:42:43:af:fd:
4b:9c:4f:e2:61:29:97:48:2d:ff:34:81:6e:b8:85:
97:e0:2b:b1:10:76:78:4f:a9:5a:c3:a7:a7:6b:ad:
8f:79:ad:a9:68:8b:4e:90:47:7b:ed:6d:0a:90:7a:
db:69:c5:aa:ea:39:e4:22:4a:09:a9:4b:eb:2f:0b:
ce:bd:5e:02:ba:ff:33:ab:9d:3b:de:d9:24:3b:13:
3e:29:31:22:f2:c1:23:9a:f1:a5:97:77:52:00:9b:
60:c5:bc:b6:23:e5:8f:b5:ac:18:45:4c:4b:8e:79:
a2:af:14:f3:3d:2b:64:6d:19:18:82:a6:f6:10:6a:
54:81:86:e4:ef:33:36:14:2c:0f:dc:b9:bc:ee:84:
69:93:8a:61:84:90:16:a9:bf:07:a7:b3:c8:55:bf:
e8:b0:2c:be:f5:22:43:bb:51:d0:b8:ef:0c:42:62:
0e:6b:3c:b7:11:ad:98:60:48:af:59:9f:dd:03:ef:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:58:10:BD:98:F4:EF:3E:58:2B:E0:3F:8F:B8:D8:3C:53:96:6C:97
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/BFgQvZj07z5YK-A_j7jYPFOWbJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:8c:41:d3:4f:f2:60:c2:ee:ee:99:ad:32:6f:d3:68:fa:89:
b3:fa:c3:c1:27:7a:9b:85:b9:d3:61:96:b8:d7:81:99:0f:00:
99:18:91:e3:cc:ac:64:93:df:29:cc:5d:03:c3:a9:55:b0:43:
dc:71:2b:65:7f:79:d2:59:6f:7f:9b:bd:d6:28:6e:53:5a:75:
cc:10:10:dc:e0:ca:59:82:8a:b7:6f:50:f0:fc:28:8a:e7:d8:
4e:e7:c1:76:3a:ab:2e:de:c0:f9:7f:2c:23:71:e8:82:2a:a6:
84:74:2c:9d:67:e9:29:05:2d:76:75:1d:9e:fc:fc:77:a2:74:
21:b4:68:7d:39:53:75:7b:ef:31:90:6e:39:52:74:23:91:36:
ec:cf:a7:ca:7d:00:c2:1e:04:07:5e:c0:3c:69:da:0a:5a:c3:
49:2f:cd:c4:08:34:0b:43:2f:c1:2e:0a:c5:a2:e3:70:da:04:
a9:46:da:93:91:23:e9:99:b6:61:92:53:48:94:f0:6e:2d:70:
53:00:bf:4e:62:45:53:50:a2:ee:2e:f9:4f:28:ab:26:9a:8a:
78:13:47:a9:67:dd:fb:5a:3b:5d:7e:14:60:79:8e:34:b2:39:
d1:7f:c8:38:c1:ad:57:95:3c:76:ea:b2:75:7a:80:40:2f:f1:
ff:2d:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org