Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/BM_BxSv1oLynCMqrO_bqoBI_AdE.roa
File: BM_BxSv1oLynCMqrO_bqoBI_AdE.roa (raw, json)
Hash identifier: yKbPU3jQRnZAb/dTQtIY4AgqXmMpf7VlG7x/w1K2Vqk=
Subject key identifier: 04:CF:C1:C5:2B:F5:A0:BC:A7:08:CA:AB:3B:F6:EA:A0:12:3F:01:D1
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 01856FB1289FF1BC2AEB261ABFA46D7359CA
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/BM_BxSv1oLynCMqrO_bqoBI_AdE.roa
Signing time: Sun 01 Jan 2023 23:35:59 +0000
ROA not before: Sun 01 Jan 2023 23:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44189
IP address blocks: 91.199.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:28:9f:f1:bc:2a:eb:26:1a:bf:a4:6d:73:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Jan 1 23:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04cfc1c52bf5a0bca708caab3bf6eaa0123f01d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:79:a7:27:9f:dd:eb:23:70:91:8b:0f:94:
4a:8a:3a:7f:76:75:33:db:43:87:04:0d:eb:6d:98:
1a:f3:9b:d4:b4:a0:2b:29:bc:dd:36:3e:9b:27:38:
6b:51:3e:e2:e8:f9:c8:ce:96:ca:f8:6a:9e:f9:fe:
39:86:43:ee:e9:ed:0b:2e:62:c7:3b:93:a5:f3:88:
37:f3:dc:fe:9f:c0:2e:de:9d:b8:30:7f:5b:46:6c:
2f:14:76:38:f5:ab:e1:41:cb:0c:78:f5:e5:13:b2:
a9:02:9c:f0:e0:89:ae:2f:d4:62:7e:2b:95:f2:a5:
25:7f:6e:a3:1c:9f:87:b0:85:e2:3c:08:b0:ee:5b:
d3:05:44:e2:8a:39:5f:76:c4:65:fa:59:51:3e:0d:
97:51:d0:96:c0:40:b5:45:99:6c:b0:c1:a2:e7:9e:
58:1a:22:34:ab:ed:25:75:07:8f:bd:a9:65:36:0d:
86:ae:b8:7e:84:b4:d3:0d:61:cd:5e:b1:15:50:dd:
34:f5:ea:43:92:d7:f0:a7:9f:56:57:96:3c:b8:c0:
fc:83:a5:ec:7e:92:25:4e:1e:7a:0c:1c:11:e2:00:
18:2a:ec:37:b7:e4:4c:c2:70:8e:01:0d:d5:5b:a8:
ea:d5:6c:5e:46:db:2c:7e:2b:7d:7c:a6:b8:7f:6b:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:C1:C5:2B:F5:A0:BC:A7:08:CA:AB:3B:F6:EA:A0:12:3F:01:D1
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/BM_BxSv1oLynCMqrO_bqoBI_AdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:de:73:6f:60:72:43:4c:41:1f:f9:50:42:45:0d:42:85:e5:
22:e8:b1:3d:82:38:be:32:75:f5:c4:6d:ee:b7:56:1d:4e:0d:
83:77:2f:f0:ea:1b:31:0e:fc:07:7c:75:ac:9a:b7:02:45:62:
c8:b1:35:b0:f6:3d:e6:58:22:7c:69:d0:20:23:58:09:a2:6e:
7a:c2:d3:d8:c5:7a:18:ee:33:63:09:ce:96:50:3f:eb:a4:0b:
58:1b:85:b9:38:f1:12:df:59:c5:8d:18:98:90:8d:17:37:fe:
bd:b9:23:70:8c:2f:54:87:94:e6:74:63:b1:f1:d2:ef:97:19:
2a:35:d8:a8:67:09:b6:88:45:39:92:cc:47:a2:46:c9:a8:a3:
29:13:68:8d:8b:27:3b:8b:5e:4e:56:12:b5:26:6f:93:08:64:
07:fb:27:0d:cd:34:9e:81:d8:b1:11:2e:2b:43:c0:ef:54:02:
c5:9d:be:7b:57:2e:ae:7a:f3:dd:5d:f2:68:36:94:1f:fe:22:
4b:55:1c:60:d2:d3:10:9a:08:04:fa:87:27:8b:0f:58:0b:4b:
78:ec:1a:d1:6b:bd:7a:a0:29:49:08:5b:f9:a6:d3:84:7f:b9:
33:52:18:c2:35:09:20:87:f7:55:24:ec:3c:cf:ea:88:e7:25:
78:f7:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:45 2024 by rpki-client on console-ams.rpki-client.org