Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wg22BagG3TBNzgdb6c9BSChRAQo.roa
File: wg22BagG3TBNzgdb6c9BSChRAQo.roa (raw, json)
Hash identifier: kXYMPGRCedPDq22j7kdYTU8gkkLiPWRPn1UTz8xlNFg=
Subject key identifier: C2:0D:B6:05:A8:06:DD:30:4D:CE:07:5B:E9:CF:41:48:28:51:01:0A
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 018571B0D5B81E0DD2C633D6C761271AA55C
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wg22BagG3TBNzgdb6c9BSChRAQo.roa
Signing time: Mon 02 Jan 2023 08:54:52 +0000
ROA not before: Mon 02 Jan 2023 08:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1820
IP address blocks: 146.19.54.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d5:b8:1e:0d:d2:c6:33:d6:c7:61:27:1a:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 2 08:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c20db605a806dd304dce075be9cf41482851010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:c3:76:d7:60:74:de:29:4d:98:37:5f:fb:
80:1f:34:0e:e6:f2:ee:94:e2:bb:7e:e9:4e:f2:67:
35:92:a8:e9:de:59:a5:f3:be:8c:65:14:91:14:1c:
24:5a:2a:cd:74:5c:39:3f:dc:e8:bf:4a:e5:84:b0:
7c:13:50:02:16:e9:1d:70:24:bb:c9:36:d9:50:cf:
4b:b3:9e:75:10:23:61:22:3f:ed:be:92:f2:d1:d3:
2f:4f:60:c0:70:30:05:ad:46:02:4e:ee:e1:e3:1b:
ed:12:84:d4:1c:c6:de:2a:ba:c3:c8:78:28:02:d8:
70:7c:9c:99:e7:a6:a1:0e:df:db:6c:ea:43:48:d9:
7c:27:e3:3c:3a:04:f0:0e:d8:be:90:bc:78:11:f2:
d0:56:b6:a8:ec:8c:d1:72:70:d3:9d:ec:09:04:a1:
05:ee:2b:a6:f1:23:b4:a9:c1:8f:f0:87:61:d3:b7:
58:1c:d2:0a:8d:42:ab:07:53:43:98:d8:6e:73:19:
a8:2b:b5:85:fb:8d:d2:83:71:42:a2:e7:9d:ce:e7:
ce:71:c1:f0:29:99:3b:78:44:22:06:6f:18:94:b5:
de:ca:ca:4d:09:26:72:63:45:68:64:96:6b:bf:26:
67:36:dd:03:d6:d1:98:b3:ed:d0:bd:80:fe:2e:94:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:B6:05:A8:06:DD:30:4D:CE:07:5B:E9:CF:41:48:28:51:01:0A
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wg22BagG3TBNzgdb6c9BSChRAQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.54.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b8:25:7c:ad:35:7d:98:6f:68:5e:b4:62:26:33:ed:17:0d:
88:8e:53:ef:fb:a1:f6:83:4f:09:72:2c:52:69:c3:a6:9a:fe:
bf:ad:c3:d4:a2:a6:33:b2:c3:2e:7d:c5:2e:bb:cf:f2:4e:7c:
d0:a5:00:92:98:04:8d:2b:40:5f:cd:f6:f2:aa:af:62:02:aa:
3c:22:6c:f7:8a:0d:62:db:a6:20:e7:7b:8c:cd:85:ee:84:ff:
86:e4:9f:11:fb:64:41:85:14:51:e4:b0:ec:d3:1e:f1:ae:52:
5b:3f:88:a5:5a:ba:5e:dd:9e:f4:27:33:60:b7:68:65:57:a8:
12:34:30:97:a4:18:05:63:dc:b2:ed:5b:bb:06:b1:66:d9:ea:
1f:1a:73:76:5d:e6:c4:cf:9e:be:2c:57:07:cb:30:c2:8d:5a:
42:38:db:b3:0c:60:02:eb:ce:60:e8:86:83:b0:ff:5e:f1:e2:
d2:e5:84:f8:7f:08:2b:9a:9c:9d:e6:e3:7e:5d:18:b9:c3:ce:
52:73:a7:7b:af:1d:45:fb:1d:88:74:16:3b:a3:0f:c4:98:8d:
55:b7:79:ae:16:4d:cd:c9:5d:70:c4:22:da:25:71:89:29:68:
54:24:6e:99:06:7b:c8:b0:cf:fc:c7:94:1f:c2:bd:15:80:e0:
bb:37:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:42 2024 by rpki-client on console-ams.rpki-client.org