Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/BfBAd4v9hckOEgQiZIkV4M87u0g.roa
File: BfBAd4v9hckOEgQiZIkV4M87u0g.roa (raw, json)
Hash identifier: o++UVMwlKyfOdxUmTBGIlyM02KKAOMLgBGUiA1myN6A=
Subject key identifier: 05:F0:40:77:8B:FD:85:C9:0E:12:04:22:64:89:15:E0:CF:3B:BB:48
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 01903B7E0B3CF7CCB1C9013374ABD192FD5F
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/BfBAd4v9hckOEgQiZIkV4M87u0g.roa
Signing time: Fri 21 Jun 2024 15:50:34 +0000
ROA not before: Fri 21 Jun 2024 15:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 45.12.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 24 Jun 2024 12:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:7e:0b:3c:f7:cc:b1:c9:01:33:74:ab:d1:92:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jun 21 15:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05f040778bfd85c90e120422648915e0cf3bbb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:27:98:5d:50:7f:fe:04:72:9f:71:47:92:
b6:1b:fa:0a:d7:aa:11:28:73:51:2a:ab:5d:f9:9c:
49:2b:8f:91:cf:cf:fa:73:9a:8d:0c:fb:9b:f7:cc:
5d:ea:f7:b3:cc:84:8d:ec:6c:17:55:2c:c2:34:cb:
9d:6f:51:8e:26:e0:7f:03:71:ba:8f:35:ab:83:a2:
80:88:e8:bc:f5:dd:e9:93:10:88:64:9b:36:11:62:
ac:37:ea:ad:c5:f0:aa:37:2b:03:a4:97:c1:d8:3c:
d8:02:2c:fd:d6:cd:4d:7e:7a:37:20:33:62:1d:35:
86:b4:c0:54:9c:06:18:30:ae:33:e1:7f:de:96:62:
ad:6e:fe:63:6f:57:fe:fc:b0:41:a6:df:32:ea:84:
d0:63:91:82:55:c0:d3:6e:29:75:bf:99:8c:df:9e:
3b:3d:ea:96:29:0b:c2:5c:71:2c:74:19:cc:d9:30:
3d:be:12:cc:b5:b3:04:d4:3c:56:47:79:ec:97:f8:
d0:8e:fc:76:fe:ba:e0:3c:8c:26:a0:24:34:12:e7:
9f:5d:77:1b:dd:cd:49:c3:03:95:46:aa:97:36:68:
41:aa:21:fd:da:36:19:06:c9:36:3b:c1:b4:34:30:
3c:a2:da:19:c1:f2:c6:a4:25:db:30:c3:fb:72:49:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:40:77:8B:FD:85:C9:0E:12:04:22:64:89:15:E0:CF:3B:BB:48
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/BfBAd4v9hckOEgQiZIkV4M87u0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.12.0/22
Signature Algorithm: sha256WithRSAEncryption
56:dd:2a:b5:04:14:77:de:ad:b8:03:e1:6d:4b:3a:2c:31:3a:
c8:a3:24:71:95:f7:69:e9:2c:51:db:70:af:bb:39:e0:e8:7f:
39:9b:fa:68:19:64:3f:72:8c:69:04:ba:f0:8b:75:aa:f9:74:
58:27:37:ad:d5:65:57:a6:a9:c6:29:2d:88:bc:6e:5e:b2:fd:
ea:58:5b:2c:31:8a:d6:95:21:8a:39:00:91:50:2f:72:0e:70:
77:35:15:6c:be:08:b4:a6:f4:de:b8:06:90:c1:82:6a:85:ea:
74:53:a2:9b:18:49:38:2e:d5:e0:4a:e7:83:d1:19:10:03:57:
04:e1:cd:47:90:f7:cc:2e:6e:e2:71:58:30:97:56:76:3a:63:
7f:61:13:0d:96:e7:17:e6:54:1e:2a:b8:49:8f:32:89:b1:9a:
ba:db:a6:d2:43:4a:f5:66:49:43:06:ca:f7:ad:08:d6:05:76:
41:16:5a:a2:d0:ad:26:f3:67:84:1d:d5:a6:0e:98:bb:8c:4c:
60:34:cd:6d:e3:60:c3:16:e0:9e:4f:72:37:61:91:b9:ec:80:
e6:a2:af:1c:59:bb:fd:53:0d:50:0d:46:08:8c:10:e7:e7:e4:
13:e6:92:58:12:ac:ff:ed:41:3b:9b:f7:02:00:4d:5d:c6:05:
0b:27:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:22:20 2024 by rpki-client on console-ams.rpki-client.org