Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/BjzQ_rVoQnKNR62vhH2bxZohfkk.roa
File: BjzQ_rVoQnKNR62vhH2bxZohfkk.roa (raw, json)
Hash identifier: NxB+N9+ipakTt5wSFwzhukyTTXcwEhHhXIN8IDFNv3w=
Subject key identifier: 06:3C:D0:FE:B5:68:42:72:8D:47:AD:AF:84:7D:9B:C5:9A:21:7E:49
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CE7D951AD561701075DBCBC94B6A3BCC7
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/BjzQ_rVoQnKNR62vhH2bxZohfkk.roa
Signing time: Mon 08 Jan 2024 06:53:48 +0000
ROA not before: Mon 08 Jan 2024 06:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
152.89.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 21:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:d9:51:ad:56:17:01:07:5d:bc:bc:94:b6:a3:bc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 8 06:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063cd0feb56842728d47adaf847d9bc59a217e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:72:7c:ae:04:e6:2e:79:ba:64:40:63:53:
5b:d8:e9:a8:b2:53:29:94:7c:78:ec:52:0c:29:53:
70:ec:e8:60:03:f1:c9:40:80:fc:06:6c:e8:85:34:
01:ba:61:0e:44:7c:82:09:88:88:f5:c5:be:e0:a2:
29:e4:b9:95:55:b5:a2:48:fe:b4:d7:a7:72:c3:a1:
aa:5d:a1:fc:49:b2:cd:55:c8:01:de:ac:62:30:ae:
4c:02:31:62:9e:a0:be:bc:33:cb:55:32:f8:c0:c8:
26:56:dd:4a:ae:5d:0b:79:d6:5d:db:36:6f:05:ee:
74:f4:7f:96:38:6f:e6:2d:bf:f3:82:27:de:ea:f6:
c1:09:14:5e:b4:b6:b7:7e:b6:2b:f8:2f:96:65:5e:
cd:23:6f:17:60:b1:65:33:74:a5:0e:2f:ec:6f:9a:
67:ce:ae:e0:1b:24:8a:93:ad:8e:2c:e8:92:34:3b:
46:fb:43:08:33:42:d7:63:fd:cc:32:82:56:2f:7d:
dc:c5:6c:84:da:96:77:cd:d0:1e:a5:a6:dc:08:b5:
81:1f:ee:02:bc:47:a6:8c:8b:2c:0d:d2:b9:b3:1c:
77:79:bb:1e:0d:e4:87:b8:39:1d:34:b9:0b:42:46:
56:f5:1b:ff:02:f3:da:77:3a:86:16:4d:72:4f:05:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:D0:FE:B5:68:42:72:8D:47:AD:AF:84:7D:9B:C5:9A:21:7E:49
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/BjzQ_rVoQnKNR62vhH2bxZohfkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.195.0/24
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
22:33:d4:a9:a7:0c:82:fc:14:37:11:30:63:66:e1:0a:9a:d4:
03:a3:df:98:2a:56:7f:ab:75:0a:c5:21:1a:8a:42:2d:74:ce:
d7:ee:80:88:bf:bd:c8:b3:06:a8:9f:26:ba:3c:eb:9f:d9:1e:
b1:82:4f:0e:b5:38:8a:c1:ae:40:52:d6:2e:e6:0e:58:9c:88:
06:9b:8f:c5:b7:0c:71:0e:5d:48:ef:47:76:b8:2b:17:c9:60:
d4:8a:31:0b:a7:30:08:42:04:20:96:4e:73:4a:fc:2b:47:67:
7e:68:4f:ef:10:10:22:ea:f2:ad:7d:41:5c:2f:76:e7:c6:b4:
af:5d:fe:e7:35:a1:e4:45:0f:f4:f1:5d:13:b4:dc:15:45:a5:
42:09:b4:f6:7a:13:d3:39:d6:f6:8a:8e:e3:3c:3a:67:e7:be:
f5:81:fa:f5:cd:54:8f:de:70:7c:36:1a:c4:ae:1e:7d:f5:0a:
83:ee:27:3c:12:a7:8d:73:53:54:c8:a4:c0:56:5d:fc:ed:50:
3a:61:7e:b6:29:96:a9:67:82:2e:40:5d:b0:4d:84:ad:e5:50:
49:4f:67:76:f6:b3:96:e1:4d:9e:0c:14:24:4f:0a:07:46:fc:
e3:28:2d:33:a1:23:52:19:6e:5a:30:73:7f:04:9b:68:de:8d:
e8:f1:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 00:47:27 2024 by rpki-client on console-ams.rpki-client.org