Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/BVxrRqzlR7KdyKgmfIeBxMSuFuo.roa
File: BVxrRqzlR7KdyKgmfIeBxMSuFuo.roa (raw, json)
Hash identifier: DqtysvjmvujsUhiKH9ip7T+jpDt6iGc6tTACIrz9pGg=
Subject key identifier: 05:5C:6B:46:AC:E5:47:B2:9D:C8:A8:26:7C:87:81:C4:C4:AE:16:EA
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01857067423DA8741A2FD9556E16DA9E3399
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/BVxrRqzlR7KdyKgmfIeBxMSuFuo.roa
Signing time: Mon 02 Jan 2023 02:54:53 +0000
ROA not before: Mon 02 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6696
IP address blocks: 91.216.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:42:3d:a8:74:1a:2f:d9:55:6e:16:da:9e:33:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jan 2 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=055c6b46ace547b29dc8a8267c8781c4c4ae16ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:86:28:c1:25:4a:50:a8:36:ad:76:45:05:dd:
5f:49:8b:cc:fb:40:75:ee:ee:fc:5e:c9:63:9e:16:
ad:64:a2:db:3c:bc:46:37:11:df:18:49:0d:55:a9:
51:57:16:65:f2:d6:df:0f:2b:a5:05:7d:a6:f1:bc:
58:60:dc:ca:cf:0d:ec:b4:7b:8d:3e:38:40:63:ac:
f7:90:7c:eb:92:53:18:5a:13:8f:eb:31:f7:c0:72:
27:c8:80:7b:45:a6:78:64:1f:1f:9c:bc:be:0f:d1:
91:1f:1a:78:4c:5e:c7:9d:31:1b:ed:11:2d:9a:1d:
62:c6:8c:39:3d:fe:87:36:d2:57:7f:c4:4e:62:01:
c6:65:fb:18:cc:0e:4f:61:d3:ea:63:45:46:dc:a4:
a2:29:ab:68:a5:61:9d:0d:04:6c:8c:4d:e2:09:15:
65:67:d0:51:ff:5b:b9:63:2e:46:b6:0b:6c:bf:fe:
22:89:1c:7c:5d:72:26:42:75:37:6e:c4:3b:12:f9:
34:93:b5:47:d5:29:a5:18:9b:99:aa:10:61:ce:b4:
d9:c8:48:bb:9a:a8:3f:64:02:2a:c2:28:74:b1:c3:
63:39:d4:9a:82:20:9a:31:1c:d6:0f:46:c4:57:e8:
26:8b:c5:98:ff:f7:87:16:b5:ec:3b:39:4b:c6:04:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:6B:46:AC:E5:47:B2:9D:C8:A8:26:7C:87:81:C4:C4:AE:16:EA
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/BVxrRqzlR7KdyKgmfIeBxMSuFuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
70:65:69:ab:21:d9:24:4b:0f:4f:99:f5:38:f5:e4:dd:8b:a9:
d4:15:34:6e:51:24:aa:a7:fb:69:11:50:3a:bf:d7:a1:20:ef:
83:db:b5:6c:cb:4f:53:84:ca:bc:72:2b:7d:26:51:af:12:4c:
09:39:a2:4f:57:e4:ad:77:83:ec:cb:9e:e4:04:ef:f5:46:05:
44:0f:b4:8c:c1:a4:65:98:74:58:5a:ff:da:28:bd:78:7f:0e:
3a:5a:b9:c3:76:35:22:49:c7:a7:d5:11:a0:a2:0b:68:6b:e3:
52:4d:79:05:97:50:f5:09:a4:56:80:32:46:94:34:41:94:8d:
31:a5:8a:ea:97:0d:a5:2d:eb:cb:7d:11:88:61:3f:b0:87:e6:
2c:5f:98:b6:f1:67:45:f4:4c:5c:c0:a6:57:91:ba:bd:18:e6:
d5:01:0f:d9:29:62:d2:c3:7a:e6:cf:18:33:36:31:53:fa:e0:
aa:6d:fb:b0:b1:51:27:bc:5c:cb:e0:75:50:50:a6:98:6e:82:
02:b6:a6:7d:13:3f:b3:90:1e:23:13:50:0d:ac:dc:4e:ed:e2:
54:38:40:6b:65:cc:9f:5e:e0:14:a6:8d:d1:7d:62:10:0d:1f:
46:91:a8:86:0e:98:f5:56:c4:27:82:f3:9c:09:f7:38:e4:73:
a6:47:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org