Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BJK2xqFaDcNifbE7nJVsJAkWu5M.roa
File: BJK2xqFaDcNifbE7nJVsJAkWu5M.roa (raw, json)
Hash identifier: pVM72pwNnfQoHvnFauYBqZiHiqc1SKBuMi7f+4pgs9E=
Subject key identifier: 04:92:B6:C6:A1:5A:0D:C3:62:7D:B1:3B:9C:95:6C:24:09:16:BB:93
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01898E034929381D59E40577BB41B015089F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BJK2xqFaDcNifbE7nJVsJAkWu5M.roa
Signing time: Tue 25 Jul 2023 17:05:27 +0000
ROA not before: Tue 25 Jul 2023 17:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:03:49:29:38:1d:59:e4:05:77:bb:41:b0:15:08:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 25 17:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0492b6c6a15a0dc3627db13b9c956c240916bb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:04:01:05:8b:88:bc:0c:2c:d8:54:7b:2b:
1a:0a:de:63:01:43:ce:45:ae:62:0e:66:5c:3d:df:
c7:e1:bb:3c:52:19:1e:7f:8b:de:d3:de:37:4d:d1:
a5:cf:73:47:64:63:5c:12:2f:c9:be:cf:80:08:68:
38:39:af:48:ec:5e:bb:ca:a8:78:06:d4:4d:4a:2e:
30:73:cc:92:51:63:f3:6b:da:70:58:f1:fc:99:d5:
3b:be:f0:9f:d0:84:49:eb:c5:5c:5c:f3:59:fc:7c:
04:21:d8:2a:b6:74:b1:04:33:61:d8:5c:74:c7:24:
59:1a:91:eb:7e:a3:00:1b:00:a4:f6:32:d6:92:9f:
1c:d6:7e:7c:e6:0a:70:c7:92:3c:54:65:01:85:63:
9f:2f:c8:aa:7a:91:8d:6a:a1:f4:1f:f6:d9:f7:6f:
f6:0f:0e:7d:02:53:9f:12:17:f8:c7:6f:1e:5a:6c:
86:f8:71:e7:fa:30:e4:56:dc:14:8e:67:2a:68:af:
5f:8b:56:12:ba:56:c7:67:ce:7f:67:e9:af:56:8e:
7a:6b:50:7a:75:1a:f0:e6:ac:78:1a:a0:5c:ce:5d:
7c:e5:31:1e:de:d1:38:39:ef:dd:8b:93:3d:bf:3c:
a8:26:38:d3:48:31:ac:65:19:63:fb:e2:18:37:61:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:B6:C6:A1:5A:0D:C3:62:7D:B1:3B:9C:95:6C:24:09:16:BB:93
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BJK2xqFaDcNifbE7nJVsJAkWu5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
31:51:5c:61:d6:4a:97:34:6f:25:af:79:9a:5f:12:08:4b:dc:
a8:bb:7d:43:5b:ff:0f:39:23:35:f9:27:e7:f1:68:43:fa:4d:
3f:66:93:ed:ea:75:09:d3:ea:bc:93:f2:bd:0d:90:f0:82:d3:
a5:a8:7e:03:fd:2d:a2:bc:2e:21:12:48:d2:6b:16:ca:af:33:
dc:b2:7a:8e:da:d0:fe:d7:dc:c7:b8:0d:5c:5d:99:7f:4d:ba:
19:4e:a5:73:e3:07:fa:1c:72:95:6c:bd:6c:c6:b5:47:25:e9:
50:42:b9:9e:27:3a:59:d4:22:c2:6f:df:93:81:87:36:8c:27:
1c:96:00:f1:04:c6:5d:73:ce:39:fe:db:d1:7c:a9:19:3d:70:
d7:d6:77:e8:40:54:b2:d2:74:2d:29:6d:d7:56:e1:1f:74:4e:
af:0a:4a:19:3f:91:71:14:ad:02:70:37:2f:ce:17:20:55:cd:
2a:ae:28:f9:aa:93:32:64:ce:00:8c:16:0f:e8:a0:4f:bb:de:
68:ec:c9:b4:68:27:b6:98:4d:24:62:4f:05:3e:fe:d7:a4:e0:
36:f0:9a:de:74:dd:6d:fd:92:07:f4:b7:7b:a3:ef:c9:aa:ef:
68:7b:0a:90:0f:c1:10:f6:b9:21:ab:7f:ee:3f:b7:7b:29:de:
75:f1:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 14:59:15 2023 by rpki-client on console-ams.rpki-client.org