Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/bhGcQu8Gv-jrUIHhdkSAUxgwLoM.roa
File: bhGcQu8Gv-jrUIHhdkSAUxgwLoM.roa (raw, json)
Hash identifier: E3heiDpsealbxsmbraP2S+jeTshE1HPftJHSRfMcnRQ=
Subject key identifier: 6E:11:9C:42:EF:06:BF:E8:EB:50:81:E1:76:44:80:53:18:30:2E:83
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018CF72C3C98A1DD8F7E4E1EA5596242B6E8
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/bhGcQu8Gv-jrUIHhdkSAUxgwLoM.roa
Signing time: Thu 11 Jan 2024 06:18:40 +0000
ROA not before: Thu 11 Jan 2024 06:18:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 152.89.28.0/22 maxlen: 22
193.135.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 15:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:2c:3c:98:a1:dd:8f:7e:4e:1e:a5:59:62:42:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 11 06:18:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e119c42ef06bfe8eb5081e17644805318302e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:9e:c2:76:83:77:05:52:31:53:9c:d5:d8:
b3:73:4c:5d:ce:94:db:64:90:90:d1:90:d9:11:c2:
cc:9d:4f:0c:1d:bb:71:a8:37:dc:a2:f1:be:9d:37:
ce:9c:01:19:2d:5e:bf:28:61:20:fb:a7:e6:29:86:
60:45:bc:75:2b:d9:6b:1e:9b:3c:8a:11:94:c9:49:
36:6b:58:ff:e9:26:f1:ac:d8:78:00:49:d6:14:42:
84:c2:36:ee:a4:18:04:a7:3f:a3:e5:55:29:ef:25:
74:1c:13:b6:29:b5:03:9d:6d:a2:1f:e7:2e:f2:2f:
69:64:30:b6:03:b7:37:76:18:ec:13:b2:12:22:85:
d8:ec:bf:47:33:8b:ff:70:4c:cc:dc:25:93:50:6d:
ab:9f:3e:ef:4c:0b:66:38:2f:26:29:49:8c:1e:5d:
01:a3:53:4d:41:a5:9b:e6:ec:34:4d:78:04:07:96:
b1:2d:5c:22:b5:aa:55:ac:98:fd:d5:1e:9e:c1:ad:
8d:ba:05:20:51:0a:a0:83:a7:c5:36:8f:6e:ad:23:
ea:a9:90:79:19:53:82:81:fd:39:33:6c:01:15:e7:
e5:03:f9:0c:79:dd:db:94:50:ad:1e:3f:6a:41:ae:
74:c0:69:d1:e2:d2:20:7c:46:ff:cc:02:42:45:db:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:11:9C:42:EF:06:BF:E8:EB:50:81:E1:76:44:80:53:18:30:2E:83
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/bhGcQu8Gv-jrUIHhdkSAUxgwLoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
40:51:72:f3:7e:48:9f:5d:9d:03:95:0f:52:3e:c3:18:3a:9b:
cd:12:4a:32:54:a7:0b:7f:ce:2b:76:5d:58:a5:c4:f3:5f:c7:
58:5d:94:45:49:2e:8a:00:f4:cf:2f:75:60:88:e7:f7:86:fe:
74:03:fd:66:79:69:8a:32:9a:d6:1c:de:26:c4:62:79:34:07:
30:e9:4b:b0:05:a3:3c:b9:0b:59:1a:10:27:68:06:a7:f1:93:
29:f1:7f:87:09:11:51:c3:19:73:2d:46:a9:b1:b4:74:f1:d8:
08:aa:74:71:dd:4c:f5:1c:f5:61:a7:63:14:b9:97:b3:b0:7a:
34:4b:66:18:9f:0f:4e:f5:59:55:17:67:76:ca:02:40:0a:af:
12:e2:70:73:c1:5f:d1:a2:85:8f:ef:2c:f8:c8:c8:d3:74:70:
48:07:64:42:11:76:35:67:da:c1:08:0c:e0:48:0a:48:45:cf:
33:c1:5e:5a:4c:49:96:b3:c0:fb:2c:dd:ef:c2:fc:b5:e0:03:
b8:4c:14:27:cc:e7:b9:95:f8:31:40:c2:71:78:7a:72:c4:83:
d1:6a:18:ad:6a:1e:53:6e:7c:69:52:a9:24:83:d8:0a:14:41:
56:65:a4:f8:31:fe:a3:3b:ab:4f:d7:e1:90:92:12:96:e4:00:
db:e8:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:10 2025 by rpki-client