Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/BNPtwDzN8CZ02dzXWpnX3apU4kw.roa
File: BNPtwDzN8CZ02dzXWpnX3apU4kw.roa (raw, json)
Hash identifier: JoW6iVNWt3BvLWl3ZNQfEFrcCthc4phpyvzgmuZEiXY=
Subject key identifier: 04:D3:ED:C0:3C:CD:F0:26:74:D9:DC:D7:5A:99:D7:DD:AA:54:E2:4C
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 018CCA99B744E6BDBACF5F22BC599A142780
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/BNPtwDzN8CZ02dzXWpnX3apU4kw.roa
Signing time: Tue 02 Jan 2024 14:35:20 +0000
ROA not before: Tue 02 Jan 2024 14:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 151.236.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 08:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:b7:44:e6:bd:ba:cf:5f:22:bc:59:9a:14:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 2 14:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04d3edc03ccdf02674d9dcd75a99d7ddaa54e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:ab:65:22:fe:71:5f:cd:47:1e:2e:8b:28:
d6:9a:e1:60:d1:a2:b3:1c:ca:85:50:19:07:c7:8c:
e1:ed:25:59:95:22:8e:4f:e2:c7:c5:46:7a:a0:6e:
c6:44:a0:53:1d:6f:63:97:19:26:db:c1:fd:24:2b:
af:07:06:93:b8:33:87:c4:33:7e:ee:0c:27:f9:b9:
93:c3:b2:7a:f9:c9:ea:b0:87:97:3d:10:4c:e8:97:
ed:c9:b7:73:b5:21:24:44:ce:df:a0:70:ad:58:b6:
c2:c7:77:bf:b0:95:0d:f5:c5:48:1c:f8:a5:28:5d:
fb:8f:c5:58:fa:98:98:ff:16:fe:62:2f:46:35:06:
de:c6:3d:fb:a5:bd:93:ce:a8:e1:4b:5f:41:70:0f:
8d:b2:64:d6:13:30:e1:aa:da:d7:60:f5:74:e9:1f:
88:b0:60:ed:af:80:aa:a6:af:0c:ef:dd:66:0b:8d:
bf:9d:6c:6c:6b:3b:bd:55:b7:b6:59:ca:66:0d:5c:
14:ec:66:2f:7c:bf:8d:a3:75:41:aa:99:4a:62:61:
c4:1f:27:b0:1d:36:74:b4:bd:47:53:32:bc:ce:d7:
a6:e8:40:31:64:01:2a:60:6c:60:17:80:fc:fd:e1:
05:64:bb:76:05:70:c1:e0:dd:35:54:df:9c:f9:c2:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:ED:C0:3C:CD:F0:26:74:D9:DC:D7:5A:99:D7:DD:AA:54:E2:4C
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/BNPtwDzN8CZ02dzXWpnX3apU4kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.93.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0a:46:ff:07:b3:29:9a:5d:13:1c:19:7f:c0:7b:73:bd:e6:
eb:fc:3a:22:ba:05:88:24:0c:3c:b4:54:4c:44:59:01:72:51:
ed:81:e5:1f:a9:87:b6:49:8b:ef:46:eb:4a:22:78:e0:8a:c3:
ba:b1:dd:e7:d8:d1:f3:01:09:0e:c2:af:01:67:eb:69:53:45:
9f:1b:b4:bb:9c:7d:63:97:f1:76:d2:06:7f:7e:85:87:52:04:
68:e3:b4:3d:78:e9:80:fd:f9:b2:48:70:ea:99:74:46:c3:b7:
4e:f2:3e:5f:4e:77:16:b0:ec:09:3c:ba:c5:51:28:52:8b:08:
47:c0:fd:e3:e1:61:cc:20:a9:79:27:d1:84:d0:3c:ba:37:e9:
d8:4f:25:69:49:42:a2:99:1c:15:5a:23:a5:21:af:3d:72:77:
15:05:29:7d:15:c9:39:fd:e1:19:95:10:bd:5c:7d:92:c5:1e:
b2:25:62:49:4b:f8:1c:b1:77:40:c1:a1:9c:f7:01:2d:05:24:
16:c1:d5:51:ae:05:0b:9a:f8:e8:b8:3c:36:da:dd:66:8e:a0:
4b:a9:11:6d:2d:46:af:0d:a3:6b:03:5b:b3:2b:74:68:f0:ef:
d7:d5:58:55:31:54:f4:a3:4d:b1:33:da:f3:30:34:8d:2e:5a:
b8:52:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:09 2025 by rpki-client