Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/BW-nLP6oaC6sVoFSQncGywW6Nb0.roa
File: BW-nLP6oaC6sVoFSQncGywW6Nb0.roa (raw, json)
Hash identifier: BlTKCFtRkM4nuvw6xVr2ZeizK8NlCElArWA4hsHkrQs=
Subject key identifier: 05:6F:A7:2C:FE:A8:68:2E:AC:56:81:52:42:77:06:CB:05:BA:35:BD
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 01856DE6479B667033478F23FD09B31DA4AC
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/BW-nLP6oaC6sVoFSQncGywW6Nb0.roa
Signing time: Sun 01 Jan 2023 15:14:46 +0000
ROA not before: Sun 01 Jan 2023 15:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62383
IP address blocks: 188.210.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:47:9b:66:70:33:47:8f:23:fd:09:b3:1d:a4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 15:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056fa72cfea8682eac568152427706cb05ba35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:c9:10:c9:c5:57:e4:63:61:f2:70:be:8f:
ad:5a:58:5e:87:47:5e:a1:3e:9f:7a:56:19:75:27:
24:18:ac:79:b0:60:59:38:af:07:dc:cf:5b:d0:27:
45:de:7c:3e:b2:32:c1:45:f4:c4:6f:b5:4d:a1:2b:
81:85:1f:db:a3:6f:ce:48:69:57:59:7d:12:dc:e9:
9a:83:3f:56:82:71:1c:2d:be:a5:1d:5e:d2:b9:07:
24:e9:a4:e6:f9:50:fe:ee:aa:fa:e4:76:d1:31:03:
b5:31:00:30:fd:80:37:8a:a2:d0:21:42:3d:92:d5:
ab:a6:34:2c:d6:1b:a8:55:b5:bb:26:38:84:f5:58:
31:df:7b:08:5b:4a:64:21:0c:6c:24:72:10:53:54:
21:19:44:36:e0:b6:4e:e7:45:0b:57:53:e8:9b:e4:
19:a9:36:c2:d3:64:8a:94:c2:58:10:fc:a1:79:58:
ee:a1:09:1a:2d:3f:d2:25:02:38:e7:58:91:91:4e:
34:fe:73:5a:33:88:56:03:f5:4d:76:7a:34:86:70:
c4:03:44:95:96:cd:ac:6d:72:e7:5d:dc:47:38:9a:
16:b0:5d:0c:ea:a4:06:8d:d4:cb:44:d7:32:a9:e4:
03:a7:03:b4:eb:31:d4:15:94:f9:40:f2:3b:9b:09:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:A7:2C:FE:A8:68:2E:AC:56:81:52:42:77:06:CB:05:BA:35:BD
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/BW-nLP6oaC6sVoFSQncGywW6Nb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.92.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ab:ea:b9:5a:af:8e:b2:60:63:33:da:6f:7a:1a:40:72:48:
dc:4a:02:68:7e:a1:c6:b7:a4:33:06:eb:86:68:1f:e6:18:6c:
45:0f:ae:1b:25:d8:49:35:84:74:f3:9b:f9:73:16:37:e6:ec:
3c:cb:d0:c6:68:af:98:3f:06:9b:0a:a9:89:02:a0:56:22:07:
86:af:cd:4c:06:23:bd:d4:3a:86:6f:cf:c6:3e:bf:c5:d9:f3:
1c:ac:bb:bf:c0:46:3e:12:1d:0c:23:15:b0:b9:b7:51:49:71:
2b:68:40:86:9e:fc:2c:ae:ff:7d:4b:63:22:b6:00:d1:02:90:
04:ef:dc:d5:17:98:36:52:6e:c1:e9:4d:3b:fe:02:01:12:49:
c9:ec:4c:d4:d3:58:0e:80:4f:c4:8a:62:a9:1b:79:13:97:da:
b6:7b:91:c2:92:55:de:b8:e4:27:76:f0:4e:9f:9c:26:3e:c6:
a1:74:5a:1d:0c:c7:a9:bf:bb:7e:dc:cc:55:0f:4c:86:7e:2f:
2e:51:2e:ed:46:13:88:af:3c:d7:aa:b2:7f:d1:eb:35:15:a8:
5a:05:4a:8a:87:14:87:97:a6:9c:4f:51:b1:c3:b7:41:01:9d:
40:78:7f:98:9c:1f:1f:4c:82:a0:8f:e6:17:c3:d2:c7:76:44:
36:5c:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:58 2024 by rpki-client on console.sobornost.net