Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/BoDAl_pZlqKuqI_oAhzF6_09Qdk.roa
File: BoDAl_pZlqKuqI_oAhzF6_09Qdk.roa (raw, json)
Hash identifier: mS9+fnpZmIrIePPV5o/thoJ6hvUYcZcFe5SHe9JMP8U=
Subject key identifier: 06:80:C0:97:FA:59:96:A2:AE:A8:8F:E8:02:1C:C5:EB:FD:3D:41:D9
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 01909DAA2F390C4A5C2F34D877F8FB70D5EA
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/BoDAl_pZlqKuqI_oAhzF6_09Qdk.roa
Signing time: Wed 10 Jul 2024 17:21:34 +0000
ROA not before: Wed 10 Jul 2024 17:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 286756
IP address blocks: 145.64.240.0/22 maxlen: 22
145.64.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Jul 2024 17:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:aa:2f:39:0c:4a:5c:2f:34:d8:77:f8:fb:70:d5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Jul 10 17:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0680c097fa5996a2aea88fe8021cc5ebfd3d41d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:63:9a:9a:b7:bb:12:c9:91:3e:a9:00:97:
5e:30:09:c2:03:ee:3c:66:e0:07:6e:82:54:59:0c:
13:34:40:1a:5a:06:23:69:be:93:b2:bb:93:22:3d:
cc:7b:f1:d1:e4:43:32:00:ae:43:9f:fe:f2:ec:d1:
4f:10:b7:e1:0a:04:8c:04:44:43:dd:57:7a:9f:f0:
f6:05:6e:98:e1:d0:6e:36:ed:80:41:e7:fb:13:64:
4c:9e:69:4c:c4:f8:6f:92:08:7e:00:74:e2:51:e2:
69:b4:2d:b3:74:53:2c:7b:36:f9:9e:21:75:32:00:
50:90:f4:81:37:0e:65:da:c7:ba:7b:02:36:a8:7c:
bd:d4:0f:94:04:cf:38:11:c0:0d:fa:59:c6:d5:d1:
09:5b:83:be:62:88:78:56:9e:84:98:77:53:29:ab:
4c:d1:4a:a8:e9:c5:e5:d5:44:83:b8:32:28:46:24:
5c:4e:1e:44:01:e0:50:d8:ae:c7:26:cb:df:8d:c5:
b7:b6:7c:46:78:8e:2c:86:9f:7b:2d:a0:ec:97:5b:
be:61:64:8f:89:f8:87:32:4d:9f:ae:b5:6d:5b:a6:
62:ae:a8:00:95:30:db:54:03:c7:dd:44:38:37:64:
bb:54:11:cc:9e:9f:21:59:b0:c5:55:1c:b7:a8:7e:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:C0:97:FA:59:96:A2:AE:A8:8F:E8:02:1C:C5:EB:FD:3D:41:D9
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/BoDAl_pZlqKuqI_oAhzF6_09Qdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.64.240.0/21
Signature Algorithm: sha256WithRSAEncryption
51:4a:14:02:ef:b4:c0:8e:ca:89:ff:1e:81:e1:cd:22:d4:83:
02:19:74:46:65:3f:bb:8a:80:bc:af:33:f8:e3:ac:7c:0d:fc:
b9:22:0d:55:84:21:49:82:e0:38:98:19:10:61:0a:94:ed:a5:
b0:ee:89:26:ee:17:77:77:b8:a7:69:04:75:79:de:4e:91:e8:
fc:37:c8:fe:a0:81:97:05:59:a8:d0:6d:21:9e:d6:31:c4:f4:
20:31:42:c8:69:43:07:70:16:77:a6:bc:8d:eb:a8:fa:92:99:
14:78:86:14:51:87:7f:72:bd:e1:1c:27:96:4c:96:8b:c4:83:
86:03:d8:47:8b:5c:94:29:90:5a:5e:84:5a:c1:0f:06:41:b0:
a5:90:f8:58:99:04:c7:b8:cf:15:db:94:43:29:e5:82:93:f2:
20:9f:42:47:04:52:39:a9:50:58:67:32:f4:4f:c7:70:e7:22:
1b:91:83:b8:0c:62:9f:cc:d1:d2:13:0d:75:b3:44:a6:f4:45:
aa:5c:2a:e0:a0:61:e9:bb:b5:e4:e2:e6:db:a3:bc:3c:b2:60:
d6:a0:9e:a2:53:8f:d0:a2:9e:b7:ec:c3:b4:d0:95:31:ce:8c:
88:18:9b:d4:a3:bc:e8:d0:98:e0:7a:36:a5:46:72:92:3e:d0:
d9:a3:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:12:49 2025 by rpki-client