Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/8bfqszdFUBXiqi0PHzr5fnz9kH8.roa
File: 8bfqszdFUBXiqi0PHzr5fnz9kH8.roa (raw, json)
Hash identifier: Pw815+ma3jEXdhiXl2E0hDhVGEqmyHpH7fdpSoVVwsY=
Subject key identifier: F1:B7:EA:B3:37:45:50:15:E2:AA:2D:0F:1F:3A:F9:7E:7C:FD:90:7F
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 01856D25F5212566E7C159D8068018871DF0
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/8bfqszdFUBXiqi0PHzr5fnz9kH8.roa
Signing time: Sun 01 Jan 2023 11:44:42 +0000
ROA not before: Sun 01 Jan 2023 11:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200852
IP address blocks: 185.93.199.0/24 maxlen: 24
185.93.196.0/22 maxlen: 22
185.93.196.0/23 maxlen: 23
185.93.196.0/24 maxlen: 24
185.93.197.0/24 maxlen: 24
185.93.198.0/23 maxlen: 23
185.93.198.0/24 maxlen: 24
2a02:ea00::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Oct 2023 05:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:25:f5:21:25:66:e7:c1:59:d8:06:80:18:87:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jan 1 11:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1b7eab337455015e2aa2d0f1f3af97e7cfd907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:76:16:59:b6:0e:6c:43:e2:6c:48:bd:fb:
ec:ee:98:73:cf:d1:c5:82:be:98:67:a6:9f:64:64:
3f:b2:75:e3:d6:23:d2:2a:cc:b1:11:d4:39:68:ae:
8b:28:bb:34:2b:ba:6a:6f:d9:30:2d:59:67:85:be:
56:db:3b:45:bc:cc:ed:5d:10:68:4f:84:5c:30:53:
59:20:13:bd:fd:76:03:ed:33:8c:ad:14:1b:0c:6d:
d1:25:ad:d8:d1:f2:97:bb:df:a8:ee:99:8c:64:be:
bc:89:8c:bb:92:47:69:b6:52:84:bf:50:32:96:14:
9e:8e:57:3b:40:19:5a:99:42:8d:f0:68:9f:56:d4:
5a:38:80:a8:fa:42:b3:03:34:6d:21:78:a6:bc:12:
bb:f5:03:01:87:b0:10:11:89:d6:dd:ff:a0:3c:64:
03:ae:52:f9:50:1a:ff:ae:f8:4e:61:90:7f:6e:e1:
28:92:15:bf:06:29:06:be:4b:11:9f:78:27:ad:0c:
9b:7b:14:d6:34:ca:59:7c:dd:f5:6d:2e:64:c6:66:
db:96:64:27:e4:ed:e8:11:b4:e6:37:cd:07:3b:42:
db:37:d5:b8:f4:87:82:d5:f5:e1:ff:60:49:86:23:
1d:c8:6f:86:25:a2:f0:96:12:c7:dc:16:61:8b:be:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B7:EA:B3:37:45:50:15:E2:AA:2D:0F:1F:3A:F9:7E:7C:FD:90:7F
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/8bfqszdFUBXiqi0PHzr5fnz9kH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.196.0/22
IPv6:
2a02:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:99:c6:52:76:a7:eb:ef:a4:30:76:84:68:c3:f1:24:3a:47:
b8:8e:d8:53:c4:76:49:ad:75:ea:e5:71:51:26:06:96:f4:22:
13:9f:d4:0d:cb:64:ca:9c:1d:81:70:82:47:50:e6:a0:a9:3a:
5a:d6:49:a1:58:e7:75:7b:5a:33:42:84:43:7b:a5:b1:26:bd:
a6:75:ca:9a:3d:19:69:dd:10:20:bd:a9:5b:9e:46:25:d1:79:
f0:24:68:b0:99:95:19:f4:3d:76:87:11:95:0f:a6:1b:f9:b1:
15:79:c3:36:e2:22:50:8a:22:4d:3d:b8:5f:6a:82:74:7e:47:
53:2f:ef:0c:f0:66:3f:85:e0:a7:61:b3:82:1e:0c:c4:87:d3:
7b:5e:fc:07:76:6f:e3:5d:7e:17:ca:6f:e9:fc:71:da:7f:51:
f3:3f:18:1a:33:c0:eb:f7:e7:59:41:82:a3:67:d3:39:f6:68:
83:cf:18:81:fd:26:62:69:dc:e6:31:17:42:73:c2:89:92:d2:
93:45:78:f4:e7:f2:0f:25:87:49:0c:e5:3c:9f:d8:30:92:fb:
71:45:7b:52:97:8d:1e:63:41:72:01:d7:9f:ae:56:a4:dd:46:
b5:03:52:bb:fd:68:87:dd:b9:a1:1b:04:6a:c6:23:c3:3b:2c:
f5:0f:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org