Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/bbxkx7W0kI3mkMR-y27XBWdszbw.roa
File: bbxkx7W0kI3mkMR-y27XBWdszbw.roa (raw, json)
Hash identifier: X6SL/DhbmTI+ftYOGu9o4xpNvfdyFG5cYWlI7S5CKZg=
Subject key identifier: 6D:BC:64:C7:B5:B4:90:8D:E6:90:C4:7E:CB:6E:D7:05:67:6C:CD:BC
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 018658D1D7E86C83BEC168C3F0481111F3B7
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/bbxkx7W0kI3mkMR-y27XBWdszbw.roa
Signing time: Thu 16 Feb 2023 06:03:12 +0000
ROA not before: Thu 16 Feb 2023 06:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42521
IP address blocks: 37.230.201.0/24 maxlen: 24
212.86.99.0/24 maxlen: 24
2a13:b200::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:d1:d7:e8:6c:83:be:c1:68:c3:f0:48:11:11:f3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Feb 16 06:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dbc64c7b5b4908de690c47ecb6ed705676ccdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:c1:b7:07:0b:53:a0:ee:7e:49:e1:0f:30:
f3:9d:51:d4:c2:8f:23:60:46:7f:a4:3b:d4:11:7e:
04:a3:a1:92:41:8a:b3:c3:ce:0e:e6:a9:eb:df:d1:
f9:1c:5f:8d:77:3f:27:c7:1e:fe:05:35:51:2c:d8:
9e:6e:51:01:9d:72:4f:80:3b:a0:e7:bf:c3:a2:21:
9b:6c:50:a6:1c:2b:b9:ba:65:cc:35:b0:32:a1:91:
4c:f3:b5:da:31:c5:31:00:95:a8:98:2c:21:1b:86:
e8:84:c2:4f:fa:ff:7a:4d:82:99:3a:32:aa:b0:c4:
f9:70:ea:25:13:88:ea:f1:3a:f3:72:b4:2e:60:a7:
61:63:ce:17:ad:3d:c3:e2:5e:8d:01:a3:56:27:5b:
53:8d:65:20:b4:cc:1b:2a:8a:f4:df:63:e7:c5:ce:
47:18:e0:37:cd:36:44:11:87:c1:d4:5e:50:84:5a:
f3:18:f1:39:ff:ef:da:f0:44:a9:c7:7e:17:a0:59:
a1:e7:0d:ee:74:87:9c:9e:a6:d4:44:67:eb:f9:69:
14:82:49:1c:1e:53:ff:a1:ec:3e:7f:f9:48:57:ec:
0d:7e:54:4d:e8:9c:3e:8d:58:6f:48:d1:c9:1d:5e:
ac:6b:b6:f0:6d:7a:e0:3c:d2:56:33:31:2a:c4:d4:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:64:C7:B5:B4:90:8D:E6:90:C4:7E:CB:6E:D7:05:67:6C:CD:BC
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/bbxkx7W0kI3mkMR-y27XBWdszbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.201.0/24
212.86.99.0/24
IPv6:
2a13:b200::/29
Signature Algorithm: sha256WithRSAEncryption
13:55:b8:30:ce:59:37:2f:95:3c:c5:7b:d4:74:0e:11:09:18:
7e:81:80:6f:45:2d:48:f5:79:db:a0:3c:b9:46:a9:f7:f6:98:
93:dd:f8:a7:37:50:37:58:0e:f9:61:32:95:17:de:05:5c:9b:
eb:89:27:d5:ef:42:40:65:85:b9:38:13:04:77:72:bf:e4:13:
d0:b4:dd:5a:6b:0c:e7:5c:bd:27:b9:2b:c8:e8:64:60:0a:80:
fd:7a:5e:ac:ba:fa:a0:c8:0e:4c:1c:18:16:ad:87:1b:8f:83:
3e:3f:2f:a2:a9:40:bd:0f:05:31:aa:8c:eb:ab:59:72:4b:de:
28:8e:29:f0:5e:9b:39:53:66:d1:a6:92:c7:f9:34:35:7b:c3:
dc:8a:14:e6:53:4c:7f:9b:99:0b:cf:0a:62:e3:e2:04:55:0f:
5b:6f:e1:b7:57:01:31:da:58:e3:4b:65:ba:bc:81:f1:8f:14:
aa:b8:92:68:45:e9:a1:cc:7d:12:29:8f:0f:06:60:59:34:71:
ab:fd:c8:af:61:e9:66:8f:aa:5d:2e:66:fb:d7:38:f7:3e:b2:
83:ef:10:c7:f0:c4:19:65:8e:6a:d7:0c:c5:85:3d:d8:15:b1:
bb:8c:a7:d4:15:4b:7f:44:bf:9f:fd:0b:8f:ec:4f:b5:17:93:
d9:ea:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org