Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/BMCDiQaPBlANfVuSNXByoaOU0wQ.roa
File: BMCDiQaPBlANfVuSNXByoaOU0wQ.roa (raw, json)
Hash identifier: ercbFfNFPd9Xq3W/LJYKcYjn/cnwbMltpym9Dwx1TRU=
Subject key identifier: 04:C0:83:89:06:8F:06:50:0D:7D:5B:92:35:70:72:A1:A3:94:D3:04
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 0186BC9361B7DE911C484AE68FBE863B2C56
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/BMCDiQaPBlANfVuSNXByoaOU0wQ.roa
Signing time: Tue 07 Mar 2023 14:57:00 +0000
ROA not before: Tue 07 Mar 2023 14:57:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24951
IP address blocks: 185.154.36.0/22 maxlen: 22
185.154.38.0/24 maxlen: 24
195.144.7.0/24 maxlen: 24
212.71.96.0/20 maxlen: 20
217.71.93.0/24 maxlen: 24
212.71.112.0/22 maxlen: 22
212.71.116.0/24 maxlen: 24
212.71.118.0/24 maxlen: 24
212.71.117.0/24 maxlen: 24
212.71.119.0/24 maxlen: 24
212.71.120.0/21 maxlen: 21
217.20.192.0/20 maxlen: 20
217.71.80.0/20 maxlen: 20
217.71.89.0/24 maxlen: 24
2a00:fb00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 08 Mar 2023 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:93:61:b7:de:91:1c:48:4a:e6:8f:be:86:3b:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Mar 7 14:57:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04c08389068f06500d7d5b92357072a1a394d304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:f8:89:f1:3c:8a:43:21:52:c4:68:5c:39:
2f:8a:a3:81:19:ec:8b:52:38:f7:8c:19:fb:bd:7c:
d2:35:14:c6:f7:ee:73:ff:d1:4b:78:f0:46:82:11:
e0:db:12:35:31:6f:38:7d:a5:5a:b4:03:3f:0d:2d:
5f:23:90:39:81:66:d5:07:63:cd:2e:a7:b2:30:f8:
ba:4e:03:ff:9a:cf:05:40:c8:62:1d:14:7c:4d:8d:
85:da:ba:38:d4:6e:44:8c:01:25:a0:f0:04:8c:18:
eb:af:b6:1f:c5:9d:37:96:6c:3e:db:36:9d:6b:48:
c9:7b:fe:d1:9e:fe:8e:f1:9f:00:e0:eb:5f:f8:be:
43:37:a8:23:7f:a9:17:32:16:09:80:35:f1:13:8e:
85:f8:46:cb:73:76:41:43:94:8f:3f:18:99:f6:2c:
ba:f1:3f:d6:70:9a:58:f9:09:c0:1e:e5:7f:ed:cf:
3e:3c:99:2a:d3:df:d7:5a:24:bd:06:de:f1:8e:fe:
5a:66:eb:1d:24:fd:98:82:5e:96:45:d1:c0:c1:f6:
c0:58:09:f9:f0:54:ea:62:a6:00:b2:d3:db:5e:37:
b0:8e:b4:63:18:f4:9f:cc:3c:a6:f7:47:5f:70:95:
1e:8a:24:c8:9b:78:f2:8f:58:8c:af:ea:ac:ad:fc:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:83:89:06:8F:06:50:0D:7D:5B:92:35:70:72:A1:A3:94:D3:04
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/BMCDiQaPBlANfVuSNXByoaOU0wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.36.0/22
195.144.7.0/24
212.71.96.0/19
217.20.192.0/20
217.71.80.0/20
IPv6:
2a00:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
4d:8e:8f:11:16:a1:7c:93:07:41:54:ae:1a:58:ae:12:f7:f5:
93:f1:38:0b:5f:89:f9:cc:ce:69:fb:f7:f1:5a:9d:cb:18:7b:
2b:cd:f3:12:3b:df:a6:ff:26:e3:3c:ea:b7:0d:a8:2d:08:f3:
81:16:21:0a:19:0f:b7:f9:41:88:17:8c:67:b5:28:e7:62:3a:
ac:9c:ac:ee:24:94:56:5d:a9:eb:55:64:0f:33:45:62:a1:97:
4b:a6:40:c3:76:4a:5b:ca:50:57:db:96:ea:69:d4:70:fb:ea:
39:d1:bf:6e:c2:d6:9d:83:79:db:01:7a:03:bb:4d:74:c6:d7:
1d:fb:53:7a:5b:a5:a8:67:fa:1e:49:46:70:69:8c:0c:f6:6f:
b3:85:c4:59:4f:48:e2:77:41:37:c7:c5:10:83:14:87:3b:51:
89:bb:c7:f0:31:e9:fa:c9:9f:96:fd:0e:e3:6e:3c:c7:01:f4:
b7:f6:c7:39:bc:6f:25:01:90:f4:43:25:ad:ff:e8:02:c3:7a:
95:d3:c5:e9:95:39:51:24:7e:0c:1e:cc:1a:48:9f:d2:b2:bc:
a6:0c:06:9f:8c:51:a5:72:64:0e:3a:c1:64:d4:f3:59:56:dd:
3f:ee:01:98:9a:3e:ee:bf:c2:02:ea:47:33:b5:5b:7b:61:19:
47:38:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:16 2024 by rpki-client on console-fra.rpki-client.org