Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/Bw-8baP61VZVYj-fL2v-0nHyaTY.roa
File: Bw-8baP61VZVYj-fL2v-0nHyaTY.roa (raw, json)
Hash identifier: gVk6zVguVbWN18B2ckE7GeE8GANpOy8zIgqB62FJWV0=
Subject key identifier: 07:0F:BC:6D:A3:FA:D5:56:55:62:3F:9F:2F:6B:FE:D2:71:F2:69:36
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 018DC1843CFB10E3DC43ABC51E9143742289
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/Bw-8baP61VZVYj-fL2v-0nHyaTY.roa
Signing time: Mon 19 Feb 2024 13:18:05 +0000
ROA not before: Mon 19 Feb 2024 13:18:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29014
IP address blocks: 45.139.156.0/22 maxlen: 24
85.158.0.0/22 maxlen: 24
85.158.0.0/24 maxlen: 24
85.158.4.0/23 maxlen: 23
85.158.6.0/24 maxlen: 24
85.158.7.0/24 maxlen: 24
93.92.128.0/21 maxlen: 24
93.92.128.0/23 maxlen: 23
93.92.130.0/23 maxlen: 23
93.92.132.0/24 maxlen: 24
93.92.133.0/24 maxlen: 24
93.92.134.0/23 maxlen: 23
185.8.8.0/22 maxlen: 24
185.8.8.0/24 maxlen: 24
193.41.116.0/23 maxlen: 24
194.126.239.0/24 maxlen: 24
195.177.232.0/23 maxlen: 24
195.177.233.0/24 maxlen: 24
2a00:12e8::/32 maxlen: 40
2a00:12e8::/40 maxlen: 40
2a00:12e8:100::/40 maxlen: 40
2a00:12e8:200::/40 maxlen: 40
2a00:12e8:300::/40 maxlen: 40
2a00:12e8:400::/40 maxlen: 40
2a00:12e8:500::/40 maxlen: 40
2a00:12e8:600::/40 maxlen: 40
2a00:12e8:f111::/48 maxlen: 48
2a00:12e8:f123::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 15:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:84:3c:fb:10:e3:dc:43:ab:c5:1e:91:43:74:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Feb 19 13:18:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=070fbc6da3fad55655623f9f2f6bfed271f26936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:f6:08:a7:e2:c8:74:6d:ae:f5:08:91:d7:
d4:4c:4f:f4:55:29:4e:0d:3e:a3:89:ad:11:0e:f7:
83:e2:6b:cc:ca:ef:3e:97:92:7e:dc:9f:3c:4f:86:
5a:f1:b1:8f:51:9a:b1:f3:9b:08:14:b0:e1:4c:d7:
25:e4:2c:f6:dc:a5:7c:cb:05:cb:57:73:76:f3:8f:
85:da:c1:89:6a:7d:b1:7d:9c:d8:b7:94:62:6c:31:
b9:d0:75:a1:4a:d0:99:1c:2e:f8:9c:f6:e5:b0:3e:
3e:ae:92:56:b9:8a:aa:35:15:e4:e9:e8:c1:4c:64:
68:d8:77:af:60:2f:ea:2e:8a:67:06:81:f6:01:b4:
c4:f8:9e:4d:34:e9:d8:72:0b:39:76:de:37:4d:ae:
8f:63:5b:3a:bd:37:2d:39:14:96:d3:b4:13:48:17:
f2:8a:80:bf:b8:a8:9e:f1:5d:e4:cd:66:4c:8d:72:
ad:b6:9d:9a:ee:29:b9:ad:ba:9b:df:a1:69:b1:e8:
35:92:3c:69:5d:fe:8c:46:97:13:61:5f:8a:db:e7:
47:2f:9a:ed:26:98:17:41:9d:b1:e7:8a:c8:83:e3:
e9:42:09:e8:04:3b:01:c0:07:fc:7a:e1:fa:29:e4:
b4:3f:67:6d:d9:b9:71:98:bb:9f:b4:e8:1d:9e:95:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0F:BC:6D:A3:FA:D5:56:55:62:3F:9F:2F:6B:FE:D2:71:F2:69:36
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/Bw-8baP61VZVYj-fL2v-0nHyaTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.156.0/22
85.158.0.0/21
93.92.128.0/21
185.8.8.0/22
193.41.116.0/23
194.126.239.0/24
195.177.232.0/23
IPv6:
2a00:12e8::/32
Signature Algorithm: sha256WithRSAEncryption
4e:e0:f3:4a:80:b8:6d:b2:b6:d2:71:35:86:15:f5:0d:88:f9:
c0:27:87:ea:f8:dd:d9:d0:27:4a:34:43:1a:32:37:2c:df:45:
87:60:46:87:0c:73:8e:0a:3c:47:9d:97:b2:b0:14:a6:ee:89:
e9:7c:d4:62:fc:09:5f:38:93:82:bd:a2:19:9b:84:32:12:53:
bb:7d:48:64:f0:f2:ac:bd:9a:f6:c0:50:9c:b6:cc:21:d8:af:
c5:c8:32:c1:d0:0c:02:93:23:09:aa:e2:7a:a9:c5:cd:ca:cf:
44:b5:03:7e:b7:2c:55:e7:d0:bc:9a:57:36:67:7b:12:91:cf:
45:17:38:39:ac:99:94:74:be:e7:67:40:87:04:fa:6c:f8:98:
0d:e7:af:b7:a8:a7:48:e3:59:4c:1d:92:75:97:11:0a:53:9a:
f0:c1:6b:a1:ec:84:4d:44:e3:83:c9:35:9f:ad:d8:1a:3d:33:
b2:cd:db:e7:df:f7:ca:2f:ad:de:6c:6f:30:4c:ea:d2:27:14:
a4:77:af:1b:15:d5:39:22:4e:86:ab:74:9e:a8:f5:ee:86:db:
af:d7:51:89:89:5c:08:e4:d3:9f:14:0b:0e:2a:b2:fd:5a:95:
ed:7b:d6:bb:b8:ea:69:b6:ef:a2:a8:5f:ef:dc:6e:1c:09:45:
eb:09:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org