Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/Bhk06US2G_m34Zn9AYgynJlvCbE.roa
File: Bhk06US2G_m34Zn9AYgynJlvCbE.roa (raw, json)
Hash identifier: nGrjuE4M+Tdld+Ni2h9jYt1vpTS3+2stisOe/H3TpLw=
Subject key identifier: 06:19:34:E9:44:B6:1B:F9:B7:E1:99:FD:01:88:32:9C:99:6F:09:B1
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 018CC80127BAE9F6B3B2D67120F32B6B9903
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/Bhk06US2G_m34Zn9AYgynJlvCbE.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200023
IP address blocks: 176.103.219.0/24 maxlen: 24
88.218.4.0/22 maxlen: 22
185.39.44.0/22 maxlen: 22
94.177.105.0/24 maxlen: 24
2a04:7c00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:27:ba:e9:f6:b3:b2:d6:71:20:f3:2b:6b:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=061934e944b61bf9b7e199fd0188329c996f09b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:d1:3c:ab:12:2c:48:57:9f:c0:de:ff:94:
21:6e:ac:ba:79:ce:85:49:b6:f1:bc:1e:84:a0:c5:
f6:f2:ce:6a:11:8d:09:5c:b6:53:b9:e3:b4:fb:cd:
ab:b5:9b:b3:7e:2d:cb:99:f5:f4:e3:80:d4:2e:f2:
2d:83:d2:85:e6:88:87:4c:9c:9d:74:87:d1:78:c7:
fb:c8:93:69:a8:c5:8c:95:44:9c:52:25:30:d0:95:
00:dd:0d:3f:93:bb:87:9d:9c:23:a1:b7:53:16:80:
a8:c2:3f:96:18:43:ce:c1:41:ff:91:89:4e:9a:b3:
49:c5:82:09:38:cb:9a:56:07:9a:a9:bf:b2:57:7a:
03:aa:61:88:ad:f1:c2:2b:0a:9c:0c:0e:c1:7c:ab:
3b:c0:03:60:c7:2d:35:c6:bc:32:2e:e7:6c:ce:3c:
95:92:c2:75:5d:b8:d8:b7:41:df:03:c4:55:f3:1b:
d4:f6:44:d4:9b:fb:78:e5:93:9a:fa:bf:24:f2:7a:
20:08:ea:d0:45:f3:dd:15:a2:34:9c:0f:56:05:8c:
cd:69:8f:66:f0:eb:07:85:85:7d:97:89:0b:91:88:
e3:fc:42:94:35:84:24:7b:ec:eb:81:6b:52:01:5c:
31:20:bf:ae:3c:a4:ac:8f:a4:53:30:54:30:d1:33:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:34:E9:44:B6:1B:F9:B7:E1:99:FD:01:88:32:9C:99:6F:09:B1
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/Bhk06US2G_m34Zn9AYgynJlvCbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.4.0/22
94.177.105.0/24
176.103.219.0/24
185.39.44.0/22
IPv6:
2a04:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
dc:d9:16:10:99:c6:fb:cb:f2:4b:7b:4a:6e:fe:76:3d:0f:40:
64:d8:20:a0:e7:27:3b:6f:d8:a5:07:64:de:47:67:32:0f:30:
f2:ca:78:41:a9:ac:f2:95:e4:29:b4:54:1d:d5:1f:fa:72:42:
d2:22:a2:2f:e2:12:7d:6d:a0:99:c5:54:d9:9e:67:32:d5:d5:
ef:81:e6:a6:ba:aa:1f:99:68:cf:1c:da:26:ad:6f:39:46:28:
f4:fc:a8:44:9f:cb:c2:2f:0b:50:0b:63:3b:04:44:db:94:3b:
29:78:15:da:80:80:08:54:1c:fc:cd:be:a5:b4:ff:20:be:85:
06:12:4c:70:ad:c5:4a:da:dc:cd:e5:09:30:6a:27:4b:10:21:
39:27:86:dc:a8:5a:eb:26:1f:62:65:dc:90:19:c5:2d:60:6c:
ae:2d:8a:18:e9:3d:2c:e6:98:2e:6f:d1:ca:0b:f1:86:ed:02:
51:2d:ca:0f:2d:6b:19:f1:60:0a:32:e2:54:4f:44:82:a8:b8:
75:40:95:4e:78:51:64:7b:a5:52:97:76:a1:c1:67:8a:48:b6:
ac:ad:cd:e2:68:9b:e1:20:d2:4f:a1:95:c8:d1:b3:2c:e8:2c:
fb:db:a7:f8:8f:3c:d9:c0:d4:eb:d2:f5:03:4e:63:65:5f:fa:
87:92:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:53 2024 by rpki-client on console-ams.rpki-client.org