Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/BGGB0V1iyC74rXs6XMTXVsdFR1o.roa
File: BGGB0V1iyC74rXs6XMTXVsdFR1o.roa (raw, json)
Hash identifier: bJLwfUrVMNuW8MpWBTAp8sQ+k2CBB8IMk/nYkGn6fD0=
Subject key identifier: 04:61:81:D1:5D:62:C8:2E:F8:AD:7B:3A:5C:C4:D7:56:C7:45:47:5A
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0185DEFDE06498229DF3174E311EAD60D4DC
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/BGGB0V1iyC74rXs6XMTXVsdFR1o.roa
Signing time: Mon 23 Jan 2023 14:17:37 +0000
ROA not before: Mon 23 Jan 2023 14:17:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201199
IP address blocks: 185.82.103.0/24 maxlen: 24
185.82.102.0/24 maxlen: 24
185.82.101.0/24 maxlen: 24
185.82.100.0/24 maxlen: 24
2a05:8f00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:fd:e0:64:98:22:9d:f3:17:4e:31:1e:ad:60:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jan 23 14:17:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=046181d15d62c82ef8ad7b3a5cc4d756c745475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:19:f2:d5:f7:89:1d:a8:7a:ea:11:fa:fc:
64:5a:f1:d0:68:ec:0f:19:bf:20:51:17:f4:39:5d:
80:86:d5:9a:0a:51:94:b7:df:94:99:e8:db:8f:0c:
b0:c8:a3:33:96:34:cd:27:e1:92:ce:dd:f2:8a:96:
36:0c:d0:ea:3f:8c:a3:e9:f1:a1:84:3c:24:1a:25:
bc:5e:d7:89:d8:72:bb:67:e7:c4:b2:35:dc:09:14:
02:27:3e:9f:fb:e4:f4:32:b2:85:8d:ad:d8:a8:6a:
3f:1e:80:df:0b:d0:33:05:6a:d5:9f:42:45:96:6a:
38:07:16:32:31:b2:20:5c:d9:49:44:ee:c3:8f:8e:
5f:95:fe:0e:1f:c2:1e:6c:d2:52:ee:9c:de:17:97:
6a:83:e1:8a:9b:70:57:10:6c:6c:4b:95:39:c1:9f:
41:df:bf:88:de:ed:c5:44:5f:53:86:dc:74:cf:e3:
c6:d3:c6:75:36:2b:c3:3f:25:c6:e8:47:86:e0:63:
38:0a:57:2a:02:1d:0e:d6:82:25:7f:c7:d6:d9:d9:
5c:e8:cb:64:c5:22:fd:33:13:40:f6:b9:8a:ca:0a:
c1:4b:59:bd:f3:47:4c:2c:71:24:bc:52:12:83:38:
1e:2e:9a:f7:0c:6c:cf:8f:dd:55:cd:df:f6:4e:19:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:61:81:D1:5D:62:C8:2E:F8:AD:7B:3A:5C:C4:D7:56:C7:45:47:5A
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/BGGB0V1iyC74rXs6XMTXVsdFR1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.100.0/22
IPv6:
2a05:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
31:0e:3e:08:6c:a4:4f:c3:28:c4:5e:7e:dd:07:29:9e:7e:68:
15:97:d7:72:3f:3f:1b:6c:c0:d7:9a:04:65:49:ce:99:d9:d4:
c3:70:2f:b9:59:c7:a8:ed:c2:df:1a:d0:8a:5b:39:36:af:47:
2c:e3:ba:cb:f0:18:89:f3:8f:70:da:e7:19:4c:d2:d3:2f:dd:
87:ad:de:c2:21:85:a5:18:2e:b7:a1:5d:1d:22:c5:d7:98:84:
a2:1f:b6:87:f0:0f:09:e2:25:43:79:d8:de:3f:69:8b:7f:85:
77:22:e1:f1:5c:22:e4:94:c5:a6:9a:1a:c4:7e:e1:56:ff:92:
ee:c1:c0:f1:93:16:bb:7a:e8:0e:a0:c9:65:8b:bd:d1:41:51:
78:db:af:59:be:48:3c:f4:fd:12:94:be:f6:04:e2:5b:88:fb:
35:9c:b4:d5:08:87:91:aa:67:7c:18:e5:f3:b7:38:72:ff:ca:
40:6c:5f:7e:ab:63:2b:4c:d7:56:1b:a9:ab:a3:4d:64:b7:6d:
61:fd:0c:26:ed:a6:eb:5f:10:99:07:5c:62:7b:f1:14:4d:40:
67:a6:bb:e2:87:6b:16:41:99:c2:61:f2:a1:91:52:26:c5:2f:
6f:e5:36:50:6b:3a:56:b9:d6:a4:f2:6a:c0:c9:38:33:44:33:
45:96:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:50 2023 by rpki-client on console-fra.rpki-client.org