Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHPL-9V6m05KcpqQmon5wSf9Fo0.roa
File: bHPL-9V6m05KcpqQmon5wSf9Fo0.roa (raw, json)
Hash identifier: iHBjN1zxmgXr2w32Jnu6y09PsqpHr9U8znuDYYU9k1o=
Subject key identifier: 6C:73:CB:FB:D5:7A:9B:4E:4A:72:9A:90:9A:89:F9:C1:27:FD:16:8D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185DDE210DF2B35428F5AD60859AD3424D0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHPL-9V6m05KcpqQmon5wSf9Fo0.roa
Signing time: Mon 23 Jan 2023 09:07:38 +0000
ROA not before: Mon 23 Jan 2023 09:07:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:e2:10:df:2b:35:42:8f:5a:d6:08:59:ad:34:24:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 23 09:07:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c73cbfbd57a9b4e4a729a909a89f9c127fd168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:b2:3d:8b:4b:9d:3b:e1:5f:83:7a:94:23:
2b:e7:36:c3:7f:bc:66:35:58:5a:05:76:94:47:e2:
07:33:6f:c0:fe:eb:e8:b0:6c:da:6f:85:05:09:4c:
fc:62:7e:d5:83:7d:36:52:9a:40:20:19:fa:56:94:
57:9f:6b:f2:a6:a6:dc:77:4b:f9:84:49:c3:a4:1f:
79:0f:af:43:54:b3:c5:69:42:1e:5a:b2:49:ed:62:
fa:10:12:fd:bf:cf:60:b6:6f:96:d6:0d:90:62:60:
09:d8:3b:30:5f:fd:ea:13:08:26:fb:a7:0c:c4:80:
2a:64:c4:c9:dd:91:ca:fc:21:9d:2e:8c:77:52:d0:
8d:76:a3:74:84:37:ad:80:85:36:00:8c:cb:f3:2f:
1c:cc:c5:87:d5:13:59:ea:3b:9a:69:b4:8a:07:8d:
7a:8a:da:38:44:55:16:1e:54:51:9a:67:3e:21:d3:
2e:20:e0:1e:16:5c:df:ff:40:7f:cd:ff:55:62:ae:
50:56:4f:8a:ef:2f:23:0c:ea:1b:d7:37:b1:79:cd:
60:e5:7a:27:6f:e7:93:64:22:e9:fb:95:50:24:d1:
dd:b5:fe:b9:94:41:b2:fa:a6:53:15:a4:2c:3d:2e:
75:36:48:1c:f0:f1:42:90:6f:68:19:bd:26:62:85:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:CB:FB:D5:7A:9B:4E:4A:72:9A:90:9A:89:F9:C1:27:FD:16:8D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHPL-9V6m05KcpqQmon5wSf9Fo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
193.124.46.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.139.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:11:d7:f6:eb:bc:f2:13:65:26:9b:54:03:df:a6:f9:6e:23:
63:f7:46:c7:9c:9c:f3:b3:92:2f:16:2e:d0:ab:cf:b5:e4:4e:
fa:56:25:76:d3:e0:be:90:e8:bf:25:8a:d5:7f:38:7b:90:b1:
d8:b2:1c:ce:f6:90:81:19:cf:d1:a7:2f:3e:85:9d:a0:97:cc:
48:40:b3:2e:c7:50:83:3c:80:42:03:1e:4c:49:8d:e2:f8:0a:
be:81:d0:4a:7d:ab:9c:1c:f5:0d:1a:03:20:7f:0d:fe:fe:24:
95:d1:94:3e:da:47:53:20:c0:03:19:97:fe:2f:76:15:c6:45:
4c:c6:b1:eb:4d:82:ff:de:08:4b:f3:dd:6a:11:87:02:c4:c1:
00:36:2c:db:aa:d1:34:bc:68:32:27:e5:bc:32:bf:e5:fc:4c:
a9:d2:be:f7:68:d6:e8:bc:c0:6e:c3:cd:db:d4:ba:c4:30:cd:
ee:74:4b:3e:d7:2b:79:f3:3e:2c:ec:56:fc:8b:26:f9:0b:20:
1b:2d:f3:af:fd:b0:eb:76:11:3e:63:bf:01:11:65:8d:ba:7b:
32:aa:4f:ee:83:f8:e9:19:7e:44:19:0c:b1:e0:07:6d:43:ab:
7b:fc:43:73:91:b5:89:f5:a9:53:8f:11:a4:9e:65:7f:2f:5e:
d3:ca:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org