Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BMUzgPkGR_tSLXJFcyRjj371Zew.roa
File: BMUzgPkGR_tSLXJFcyRjj371Zew.roa (raw, json)
Hash identifier: R9ha6fLqeykRspn6PGcqjobxrWePE7vc8q+5FBpSWwE=
Subject key identifier: 04:C5:33:80:F9:06:47:FB:52:2D:72:45:73:24:63:8F:7E:F5:65:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018835AD88BD96A7524250C16F772A4AAE7E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BMUzgPkGR_tSLXJFcyRjj371Zew.roa
Signing time: Fri 19 May 2023 20:22:25 +0000
ROA not before: Fri 19 May 2023 20:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46308
IP address blocks: 109.206.242.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:ad:88:bd:96:a7:52:42:50:c1:6f:77:2a:4a:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 20:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04c53380f90647fb522d72457324638f7ef565ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:9c:26:bb:2f:aa:92:a8:e3:a0:67:ed:7c:
ef:ea:ec:4b:1a:7c:b8:cd:3b:42:7b:e7:bb:c9:8e:
86:7b:bd:80:40:53:b6:d3:b0:7e:eb:5e:2a:14:c1:
ea:e4:53:17:9a:43:58:d0:27:45:59:59:9a:c1:9f:
fa:24:df:29:c6:39:86:3d:3b:d7:b5:0b:f1:42:f7:
45:ef:48:f3:4c:70:82:3c:e4:5e:c5:39:2f:18:52:
58:be:ea:23:cc:0e:ed:9a:e5:85:2e:51:ec:1f:1f:
22:9b:9d:7b:81:8f:5d:f0:08:99:b3:80:94:f9:7c:
71:de:ad:93:17:3e:75:c9:56:1b:7b:a5:7c:4e:82:
bd:52:47:aa:c9:a5:ca:29:f2:58:cb:82:8d:20:b8:
db:66:06:51:14:ff:ab:53:93:0e:89:c7:61:1a:db:
51:4a:68:2a:8b:81:e5:c6:82:07:db:36:84:ef:c1:
9a:7c:87:98:37:ec:31:2a:09:e3:05:38:7b:9a:c0:
22:9d:d0:ca:77:78:b6:1f:c1:c4:cd:3a:78:65:51:
29:0e:b9:79:f2:c7:64:8d:b6:eb:ad:9d:cf:a3:c2:
7a:37:03:f4:2d:8b:2b:dd:b0:4c:06:12:64:bd:22:
fb:cf:7a:7c:f8:4e:e2:b8:32:a0:3b:f8:4b:f3:38:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:33:80:F9:06:47:FB:52:2D:72:45:73:24:63:8F:7E:F5:65:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BMUzgPkGR_tSLXJFcyRjj371Zew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.139.0/24
109.206.242.0/24
185.246.222.0/24
185.252.179.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a2:90:cb:6a:4a:d7:c7:91:b0:b9:83:d2:0b:a4:2b:ab:f7:
7b:a6:4f:ef:8a:b9:ac:aa:a6:0c:37:7e:f2:c8:41:2b:e7:e3:
52:de:d6:55:29:33:d7:33:70:fa:f7:5a:79:e5:39:bd:0d:0d:
48:b3:c0:1f:c5:d2:9e:cc:0b:e4:d5:27:15:28:11:55:34:8b:
35:3c:4d:7c:88:fd:57:58:85:d7:eb:c9:a9:20:16:6a:c3:82:
6e:b0:08:50:35:17:0a:f9:c8:2f:8d:cf:7a:95:76:b6:44:98:
7f:ff:f0:60:7f:0f:75:f6:82:d8:24:f1:ae:a3:3c:15:c8:5b:
c6:7f:3d:db:1f:53:9c:f5:00:b6:9f:93:c4:b9:fa:2f:c0:0d:
31:53:e5:8c:47:ab:46:bd:70:bd:d0:b4:e5:5d:26:85:e5:18:
4e:e0:52:a9:f7:8c:a7:94:f4:33:1b:b7:a7:94:f9:45:b5:07:
f2:e7:26:25:97:a0:9e:44:92:4d:57:86:ba:1c:cc:8d:c3:17:
5c:14:a1:3a:a4:a9:f6:c8:42:08:0b:8d:dc:e9:73:6e:a1:46:
d0:e0:7a:93:93:b2:f0:93:27:62:e2:44:1a:73:ee:7e:a4:1a:
90:8b:c4:23:e4:d9:84:92:82:7d:2b:db:3b:ad:24:42:bf:02:
e8:c2:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org