Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BaHgAy_Tv4pwPVsU_LXdy7GzovE.roa
File: BaHgAy_Tv4pwPVsU_LXdy7GzovE.roa (raw, json)
Hash identifier: xO2RLTiJmeQF63eUcbXOEGIwEGQ4FV3mZuf9h7U5ZNc=
Subject key identifier: 05:A1:E0:03:2F:D3:BF:8A:70:3D:5B:14:FC:B5:DD:CB:B1:B3:A2:F1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81EFD57EB8DE75AFC51AF4F279B0FE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BaHgAy_Tv4pwPVsU_LXdy7GzovE.roa
Signing time: Sun 01 Jan 2023 13:25:10 +0000
ROA not before: Sun 01 Jan 2023 13:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 94.156.11.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 12:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ef:d5:7e:b8:de:75:af:c5:1a:f4:f2:79:b0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05a1e0032fd3bf8a703d5b14fcb5ddcbb1b3a2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:f4:eb:02:32:a7:bf:72:5f:ee:e8:a4:b4:
86:c2:39:f3:66:b2:4a:27:16:88:2f:b2:59:27:0c:
34:97:e1:c0:68:85:55:db:4e:8c:1e:15:34:76:95:
57:48:6f:99:5e:d2:f6:ac:70:94:11:3b:0d:ef:ac:
19:0b:f0:1f:6b:41:7a:a1:67:ac:40:51:7b:58:1b:
1c:9d:ed:6c:a1:6d:7d:55:62:46:62:69:27:86:3c:
6c:19:3d:d4:e8:f5:00:8c:4b:f9:23:0f:ce:85:af:
81:44:6d:9f:6d:96:ba:5c:45:fd:56:33:3f:d4:dc:
e3:d4:bf:b2:bb:38:56:b0:c1:d9:93:88:6c:bb:65:
24:ec:4e:7b:8d:4a:dc:61:87:c4:29:59:ce:59:e5:
7a:0b:94:89:d5:26:9f:a2:8f:9e:57:07:4d:92:5e:
a1:06:57:3c:cb:8b:0e:7b:8a:bf:62:e5:a8:ea:4d:
f7:ff:50:15:11:62:00:e1:dd:01:47:37:4e:7c:91:
61:e4:56:b1:d8:b2:f6:77:ca:77:fe:8f:74:ff:4d:
11:99:00:d4:dc:65:15:de:e0:18:05:fc:72:0b:16:
3f:38:10:8a:f7:94:b2:00:2f:4d:16:17:e6:27:87:
f9:09:7d:10:c1:98:2a:6d:6f:2f:9b:5b:dd:8b:dc:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:E0:03:2F:D3:BF:8A:70:3D:5B:14:FC:B5:DD:CB:B1:B3:A2:F1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BaHgAy_Tv4pwPVsU_LXdy7GzovE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
94.156.11.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ae:6d:d3:07:09:ed:7e:ec:25:bb:d3:4f:14:10:ea:b0:c9:
1d:36:00:b9:18:4b:02:7e:f5:84:26:ee:18:ce:4f:51:12:f0:
57:6b:76:ef:7a:c6:50:6f:8b:ae:3b:e6:ab:e7:3b:42:d2:ce:
0f:5c:ac:fe:7a:4d:42:84:44:c1:ec:1f:46:ad:d9:34:89:b0:
2d:65:b5:6e:91:9e:57:a2:c2:ba:fe:64:80:d3:7c:9b:21:9d:
70:e9:ec:55:39:85:e3:87:33:d6:78:e9:f7:be:9d:80:fb:28:
6d:e4:28:b9:fc:d9:89:42:9e:1a:03:9a:75:82:29:20:44:b7:
0f:8f:04:b5:2a:f5:1b:5e:5f:af:8c:44:49:99:0d:d6:e4:98:
b7:b8:9a:b1:f7:74:d0:ae:02:a4:9c:f6:62:7d:74:73:f1:10:
ff:a1:fe:51:be:ab:46:c6:04:29:a8:ca:e2:da:59:70:37:07:
60:08:61:5d:a1:b1:5b:4d:68:13:6a:d6:ef:82:43:63:49:8e:
ae:51:d2:2d:c3:e5:c9:97:e4:89:00:b0:65:a3:27:6c:96:4b:
8c:40:c2:a5:bb:ce:38:96:d3:31:e6:bc:95:5c:1e:53:38:8e:
6f:e2:40:8f:6e:ea:65:90:fe:df:ea:06:3f:54:e5:49:ea:65:
4c:54:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:26 2024 by rpki-client on console-ams.rpki-client.org