Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BkKWYFlHoSRgATe6WEh5LOW478E.roa
File: BkKWYFlHoSRgATe6WEh5LOW478E.roa (raw, json)
Hash identifier: W6VlWWlWUf+SJnrjhk7axOWQGXNKdX9IfotA2fg2AYY=
Subject key identifier: 06:42:96:60:59:47:A1:24:60:01:37:BA:58:48:79:2C:E5:B8:EF:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E31AE44CCC32862FDE158CBB9F15
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BkKWYFlHoSRgATe6WEh5LOW478E.roa
Signing time: Sun 01 Jan 2023 13:25:06 +0000
ROA not before: Sun 01 Jan 2023 13:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 192.145.29.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
185.252.162.0/24 maxlen: 24
185.252.160.0/24 maxlen: 24
185.252.161.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
193.148.50.0/24 maxlen: 24
194.11.199.0/24 maxlen: 24
194.11.197.0/24 maxlen: 24
193.148.48.0/24 maxlen: 24
193.148.51.0/24 maxlen: 24
193.148.49.0/24 maxlen: 24
194.11.196.0/24 maxlen: 24
194.11.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e3:1a:e4:4c:cc:32:86:2f:de:15:8c:bb:9f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=064296605947a124600137ba5848792ce5b8efc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:b7:3d:8a:90:d8:3b:c0:74:48:25:24:cc:
9c:3b:e2:f5:59:d0:b3:97:e4:2c:13:a7:42:3f:99:
74:63:65:6a:94:95:47:75:a7:66:cf:f2:59:88:9f:
a4:d6:e5:84:b2:c3:ed:25:ba:44:0c:bc:6f:96:8d:
67:14:56:d7:d1:7d:a5:9f:90:80:72:16:d9:f2:43:
33:0d:ef:24:d8:6d:2c:47:47:bb:c9:a3:35:34:52:
f5:bf:0e:d9:b5:0e:43:0d:4e:cc:7d:b3:df:9c:15:
f8:0d:a5:43:9a:84:76:03:6c:23:24:35:06:88:0f:
5d:07:6d:2e:5b:fe:6e:44:72:c5:7c:56:e2:91:30:
c1:ab:a7:40:68:8a:50:47:c8:00:2d:15:3c:20:09:
09:ee:b5:cb:94:97:8d:8c:51:f7:c3:42:e0:86:ae:
76:ae:26:82:50:75:df:73:37:a8:43:af:90:fd:de:
cf:5f:fe:01:61:73:2c:cb:fc:17:c8:f4:2e:e5:e7:
7b:10:b1:b2:5f:98:0e:a1:ed:4a:5a:44:99:5e:9d:
e9:47:5d:d3:0a:33:a4:fd:e8:fc:75:fc:22:bc:60:
ff:d6:21:8e:48:12:c1:2b:71:68:6e:b5:e6:35:d9:
23:9b:81:ec:cf:90:40:77:ba:2a:27:ea:41:51:0e:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:96:60:59:47:A1:24:60:01:37:BA:58:48:79:2C:E5:B8:EF:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BkKWYFlHoSRgATe6WEh5LOW478E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/22
192.145.28.0/22
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:15:39:ef:e2:3a:52:30:1e:aa:d0:9f:29:52:09:21:8e:f1:
4c:8a:e6:01:f9:90:82:ef:cb:e2:1e:f8:2f:ed:c8:e0:a6:b2:
f3:6f:2d:5d:65:8b:a8:21:a0:35:ce:a5:1c:d0:15:1a:04:ef:
50:c5:bf:4d:98:b4:6c:ae:b2:0e:f9:ed:8c:07:e8:b0:7e:65:
3a:e1:4d:69:d2:38:be:b5:01:2e:e7:ae:bf:01:31:9b:bd:b1:
7a:06:73:f9:c0:6a:9f:f5:04:b7:07:3d:1b:68:7b:2e:11:99:
55:b7:87:55:6e:f9:72:dc:bb:67:cd:09:97:ec:b1:ca:04:55:
1e:cc:f8:94:6b:16:9c:50:63:2e:92:48:ec:ed:08:be:a7:f5:
4f:67:32:19:c7:21:0e:b7:65:8f:9a:27:63:4a:13:d6:c0:36:
61:db:5f:ab:c0:40:9d:00:fb:2e:92:f9:76:e0:e5:93:1e:29:
c4:86:3c:df:d8:3e:e2:63:fd:7a:68:7b:1a:f2:9c:3b:bd:c8:
54:8d:1d:f6:30:0b:fb:00:16:64:b7:61:d9:30:57:28:9c:fb:
b7:f4:74:56:7b:97:b6:50:39:4a:9c:7a:da:8f:c6:a8:60:a9:
bd:21:13:a3:85:3f:79:57:4f:6a:45:9c:24:68:32:fa:2a:8f:
bf:9c:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org