Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/BBjR4xg6_QtvFLfM0hyysyywanM.roa
File: BBjR4xg6_QtvFLfM0hyysyywanM.roa (raw, json)
Hash identifier: /BShAsVPVK5S3w25mPqXVobt7aEDK1IMUBgHLDrlBp8=
Subject key identifier: 04:18:D1:E3:18:3A:FD:0B:6F:14:B7:CC:D2:1C:B2:B3:2C:B0:6A:73
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 018CC94ACF7EDF9849B6DD0C3D7E4B37C4EC
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/BBjR4xg6_QtvFLfM0hyysyywanM.roa
Signing time: Tue 02 Jan 2024 08:29:32 +0000
ROA not before: Tue 02 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59790
IP address blocks: 193.124.14.0/24 maxlen: 24
185.227.52.0/22 maxlen: 22
194.135.118.0/24 maxlen: 24
185.182.164.0/22 maxlen: 22
5.154.243.0/24 maxlen: 24
194.135.47.0/24 maxlen: 24
193.93.140.0/23 maxlen: 23
185.109.144.0/22 maxlen: 22
193.124.84.0/24 maxlen: 24
185.65.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:cf:7e:df:98:49:b6:dd:0c:3d:7e:4b:37:c4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Jan 2 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0418d1e3183afd0b6f14b7ccd21cb2b32cb06a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:1a:e1:39:88:20:69:b3:65:fe:81:82:91:
89:4d:09:82:eb:48:20:1a:d0:99:44:20:c4:0c:6d:
3d:ba:03:a9:80:09:cd:bb:50:65:1a:70:01:41:6c:
9c:7a:db:aa:7b:78:2f:6e:fb:c6:82:d5:5d:f9:54:
29:20:d5:a6:48:e2:ff:0b:e1:a8:96:cd:82:91:80:
58:69:fa:e3:47:81:e4:5b:34:85:6b:c4:06:1e:67:
01:11:7b:f4:d9:0c:5c:bd:f8:ae:f7:6b:af:ed:61:
ed:7f:5d:e0:0f:23:91:e2:ea:cf:ec:14:99:83:e1:
51:98:72:ed:9c:05:ec:ee:c6:ae:c2:99:ae:dc:0e:
13:e4:a9:ed:38:74:33:c7:31:17:0f:a3:81:29:c4:
fa:d2:af:d5:17:93:06:ed:ac:36:64:fb:1d:3f:5d:
f0:07:bf:30:b0:77:f9:39:e0:b2:18:a5:88:0b:3f:
60:52:fc:0a:68:c7:2e:c3:c9:13:70:bc:79:d3:96:
82:87:a0:bb:c7:39:45:af:d2:c8:74:7d:07:d5:ba:
1c:ec:d9:65:5e:16:d3:64:39:05:ff:43:88:eb:58:
b2:8d:c8:1f:df:49:2d:1c:6c:6d:d7:85:64:2b:22:
8c:87:29:f6:8e:c1:46:c8:2a:9e:36:14:55:60:b7:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:18:D1:E3:18:3A:FD:0B:6F:14:B7:CC:D2:1C:B2:B3:2C:B0:6A:73
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/BBjR4xg6_QtvFLfM0hyysyywanM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.243.0/24
185.65.208.0/22
185.109.144.0/22
185.182.164.0/22
185.227.52.0/22
193.93.140.0/23
193.124.14.0/24
193.124.84.0/24
194.135.47.0/24
194.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bf:a7:bb:73:ba:79:1a:3a:92:98:4f:48:1f:26:e8:df:03:
83:f4:ce:63:01:55:24:70:a1:4c:f6:9c:8e:2f:6d:cc:54:d1:
3d:59:5c:f1:88:71:82:d6:02:9b:c6:2d:c9:6f:a1:82:90:5b:
af:5d:e1:1f:c3:3a:00:73:2a:9c:db:a8:e5:27:84:ce:42:d1:
f9:ba:da:8e:c3:fc:9b:b4:26:e9:84:e0:8b:73:ca:df:dc:30:
ca:3d:35:85:1c:2c:bb:f6:19:fc:47:6c:92:43:78:a7:03:89:
47:1c:48:5d:eb:88:08:24:20:f6:77:9f:60:ea:f4:20:0c:d2:
1c:83:0d:03:bb:13:3d:21:0b:7e:b9:c4:21:83:5d:42:f9:02:
d3:cc:e4:0b:f2:17:f4:06:21:d9:56:e1:ea:90:18:f7:ad:91:
86:08:d0:ea:3e:f8:14:03:b2:11:63:1a:e8:c1:0b:a1:80:1f:
d6:63:8f:7e:08:ff:59:4b:8d:7e:ab:50:3f:12:ce:72:81:e7:
b7:72:8d:47:7d:15:18:97:11:16:98:08:f8:96:34:9d:ed:0c:
cd:37:c3:03:d4:26:8b:ce:a4:9b:45:2d:73:e0:26:95:df:5a:
b0:14:0a:89:49:4c:f3:42:46:3d:f3:94:2d:32:f6:3f:71:b3:
a1:79:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:53 2025 by rpki-client