Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bkqyrlzMJvzGpMZCAbSlhkjXnR4.roa
File: bkqyrlzMJvzGpMZCAbSlhkjXnR4.roa (raw, json)
Hash identifier: anzrLxZjoOtAyVK3qIUNvzA7N5oO8eSw5EOcDtkHIMs=
Subject key identifier: 6E:4A:B2:AE:5C:CC:26:FC:C6:A4:C6:42:01:B4:A5:86:48:D7:9D:1E
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D126D5EDDFD8607EE8C42BB320EC4E3D3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bkqyrlzMJvzGpMZCAbSlhkjXnR4.roa
Signing time: Tue 16 Jan 2024 13:19:34 +0000
ROA not before: Tue 16 Jan 2024 13:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199868
IP address blocks: 185.103.100.0/24 maxlen: 24
185.103.101.0/24 maxlen: 24
185.103.102.0/24 maxlen: 24
185.103.103.0/24 maxlen: 24
193.233.74.0/24 maxlen: 24
193.233.75.0/24 maxlen: 24
193.233.80.0/24 maxlen: 24
193.233.164.0/24 maxlen: 24
193.233.252.0/24 maxlen: 24
193.233.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:6d:5e:dd:fd:86:07:ee:8c:42:bb:32:0e:c4:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 16 13:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e4ab2ae5ccc26fcc6a4c64201b4a58648d79d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:b5:0d:94:5b:f0:c7:87:d1:32:d6:e0:26:
9b:37:43:a9:1c:66:ca:9d:62:4d:ef:df:86:5d:1c:
c0:74:6a:aa:9f:d6:9d:17:d8:cc:b9:bc:88:9d:cc:
ba:52:38:d2:28:a9:01:c6:dc:5b:93:74:a4:ae:7d:
6e:58:07:4d:ba:b3:60:2f:b2:73:d3:dd:3b:e1:23:
06:a2:51:ad:09:1c:15:dd:c1:7f:23:c2:fe:e0:db:
26:16:d1:d0:fc:08:fb:25:39:05:4a:62:81:b7:b5:
79:36:33:4e:83:65:2b:8f:72:e8:14:d2:39:ed:49:
89:66:10:ae:d4:97:4d:cd:b0:06:4c:2a:65:ae:d8:
cf:cf:79:a8:46:8c:9f:a1:db:bb:d2:74:c4:c3:db:
e9:4f:5b:8a:c0:64:a3:6d:54:a9:30:b6:83:5e:02:
be:15:f6:f0:70:11:c8:9a:18:65:76:0b:43:67:cf:
12:dd:ba:ac:2e:5f:93:79:00:9a:46:8c:8b:c3:dd:
f0:e8:6b:79:e4:82:3f:b7:80:eb:55:ba:57:56:da:
1a:c0:c1:32:72:73:ed:39:0c:c7:17:01:d7:9c:54:
4c:98:43:2d:2c:7b:2e:44:22:8b:72:b4:ad:12:5e:
04:76:f2:2b:aa:b7:1b:d6:29:ae:a7:2d:cc:34:62:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4A:B2:AE:5C:CC:26:FC:C6:A4:C6:42:01:B4:A5:86:48:D7:9D:1E
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bkqyrlzMJvzGpMZCAbSlhkjXnR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.100.0/22
193.233.74.0/23
193.233.80.0/24
193.233.164.0/24
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
62:71:e0:ad:f2:d2:3f:30:bf:eb:08:40:be:38:52:fa:ff:5c:
37:b8:2c:be:04:95:51:a2:61:3b:44:2a:a3:a7:9b:20:07:24:
e3:f1:4c:bc:8c:5d:42:1a:1d:33:bd:f4:3a:7e:92:d1:ce:8f:
cd:0c:d7:d5:6d:9a:67:cb:ce:c5:ac:6a:b4:e7:73:9d:a7:53:
01:8b:b9:4a:e1:08:bf:6d:ad:bd:99:56:98:0e:51:0a:10:31:
03:72:5c:ba:ed:c4:05:8d:2a:3e:36:d0:a5:4e:02:84:42:30:
24:4e:54:1f:4d:04:7e:81:76:48:01:4d:53:4c:49:e2:56:2f:
cd:0a:bb:a8:7f:6d:0f:c0:52:dc:51:ea:d1:d3:c4:e9:c6:75:
c2:26:87:d6:7f:7c:79:a3:0d:8c:5e:49:71:88:c5:6c:93:9e:
95:2f:0f:87:52:bc:22:ec:28:ef:2f:b8:10:f1:8e:db:23:09:
c9:21:52:b2:6f:0a:95:77:31:b8:3a:fc:97:9f:ce:e0:92:44:
67:07:b2:12:37:db:11:59:6c:34:25:2d:a6:60:ce:85:a9:40:
f2:39:60:89:94:d6:47:a3:56:17:ab:34:ad:a9:2d:a8:1c:5e:
10:1a:02:68:3b:03:26:f3:99:93:22:b8:57:d7:ec:ed:f9:e1:
72:41:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 23:23:09 2024 by rpki-client on console-fra.rpki-client.org