Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/Bxn6TBDnL7RdWsso9sjdKnbL72Y.roa
File: Bxn6TBDnL7RdWsso9sjdKnbL72Y.roa (raw, json)
Hash identifier: k8hpz7m1UH5Ettb0BV4u94xsZ03sWzlzulCCJr+obxo=
Subject key identifier: 07:19:FA:4C:10:E7:2F:B4:5D:5A:CB:28:F6:C8:DD:2A:76:CB:EF:66
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 0187C26B40B21326047C8ACE60D16A6EBECB
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/Bxn6TBDnL7RdWsso9sjdKnbL72Y.roa
Signing time: Thu 27 Apr 2023 11:13:41 +0000
ROA not before: Thu 27 Apr 2023 11:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28978
IP address blocks: 185.115.44.0/22 maxlen: 22
176.32.160.0/20 maxlen: 20
176.32.170.0/24 maxlen: 24
176.32.168.0/24 maxlen: 24
195.39.216.0/23 maxlen: 23
2a00:8a40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:6b:40:b2:13:26:04:7c:8a:ce:60:d1:6a:6e:be:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Apr 27 11:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0719fa4c10e72fb45d5acb28f6c8dd2a76cbef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:41:f5:56:45:4a:43:a9:9d:1e:63:df:29:
95:c2:37:0f:56:37:25:61:8e:3f:e4:6c:cd:16:df:
76:ab:3c:da:a8:3e:47:41:d5:8c:ee:96:d5:1e:8a:
56:df:18:b3:2f:81:be:33:7d:c5:5d:26:d7:83:ca:
86:d2:64:3f:c6:19:5e:44:17:53:af:be:2c:8f:80:
00:8a:0b:34:f5:96:d2:81:fe:45:aa:65:4d:7b:a5:
fb:dc:c8:7a:3c:f5:b0:41:8d:51:e2:bf:43:60:85:
e4:9f:ab:09:ad:58:33:91:b2:01:34:61:35:1f:3d:
67:f1:e3:b5:c4:15:cf:fa:f9:56:d3:35:61:53:12:
d6:03:05:c1:30:a7:00:43:0c:8f:de:91:6b:f8:69:
eb:8b:3c:7a:73:9c:75:f8:00:a1:5e:54:68:27:c8:
1d:dd:ab:d2:ee:82:46:01:5f:51:94:68:f8:e6:66:
42:e4:23:99:e5:0f:85:f8:42:1f:2d:bd:ba:5d:fa:
b0:38:2c:2f:54:7a:de:0a:3c:4d:24:12:f6:0b:c1:
c1:ae:a8:b9:80:ec:22:e3:43:09:a9:ef:67:8e:9a:
70:d0:bc:5e:ca:65:7f:6d:e2:d5:1a:8d:a6:fe:57:
29:3c:e1:4f:3b:98:fb:d5:f4:f4:40:19:30:9c:5c:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:FA:4C:10:E7:2F:B4:5D:5A:CB:28:F6:C8:DD:2A:76:CB:EF:66
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/Bxn6TBDnL7RdWsso9sjdKnbL72Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.160.0/20
185.115.44.0/22
195.39.216.0/23
IPv6:
2a00:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
24:c2:88:b3:2a:d5:07:32:ba:69:fc:97:58:9a:5f:29:23:86:
31:93:8e:af:f7:0c:34:34:c9:69:2c:9b:1c:97:7f:3f:37:f5:
f1:67:6b:17:c9:5f:a0:25:b6:33:9a:b2:6a:d2:16:9a:6f:bb:
20:ee:e7:51:74:d1:9e:77:a3:75:dd:c6:1f:59:67:c6:d4:aa:
00:36:8d:31:ab:2a:62:bd:ea:79:99:e4:2d:40:a3:db:bd:f4:
78:78:33:28:65:a0:6f:b7:34:c9:90:5c:78:a8:8a:fb:b7:b1:
79:cf:55:bf:3f:1b:3f:5a:63:47:3e:b2:33:63:e9:3d:c5:9c:
6c:34:86:46:b9:43:18:ca:e6:df:04:b7:2b:9c:1b:ce:89:07:
01:18:0a:ed:92:82:98:c8:62:38:f2:62:fa:5d:9f:a8:5a:30:
59:1b:c1:fa:36:9f:bd:7c:87:15:01:c6:00:7b:3a:53:3d:dc:
97:a3:7c:7e:fb:d9:6a:08:59:92:68:ba:60:eb:2e:44:6b:c6:
ff:fa:79:d0:e0:9b:26:b4:91:a5:42:8c:f9:f9:78:0b:22:4f:
9b:ab:be:c8:96:97:93:1e:13:13:57:71:af:4c:fa:b9:9f:3a:
1b:6d:9c:27:fd:ee:d9:05:cb:21:34:2e:57:20:e4:8e:24:00:
04:1b:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 09:52:25 2023 by rpki-client on console-ams.rpki-client.org