Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/BinxFDfGS79Sh3GpyLVNfIH9CmA.roa
File: BinxFDfGS79Sh3GpyLVNfIH9CmA.roa (raw, json)
Hash identifier: 0jFFnRI1fvTeKctypWRcTwOQyEfH8oYiMgB+S9+SoyY=
Subject key identifier: 06:29:F1:14:37:C6:4B:BF:52:87:71:A9:C8:B5:4D:7C:81:FD:0A:60
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0188F77A7149673ED8B84623BF02D42E1961
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/BinxFDfGS79Sh3GpyLVNfIH9CmA.roa
Signing time: Mon 26 Jun 2023 11:32:56 +0000
ROA not before: Mon 26 Jun 2023 11:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.224.0/22 maxlen: 22
195.180.232.0/22 maxlen: 22
195.180.228.0/22 maxlen: 22
194.163.192.0/20 maxlen: 22
194.163.96.0/20 maxlen: 24
194.163.220.0/22 maxlen: 22
195.180.196.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
195.180.204.0/22 maxlen: 22
195.180.200.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:7a:71:49:67:3e:d8:b8:46:23:bf:02:d4:2e:19:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 26 11:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0629f11437c64bbf528771a9c8b54d7c81fd0a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:80:b4:d3:41:7f:83:83:5c:d8:f4:e1:98:
cf:53:2c:89:22:12:45:04:63:09:86:06:c3:68:4f:
f3:16:bd:65:ca:8a:61:1a:4f:be:a0:94:74:e8:1b:
9d:c8:21:69:9f:08:13:7e:35:31:b1:f2:af:17:42:
c8:2f:23:86:06:94:13:08:6f:b2:b5:7c:7a:b4:ee:
7e:7c:19:1c:74:af:21:cf:5e:bb:ee:63:e1:d5:4c:
89:ab:65:83:ff:1a:84:39:e9:b2:fa:1f:d2:84:68:
2d:11:f8:bd:41:20:ba:55:f0:45:a0:03:10:0e:ca:
47:6f:22:ec:47:f9:d3:f2:6b:3d:b5:c7:62:0b:79:
ed:d8:03:6b:57:64:2e:3a:d9:c5:48:c8:df:f5:72:
51:49:32:96:a7:e4:8e:51:21:8b:69:8d:fa:0d:bf:
f4:4d:31:74:c7:3b:b8:53:f6:74:17:f2:d7:f5:1b:
ba:fd:d4:5e:38:e2:0d:5c:33:4b:15:05:ed:a5:b7:
82:b5:fc:21:73:20:7f:87:b8:df:4d:7d:50:b3:6a:
b6:d5:37:2b:40:66:6a:65:18:47:92:19:1d:1f:09:
7f:5b:e0:2d:ce:f0:ea:0c:46:25:22:76:9b:d0:ee:
83:19:46:e4:c7:cf:f4:67:dc:3a:54:5e:9a:72:50:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:F1:14:37:C6:4B:BF:52:87:71:A9:C8:B5:4D:7C:81:FD:0A:60
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/BinxFDfGS79Sh3GpyLVNfIH9CmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
194.64.152.0/22
194.163.96.0/20
194.163.192.0/20
194.163.220.0/22
195.180.196.0-195.180.207.255
195.180.224.0-195.180.235.255
Signature Algorithm: sha256WithRSAEncryption
28:97:18:88:8d:95:a3:b2:73:fa:3b:2d:06:ae:70:a0:e3:ed:
cd:e9:15:fe:39:59:82:6c:96:0f:f1:cb:2e:50:e4:22:c2:b2:
05:3f:44:f4:99:af:ae:ee:5d:81:83:b5:0d:6b:46:2c:80:25:
da:d4:eb:98:ef:4d:6c:8d:c4:04:a3:cc:f1:65:0f:2e:37:ca:
df:8a:af:1d:8f:f9:65:76:d2:41:70:d7:1f:ff:9e:2b:a7:86:
f6:a0:8b:58:e1:1e:f1:d8:8e:df:d5:21:6a:d5:9c:29:62:57:
5d:78:ef:ef:d9:1f:c4:70:80:93:f9:0c:4f:a2:c6:01:45:f5:
6f:5d:8c:2b:4b:5a:b9:05:ea:56:50:8a:b2:eb:43:f3:36:d8:
d2:e3:2c:4a:48:1a:92:be:4c:f2:0b:86:ad:11:93:2a:94:54:
68:e8:b1:18:21:9d:d7:e9:91:7f:d4:66:58:9b:f0:00:d5:0f:
a4:ae:9c:cd:2d:9a:58:ad:23:53:46:06:c1:b1:aa:a3:57:76:
d5:0c:f2:a7:72:fa:f1:72:71:27:8f:ad:df:3f:59:a5:8e:a4:
49:c0:1d:ab:cd:87:43:74:c8:95:f4:2a:e9:c3:a0:a8:49:fb:
e8:0b:15:28:6a:2d:5d:ac:44:b0:24:e2:9b:88:ef:ba:ec:8b:
3b:f2:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 10:03:27 2023 by rpki-client on console-ams.rpki-client.org