Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/bwBemrPAsTgC4xph61cWhPlDPEA.roa
File: bwBemrPAsTgC4xph61cWhPlDPEA.roa (raw, json)
Hash identifier: xZb5IrteHhGnfe8pkPp3loPbh5BYnNWWlG9nEGU1WX0=
Subject key identifier: 6F:00:5E:9A:B3:C0:B1:38:02:E3:1A:61:EB:57:16:84:F9:43:3C:40
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0188FCB05D51444615EA079C0D3FE1B4E1D0
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/bwBemrPAsTgC4xph61cWhPlDPEA.roa
Signing time: Tue 27 Jun 2023 11:49:56 +0000
ROA not before: Tue 27 Jun 2023 11:49:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.146.152.0/24 maxlen: 24
185.146.154.0/24 maxlen: 24
185.146.155.0/24 maxlen: 24
2a07:4f80:10::/44 maxlen: 44
2a07:4f80::/44 maxlen: 44
2a07:4f80::/48 maxlen: 48
2a07:4f80:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:b0:5d:51:44:46:15:ea:07:9c:0d:3f:e1:b4:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jun 27 11:49:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f005e9ab3c0b13802e31a61eb571684f9433c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:b3:f1:8c:66:38:41:54:26:83:d5:ea:2b:
13:f1:b6:3c:ba:76:b8:81:2a:2f:af:1a:6c:b9:73:
84:b8:4b:3d:c9:79:7f:72:81:c5:46:cf:1c:df:6d:
c9:b7:76:43:51:62:50:da:17:d5:94:a4:a7:3d:69:
dd:7f:62:a5:79:aa:77:64:13:73:ae:7e:5e:56:32:
c3:0d:4b:88:fc:d2:a6:ea:e4:00:99:96:92:d8:00:
e1:35:d9:7f:79:88:62:a1:65:40:c9:23:e7:fa:3d:
30:0c:94:5b:95:8e:95:89:69:77:ca:8b:94:16:14:
dd:6c:af:5c:fa:31:93:88:2b:ae:4b:e7:28:a9:1e:
22:46:b0:19:3f:2e:86:76:c0:5d:32:fe:cf:90:4d:
e9:7f:e5:6a:31:db:cc:53:1a:3d:d6:9c:14:92:14:
3f:6c:cd:d0:82:ec:7a:4a:44:4b:6e:24:55:9a:f6:
8d:62:bd:3d:44:01:af:95:f8:49:a1:df:f0:0d:66:
20:3b:04:4d:99:22:52:30:94:59:ac:12:b5:12:19:
33:46:7d:26:12:40:f8:80:7c:78:19:bc:6a:b6:38:
49:4b:99:65:7a:57:84:ec:8f:1b:ea:79:d5:a4:52:
dc:25:69:fb:2f:28:b1:ed:8f:d1:04:43:a7:00:bb:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:00:5E:9A:B3:C0:B1:38:02:E3:1A:61:EB:57:16:84:F9:43:3C:40
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/bwBemrPAsTgC4xph61cWhPlDPEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.152.0/24
185.146.154.0/23
IPv6:
2a07:4f80::-2a07:4f80:20:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:2f:e0:ce:8e:c0:a7:3c:22:9b:06:85:1d:2c:d5:38:11:65:
1f:1d:63:dd:61:82:21:40:76:93:a6:03:1a:58:69:f9:e8:89:
b7:44:7b:78:51:13:89:de:14:e7:a2:6e:6c:6c:a9:5f:40:54:
66:42:1e:bd:7f:a7:d5:2a:ac:28:d4:2a:27:99:4c:83:d8:38:
fe:f1:61:0f:b7:5c:ff:cd:5f:01:b4:92:82:08:19:f0:ee:59:
7a:34:98:18:02:fe:a4:d0:06:b0:67:9a:17:97:a8:4e:ee:5e:
9f:cb:33:c6:4e:9a:e1:4e:f5:f8:1f:95:c9:cc:76:67:21:5e:
31:55:a8:94:a4:73:fa:4c:65:02:df:a3:f1:00:9f:af:a9:8a:
5f:69:f7:31:ec:5e:c0:b2:d1:01:53:62:22:61:9d:29:9b:8d:
ec:91:97:78:3b:bb:7f:d1:f5:4a:db:a9:ad:39:02:3a:cd:93:
5d:53:2b:77:ac:42:2c:fc:4e:3e:f7:1f:10:b6:67:95:7a:89:
01:69:b0:a7:53:8f:af:13:a1:44:71:74:84:e7:7f:f6:0b:1f:
5f:7d:1c:01:9f:57:a4:c6:47:0d:93:15:d8:f4:6a:95:85:9c:
67:e3:34:a1:b7:f6:f1:6a:1a:d5:f0:7f:0d:0a:c4:c6:0a:1e:
c9:61:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:49 2024 by rpki-client on console-ams.rpki-client.org