Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/BuaTdGLkc1PKxTkFWZqJM77mWr8.roa
File: BuaTdGLkc1PKxTkFWZqJM77mWr8.roa (raw, json)
Hash identifier: OBuXJfOEtYOsJNJZp2QPO/BxP1FTRFiENGdR/fHO/JA=
Subject key identifier: 06:E6:93:74:62:E4:73:53:CA:C5:39:05:59:9A:89:33:BE:E6:5A:BF
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01856E1455D040B5602E68D4D782849FECF4
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/BuaTdGLkc1PKxTkFWZqJM77mWr8.roa
Signing time: Sun 01 Jan 2023 16:05:04 +0000
ROA not before: Sun 01 Jan 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207187
IP address blocks: 213.194.212.0/22 maxlen: 22
213.194.216.0/21 maxlen: 21
213.194.224.0/19 maxlen: 19
185.163.180.0/22 maxlen: 24
45.130.248.0/22 maxlen: 22
2a0e:59c0::/29 maxlen: 29
2a0a:1c00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:55:d0:40:b5:60:2e:68:d4:d7:82:84:9f:ec:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Jan 1 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06e6937462e47353cac53905599a8933bee65abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:e5:c3:1d:d7:c5:38:7c:97:38:81:42:f7:
2d:63:5d:ea:bd:c6:06:3f:d5:40:06:26:88:90:d3:
61:c2:6f:10:31:b2:ce:e8:00:9c:c0:91:e3:04:99:
7d:d2:b1:77:73:78:ba:49:ce:ba:a3:c3:4d:59:48:
77:bc:c9:0f:95:09:2b:ee:a2:8e:e8:dc:87:06:c1:
db:b7:09:66:44:d8:94:a0:ec:ec:7a:50:a9:0a:6c:
0a:28:70:3a:79:a7:31:ba:ed:4e:a2:d2:3c:8f:33:
2a:fc:15:7d:e0:22:f8:fb:63:c0:23:e4:61:9c:5e:
97:5a:6a:28:98:2e:93:4f:4b:e5:30:71:82:c2:a5:
38:c1:15:16:5d:25:de:91:a0:02:9e:fa:69:d8:10:
b0:9b:61:00:58:46:86:29:80:d9:f1:5e:4b:f2:fe:
3f:47:a6:16:3e:b6:a8:4f:02:ee:32:d0:34:2a:6a:
2b:3b:d9:c9:76:a8:2e:ce:ce:d1:52:77:c7:76:c7:
fc:28:bf:4a:19:c2:a6:a0:54:33:a8:1c:f9:c5:bd:
bd:52:3e:f0:49:7d:7c:dd:55:7c:a6:b6:16:a7:37:
d0:86:96:b6:f2:c4:24:8d:94:53:9b:04:0f:c0:6c:
9b:62:cb:bd:1e:ae:f2:c3:e7:e4:9c:e1:3f:79:4a:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:93:74:62:E4:73:53:CA:C5:39:05:59:9A:89:33:BE:E6:5A:BF
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/BuaTdGLkc1PKxTkFWZqJM77mWr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.248.0/22
185.163.180.0/22
213.194.212.0-213.194.255.255
IPv6:
2a0a:1c00::/29
2a0e:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:6d:9f:ae:77:aa:2f:8c:27:5a:a2:ea:95:99:17:f1:1f:9e:
29:c0:e6:5b:e0:15:89:56:b8:1f:18:d1:ba:5b:6f:fd:cc:5a:
cc:f6:1b:24:48:c6:7b:b2:8e:d8:28:6e:72:b3:3e:1b:67:af:
e8:b7:43:b6:f7:cc:02:37:c1:f6:9f:24:25:f6:b4:95:2f:91:
ad:f0:28:dc:b7:d9:55:f8:3e:19:36:a0:48:10:b7:4d:f1:a0:
b2:79:91:95:52:35:5d:33:7d:21:0a:8f:e3:63:f5:7b:cb:ed:
9a:39:2a:5b:ca:34:fe:18:03:a0:b4:c4:50:71:aa:be:2d:b5:
84:79:48:be:cb:18:16:61:84:b7:52:91:ff:15:fb:2b:3f:e9:
2f:a9:2d:67:9c:5a:b9:cc:b8:7b:11:1e:c5:06:57:ff:d9:e1:
62:87:22:f6:a1:e5:9c:be:51:56:26:2f:f0:1b:64:ad:b3:1e:
88:be:b8:c3:2a:cd:d7:5f:df:b5:a4:25:3a:a9:50:79:7c:d3:
4c:82:1a:ef:18:17:3b:e9:94:a7:4a:dc:13:c7:ac:70:65:67:
b6:e6:55:9b:8a:49:cd:00:ca:d6:49:57:2f:6b:3c:29:86:70:
82:e0:cc:08:ec:4b:35:7d:9e:2e:10:c4:48:34:a7:c6:79:71:
ef:f5:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:28 2024 by rpki-client on console-ams.rpki-client.org