Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bvhmsEH13hrPYd4skQbCzlr1vKU.roa
File: bvhmsEH13hrPYd4skQbCzlr1vKU.roa (raw, json)
Hash identifier: Zntv7spZm88fu3ZNhv/uV75BrGeTfgQ4MsNRofBTVdA=
Subject key identifier: 6E:F8:66:B0:41:F5:DE:1A:CF:61:DE:2C:91:06:C2:CE:5A:F5:BC:A5
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB394A3E187781A5FF4660C508103E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bvhmsEH13hrPYd4skQbCzlr1vKU.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207177
IP address blocks: 91.242.81.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.86.16.0/22 maxlen: 22
45.86.17.0/24 maxlen: 24
45.86.16.0/24 maxlen: 24
45.86.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 05:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:39:4a:3e:18:77:81:a5:ff:46:60:c5:08:10:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ef866b041f5de1acf61de2c9106c2ce5af5bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:5e:15:7f:c0:12:b8:42:9e:e4:5d:b1:49:
93:e3:60:57:85:d4:7f:3d:15:ee:34:27:28:59:05:
31:db:89:d9:94:e1:81:7e:18:ca:35:90:e7:ba:0b:
7a:3b:27:4c:8e:7f:59:bc:66:27:0c:c5:3c:27:f1:
23:1b:eb:ae:c0:e1:8f:1d:91:a6:28:e7:02:d5:cd:
3e:16:5c:2a:12:79:a6:95:0b:fc:dd:19:59:a1:cb:
91:94:ca:41:c2:82:67:1e:06:1d:c6:00:9d:2c:51:
a5:ed:33:90:59:83:d1:7d:41:8f:d2:88:c6:4d:94:
f3:01:06:67:fb:86:b8:da:ed:05:73:aa:5b:11:47:
73:0f:ed:f1:ef:13:46:65:be:88:ab:6b:44:0d:82:
4b:a2:46:ac:33:6c:47:26:9b:ea:7b:16:a1:f9:d4:
25:8b:f8:23:46:7d:50:b2:4c:22:f6:c3:38:9b:9a:
ae:dc:4c:3f:ca:e1:1c:74:73:8c:31:10:a6:31:e1:
8d:36:8f:91:41:1f:06:be:2f:33:6f:54:3b:f4:ed:
3b:f9:87:2d:51:de:c0:91:41:de:73:d4:48:e6:fb:
3c:8b:b7:e6:c3:60:90:c1:c5:4a:5e:cc:13:11:e1:
6b:9c:0a:36:fd:98:50:96:2b:a6:b8:cc:34:b1:99:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:66:B0:41:F5:DE:1A:CF:61:DE:2C:91:06:C2:CE:5A:F5:BC:A5
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bvhmsEH13hrPYd4skQbCzlr1vKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
45.86.16.0/22
91.242.81.0/24
171.22.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:28:6b:93:07:80:34:45:7a:04:e8:e6:e1:3c:21:a5:b5:66:
ad:82:b8:ef:d3:d7:51:ec:f1:6a:21:cd:12:98:59:0c:45:82:
06:8b:c4:df:8b:c2:bd:72:f9:be:4e:8e:3f:b1:ce:d4:97:49:
66:49:3b:e1:8f:5e:75:8a:a0:a3:65:94:5a:68:77:08:83:43:
65:19:d2:35:1a:32:e2:10:27:70:36:83:8c:7d:19:3d:44:b0:
a2:e1:c7:dc:50:1f:5a:dd:7d:67:85:10:bd:3e:2f:b1:7d:ea:
11:d1:c0:88:02:7c:61:99:bc:5a:41:0b:f8:4f:2d:36:c3:45:
b1:9b:f2:bd:b0:9f:24:2e:ae:96:0a:f3:7e:a0:93:d9:df:c6:
9c:43:a6:72:21:2c:b9:19:45:b0:9e:3e:18:22:17:a4:c8:e9:
7b:25:8d:48:8e:fc:2e:64:38:0c:24:44:3e:f7:04:f0:e8:12:
ee:8c:e7:45:8e:63:e1:b9:e7:73:e8:b2:2a:a0:ea:73:5c:10:
1f:53:20:ff:ca:ec:07:f4:98:82:76:f4:1c:e0:00:90:20:65:
c6:6a:93:4d:7a:06:82:ca:3c:db:6b:05:c0:c1:da:28:b7:a4:
5a:eb:06:5c:60:a4:78:fe:21:d8:2c:84:fd:f7:a5:34:0e:d7:
3f:e6:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:35:25 2024 by rpki-client on console-fra.rpki-client.org