Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/BcuZMMsZWCG4zS3Mw8NBjc8TOcE.roa
File: BcuZMMsZWCG4zS3Mw8NBjc8TOcE.roa (raw, json)
Hash identifier: 7dYRy0goKbOfywML2ICZvmR67LnF6OsGRPqahLandQ8=
Subject key identifier: 05:CB:99:30:CB:19:58:21:B8:CD:2D:CC:C3:C3:41:8D:CF:13:39:C1
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 01857169E021823FDD1B58A4AA3BA7F76691
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/BcuZMMsZWCG4zS3Mw8NBjc8TOcE.roa
Signing time: Mon 02 Jan 2023 07:37:22 +0000
ROA not before: Mon 02 Jan 2023 07:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15913
IP address blocks: 185.157.188.0/24 maxlen: 24
185.157.189.0/24 maxlen: 24
185.157.190.0/24 maxlen: 24
94.198.16.0/21 maxlen: 21
94.198.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e0:21:82:3f:dd:1b:58:a4:aa:3b:a7:f7:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Jan 2 07:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05cb9930cb195821b8cd2dccc3c3418dcf1339c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:b6:09:96:a9:af:7a:ad:75:76:e9:73:50:
9a:45:1b:32:7f:3e:60:d9:a9:47:31:1d:b6:cf:33:
7c:b1:cd:3f:5b:3a:f7:57:81:ba:53:13:b2:0e:01:
ac:4b:50:0c:fa:de:e7:0a:94:61:7f:ab:4f:57:9e:
04:2d:71:21:c1:d0:3b:a6:10:ca:d0:3e:4f:18:9f:
1c:94:81:e8:30:33:f3:4a:61:6a:a3:ca:1d:4a:f3:
05:c4:a4:85:ae:7d:5b:3e:0a:4b:bb:14:3f:9d:30:
04:bc:42:44:a5:f1:8e:7b:6c:08:8a:87:97:78:33:
66:cb:07:fa:13:9a:43:33:3e:41:30:e0:1c:8d:c7:
23:9e:bd:ed:62:65:e0:a1:51:29:eb:dd:b8:81:04:
59:4f:e4:bf:78:99:d1:ad:bc:12:09:3f:5f:8a:0e:
e0:c8:51:b3:6b:19:99:4c:58:b8:80:93:73:2b:a2:
2e:39:49:59:ca:ce:df:fc:bf:08:e4:e8:3d:f7:f9:
ca:51:c8:cf:e6:8c:50:87:38:a6:ef:9a:da:8d:1c:
f9:19:d0:fa:57:91:b6:bc:25:9e:92:61:b8:5b:fa:
21:2f:59:0f:60:0c:97:2f:08:82:ab:8a:22:db:af:
19:47:74:25:10:8c:25:65:32:de:42:51:87:9a:8e:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:99:30:CB:19:58:21:B8:CD:2D:CC:C3:C3:41:8D:CF:13:39:C1
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/BcuZMMsZWCG4zS3Mw8NBjc8TOcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.16.0/21
185.157.188.0-185.157.190.255
Signature Algorithm: sha256WithRSAEncryption
37:20:27:8b:ed:20:4a:20:7b:29:d0:19:a8:a9:dc:0b:d1:97:
3b:6d:ea:0e:b5:88:72:db:aa:78:ba:08:dd:a4:4f:49:1f:7b:
97:6b:36:9e:03:5c:66:c4:f4:2a:70:4b:db:02:61:b8:81:13:
2f:e3:75:0a:88:9a:3a:87:6c:37:49:b4:77:13:6e:e6:98:57:
b4:76:d8:40:c8:1f:51:a1:5e:48:11:73:03:86:2a:fb:af:43:
42:46:e7:1d:bf:cf:22:a5:e2:c8:17:58:60:9c:4c:7e:a1:35:
c2:81:ee:af:3a:f4:5b:c7:be:27:cf:1d:73:b8:20:75:2e:f0:
50:60:bb:f7:33:65:87:5e:b9:fb:17:ce:3e:d0:6d:34:9a:2b:
22:d6:9f:0b:3e:59:9b:69:19:85:22:c2:6e:05:28:9c:a8:59:
08:68:c5:11:85:37:74:59:72:33:69:16:3f:2f:5b:a2:04:fe:
7a:d2:9f:cd:f4:f6:21:08:2f:be:0b:67:f5:95:b3:14:78:35:
80:90:a7:25:64:27:d3:dc:bb:1b:2c:b2:25:7b:9f:9f:97:29:
f7:fd:45:8d:92:09:a2:76:a7:99:01:6a:ff:dd:02:a2:80:81:
25:b2:76:c6:78:e0:a5:d1:f4:dd:28:58:5b:bb:38:ec:e6:95:
b2:1e:6d:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:14 2024 by rpki-client on console-fra.rpki-client.org