Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/B6hJRYupgSoy4GPFGftXyfLZxA8.roa
File: B6hJRYupgSoy4GPFGftXyfLZxA8.roa (raw, json)
Hash identifier: VZaQQjBuhGtAxAU/8v8Ty70x8UOau5mq13cDr5pJ4TY=
Subject key identifier: 07:A8:49:45:8B:A9:81:2A:32:E0:63:C5:19:FB:57:C9:F2:D9:C4:0F
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 018C5D9839B60EEB4E88553FEC8B753A62D1
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/B6hJRYupgSoy4GPFGftXyfLZxA8.roa
Signing time: Tue 12 Dec 2023 10:35:06 +0000
ROA not before: Tue 12 Dec 2023 10:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 94.124.4.0/24 maxlen: 24
94.124.2.0/23 maxlen: 23
94.124.0.0/21 maxlen: 21
94.124.1.0/24 maxlen: 24
94.124.0.0/24 maxlen: 24
94.124.8.0/21 maxlen: 21
94.124.7.0/24 maxlen: 24
94.124.6.0/24 maxlen: 24
94.124.5.0/24 maxlen: 24
185.28.16.0/24 maxlen: 24
185.28.16.0/22 maxlen: 22
185.28.18.0/23 maxlen: 23
80.82.16.0/23 maxlen: 23
80.82.22.0/24 maxlen: 24
80.82.22.0/23 maxlen: 23
80.82.20.0/23 maxlen: 23
80.82.18.0/23 maxlen: 23
80.82.30.0/23 maxlen: 23
80.82.29.0/24 maxlen: 24
80.82.28.0/24 maxlen: 24
80.82.26.0/23 maxlen: 23
80.82.25.0/24 maxlen: 24
91.189.253.0/24 maxlen: 24
91.189.250.0/24 maxlen: 24
91.189.248.0/21 maxlen: 21
46.22.164.0/23 maxlen: 23
46.22.163.0/24 maxlen: 24
46.22.160.0/24 maxlen: 24
46.22.170.0/24 maxlen: 24
46.22.169.0/24 maxlen: 24
46.22.168.0/24 maxlen: 24
46.22.167.0/24 maxlen: 24
46.22.173.0/24 maxlen: 24
2a02:f78::/32 maxlen: 32
2a02:f7f:14::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:98:39:b6:0e:eb:4e:88:55:3f:ec:8b:75:3a:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Dec 12 10:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07a849458ba9812a32e063c519fb57c9f2d9c40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:c3:1c:c4:a2:2e:63:72:c3:4a:fb:1c:da:
ee:15:31:96:c3:3c:44:c6:a1:98:8a:2d:98:6f:8d:
cc:e6:81:42:02:ea:49:ff:12:2c:4e:c5:ec:05:de:
b8:07:c1:16:aa:fe:04:d6:49:97:5e:b1:6b:9d:83:
35:c0:e4:5f:2f:44:26:10:9e:b1:c3:89:6f:98:fd:
e5:52:d4:d4:0a:a6:f8:0e:1f:da:e1:63:2d:61:20:
fb:a5:bd:7f:0e:37:32:c6:e2:6e:82:4f:bb:3f:d0:
65:24:6b:ab:6a:26:b8:15:1d:a6:42:ea:33:38:77:
66:d0:b5:d6:61:51:f2:f8:44:d0:f2:ea:06:19:fd:
43:a6:d4:26:a1:42:6f:d4:59:56:9c:12:f6:2c:cb:
c1:9e:64:dd:19:7b:f5:b6:c8:f8:9d:de:22:ce:bb:
8d:5c:bc:4e:3b:2a:1b:04:b3:9e:f9:9a:14:db:a6:
db:71:c1:50:90:83:e1:9d:c9:9b:dc:65:f6:f3:3f:
01:be:4b:55:d1:f6:c0:3c:a8:18:78:c8:8b:80:6e:
7d:c0:9a:e2:f4:25:fe:a7:fc:19:dd:b8:a3:ce:e6:
28:3d:46:b6:86:04:1b:da:4d:eb:36:ff:da:e3:a8:
e6:8b:e1:63:5e:02:e9:ed:2b:dd:02:d2:2e:d4:90:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:49:45:8B:A9:81:2A:32:E0:63:C5:19:FB:57:C9:F2:D9:C4:0F
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/B6hJRYupgSoy4GPFGftXyfLZxA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.160.0/24
46.22.163.0-46.22.165.255
46.22.167.0-46.22.170.255
46.22.173.0/24
80.82.16.0/21
80.82.25.0-80.82.31.255
91.189.248.0/21
94.124.0.0/20
185.28.16.0/22
IPv6:
2a02:f78::/32
2a02:f7f:14::/48
Signature Algorithm: sha256WithRSAEncryption
51:e3:28:e2:ba:51:0b:2c:70:3f:74:5c:a8:a2:f5:86:71:89:
85:b2:59:32:5b:5f:45:f4:b7:92:23:56:48:25:18:a5:a6:41:
a2:ba:86:2e:7e:77:02:1f:22:5e:35:cf:f8:ff:f6:d2:eb:03:
a7:f3:e7:3a:27:0b:45:98:60:9f:28:3e:2e:3b:38:fe:d5:8d:
93:1b:e9:d2:70:42:a6:dc:75:96:24:b1:d5:d6:8a:32:26:90:
df:83:47:3e:1c:c2:e8:42:6c:5b:0f:80:2c:0e:0e:e6:39:4a:
1e:94:60:09:ae:8e:41:23:16:de:61:ec:96:3f:7a:11:e4:82:
41:9d:97:da:2c:79:47:de:85:bc:95:f0:36:5e:27:07:ef:03:
ee:cf:7b:24:df:1e:30:96:ca:8c:4c:49:e8:98:42:c7:b1:3f:
65:67:80:b8:fd:09:40:ec:cc:ae:05:7d:9f:65:30:2a:58:cb:
a2:1e:71:08:f2:73:d4:93:a9:9e:62:dc:be:8e:0b:af:ed:8d:
77:a0:40:44:1d:91:6f:c4:42:cf:ad:b2:4f:b6:61:2d:ed:86:
be:d6:e5:aa:a0:b9:ba:54:3f:78:4c:6c:23:f4:dc:58:83:37:
01:51:2c:0c:b6:94:1d:93:96:46:c4:37:2f:12:98:2a:69:d4:
a0:05:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:10 2024 by rpki-client on console-fra.rpki-client.org