Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/BkebW0-6b9itFGNS54CoUNvgVRs.roa
File: BkebW0-6b9itFGNS54CoUNvgVRs.roa (raw, json)
Hash identifier: h0rTNgmtEWK9Fnw8HNDMQP5EwLtgRKAO0P/uvhtjVCI=
Subject key identifier: 06:47:9B:5B:4F:BA:6F:D8:AD:14:63:52:E7:80:A8:50:DB:E0:55:1B
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0188C08DE14834477019AC720BDF77C1E58B
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/BkebW0-6b9itFGNS54CoUNvgVRs.roa
Signing time: Thu 15 Jun 2023 19:35:03 +0000
ROA not before: Thu 15 Jun 2023 19:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 Jun 2023 07:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:8d:e1:48:34:47:70:19:ac:72:0b:df:77:c1:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 15 19:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06479b5b4fba6fd8ad146352e780a850dbe0551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:73:a8:57:c0:52:77:9f:63:38:0b:0a:5a:
2d:01:57:42:db:92:c1:0d:e8:02:ac:c7:b7:54:80:
b5:ec:37:bf:c8:f8:8e:ab:33:3b:a3:b6:71:c9:76:
ce:f9:90:d9:10:65:3e:10:e6:04:85:16:98:53:b3:
be:0b:1f:02:78:a9:61:7a:d0:2c:51:64:2d:f5:c3:
e0:3b:f4:f9:62:34:4f:97:48:66:10:7d:72:e2:dc:
c0:6d:51:55:31:b8:09:09:44:a2:d8:91:34:dc:51:
7d:f9:87:78:75:69:29:20:95:52:9b:6b:86:fe:09:
ad:de:11:73:6c:24:ce:72:7e:81:7f:5c:5b:95:67:
d9:34:35:56:13:89:39:ce:06:e6:2d:29:e8:dd:45:
c2:ae:a3:c2:c4:7b:c8:59:35:39:e8:ac:42:87:65:
fa:c7:bc:77:48:27:b0:22:66:55:98:55:43:0c:13:
a9:da:bc:2e:e9:6c:22:a1:1c:be:00:f8:b9:86:3a:
2d:bd:f8:65:07:a6:e5:d7:2f:87:b1:97:48:e1:a2:
ce:ef:d2:6d:b0:5f:2f:5c:98:99:96:e8:4b:cb:63:
7b:bb:47:0a:3e:40:fc:e3:3d:7f:59:bf:2d:73:24:
c7:bf:36:b0:3a:ca:fd:bc:1c:39:48:99:b0:5a:9a:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:9B:5B:4F:BA:6F:D8:AD:14:63:52:E7:80:A8:50:DB:E0:55:1B
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/BkebW0-6b9itFGNS54CoUNvgVRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.42.0/24
89.43.44.0/24
89.43.46.0/24
89.43.73.0/24
93.113.158.0/24
93.114.55.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
7c:e3:50:60:ab:8d:b1:c3:30:55:5c:45:a6:27:e3:ed:63:19:
08:e2:04:dd:1e:e0:fe:bb:90:d2:06:23:4c:19:52:71:5a:fa:
ed:19:dc:0b:3c:c8:2f:4e:a3:3b:da:b3:18:9a:7e:d3:4f:69:
4a:70:05:d0:97:10:80:32:ae:bb:4b:03:07:07:fd:e2:ad:d9:
63:99:0c:02:64:85:e2:e4:c6:69:9f:32:cd:71:c7:f1:f1:68:
09:e3:89:66:ef:52:c9:1d:0f:a0:23:6c:0b:5f:71:28:54:ae:
e4:07:5a:69:aa:d9:61:d2:a5:7a:a8:d3:40:eb:85:6c:af:9c:
33:6a:9c:b9:5e:ed:d5:4f:04:76:cd:11:03:ad:93:9c:e6:7a:
14:ad:f5:3f:c0:72:72:bc:27:6f:c5:46:48:d0:cb:f5:a6:c5:
8e:00:1b:4d:db:c4:5c:37:3e:18:f3:be:97:d7:82:0c:4d:6a:
8c:5d:74:30:5a:fa:c3:7d:b2:90:85:75:28:b8:c6:f4:7f:be:
24:ea:24:24:bf:36:7c:96:9f:c3:23:7d:bd:0e:86:20:c7:36:
25:58:5f:b9:35:73:46:46:84:1a:8c:3e:de:1e:91:82:01:cb:
b8:aa:1e:ee:ac:f1:9f:ac:bf:a1:d8:2d:d9:8e:31:b4:2f:f6:
fb:89:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org