Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/BB3JzCOCz6tj3Nang-qNpNutzXE.roa
File: BB3JzCOCz6tj3Nang-qNpNutzXE.roa (raw, json)
Hash identifier: 4bc1tMrAw2BGB8l0sm+8k78hVZQAnI/BUwokX0ZeAMM=
Subject key identifier: 04:1D:C9:CC:23:82:CF:AB:63:DC:D6:A7:83:EA:8D:A4:DB:AD:CD:71
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0188E124FE93D19D81FB906AA6FDE91F7CC2
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/BB3JzCOCz6tj3Nang-qNpNutzXE.roa
Signing time: Thu 22 Jun 2023 03:27:58 +0000
ROA not before: Thu 22 Jun 2023 03:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 178.171.50.0/23 maxlen: 24
178.171.48.0/23 maxlen: 24
158.46.149.0/24 maxlen: 24
158.46.148.0/24 maxlen: 24
178.171.60.0/23 maxlen: 24
178.171.62.0/23 maxlen: 24
178.171.70.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
158.46.162.0/23 maxlen: 23
158.46.160.0/23 maxlen: 23
178.171.84.0/22 maxlen: 24
158.46.177.0/24 maxlen: 24
158.46.176.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.0.0/20 maxlen: 24
178.171.20.0/22 maxlen: 24
178.171.32.0/22 maxlen: 22
178.171.36.0/24 maxlen: 24
178.171.37.0/24 maxlen: 24
158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
158.46.192.0/22 maxlen: 22
178.171.94.0/24 maxlen: 24
158.46.188.0/22 maxlen: 24
178.171.104.0/24 maxlen: 24
178.171.101.0/24 maxlen: 24
178.171.102.0/24 maxlen: 24
158.46.196.0/22 maxlen: 24
178.171.100.0/24 maxlen: 24
178.171.110.0/23 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.200.0/21 maxlen: 24
158.46.207.0/24 maxlen: 24
178.171.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:24:fe:93:d1:9d:81:fb:90:6a:a6:fd:e9:1f:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jun 22 03:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=041dc9cc2382cfab63dcd6a783ea8da4dbadcd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:13:4b:3b:c1:d6:88:2c:c5:19:a4:4e:20:
93:5e:89:80:8e:36:b3:04:04:55:a9:d7:b2:5f:cd:
82:5f:a9:f5:0a:ae:90:9d:80:35:72:37:db:2a:ac:
61:37:61:85:2d:c9:6a:7e:b4:8a:3f:11:ed:00:5f:
a5:7f:ad:60:d1:41:28:be:58:ef:a7:fa:e2:bb:c7:
02:93:59:a4:71:fa:6a:32:46:c5:ca:f6:14:10:12:
27:a1:91:28:21:25:ea:8b:a1:b1:87:8c:f2:9c:96:
b9:07:ba:ff:e9:62:cd:49:89:2f:fb:c3:60:47:87:
bd:16:e7:f5:65:af:49:91:b2:4a:9b:b7:54:53:f1:
20:8d:5d:6f:64:aa:72:7b:99:6e:e8:13:01:56:3c:
11:6b:3e:3f:6c:12:7b:f3:da:87:de:71:3d:57:1d:
12:b8:ce:d1:19:fa:01:2b:0a:cd:0b:1c:cd:e1:82:
56:07:74:b4:cc:bf:08:7a:75:8b:e4:38:24:5a:0d:
a9:d3:13:8b:6f:78:06:c3:74:1f:92:d2:3b:9a:a2:
08:97:c8:b0:c8:4d:1f:42:cd:14:69:9e:37:b6:62:
8d:f2:c0:20:df:cd:80:6d:3f:68:ee:90:7d:78:f3:
8a:69:91:c0:9d:26:6b:72:77:1d:13:60:eb:73:1a:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:C9:CC:23:82:CF:AB:63:DC:D6:A7:83:EA:8D:A4:DB:AD:CD:71
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/BB3JzCOCz6tj3Nang-qNpNutzXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.148.0/23
158.46.160.0/22
158.46.176.0/23
158.46.188.0-158.46.207.255
158.46.250.0/23
178.171.0.0/20
178.171.20.0/22
178.171.32.0-178.171.37.255
178.171.48.0/22
178.171.60.0/22
178.171.69.0-178.171.70.255
178.171.84.0-178.171.89.255
178.171.94.0/24
178.171.100.0-178.171.102.255
178.171.104.0/24
178.171.110.0/23
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:61:34:4a:22:9b:48:ab:10:ab:d8:92:3b:c2:20:f5:81:d7:
67:36:b7:9e:d1:81:1e:dd:63:b0:6b:52:ce:a4:de:9b:14:67:
f2:59:df:ed:ad:01:fe:b7:6f:a5:3b:94:a0:76:f5:70:e1:19:
14:95:c4:56:66:17:a1:4d:b3:fd:b3:17:22:90:bf:2f:dc:c1:
84:99:a7:c9:59:18:60:ea:ae:28:ab:d7:c7:61:69:47:97:4c:
44:2a:b0:7d:9c:0f:80:20:dc:86:ac:d5:dc:9a:e3:ed:97:76:
27:5f:23:2d:0a:a7:a6:75:e7:1a:45:98:05:5c:e0:95:16:bd:
3b:2a:19:35:c3:fa:f0:3e:02:16:41:20:73:ff:c8:80:a9:20:
2c:d0:14:6d:42:69:f2:4b:06:36:cb:b8:a7:8f:9f:e4:97:3a:
7d:5f:dd:ac:99:5b:88:d7:6e:08:00:15:c1:97:01:85:5f:83:
85:f2:ce:82:ed:f7:df:e3:68:a6:8b:00:24:bf:b4:68:07:49:
9e:d7:3c:c0:11:df:76:d6:54:a3:60:9e:29:a1:3e:b9:88:a9:
d0:2c:a8:62:3e:8e:ef:25:14:66:c2:9f:6e:73:f9:2b:e5:c8:
83:9f:bc:ff:b2:0f:f5:98:c8:1d:8c:d3:15:b1:15:2d:76:77:
90:c6:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:16 2024 by rpki-client on console-ams.rpki-client.org