Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/_ev-bwNBr-yajyBIieFpi8FEVwY.roa
File: _ev-bwNBr-yajyBIieFpi8FEVwY.roa (raw, json)
Hash identifier: zpyn8sudeAAXEYmf/k/j+UHXj0RiMFiARpwCkXRq4fA=
Subject key identifier: FD:EB:FE:6F:03:41:AF:EC:9A:8F:20:48:89:E1:69:8B:C1:44:57:06
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 0187C7DBC517B9A65C90066D3E38E8447FFE
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/_ev-bwNBr-yajyBIieFpi8FEVwY.roa
Signing time: Fri 28 Apr 2023 12:34:41 +0000
ROA not before: Fri 28 Apr 2023 12:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13036
IP address blocks: 194.149.96.0/19 maxlen: 19
62.141.0.0/19 maxlen: 19
195.144.96.0/19 maxlen: 19
46.13.0.0/16 maxlen: 16
37.48.0.0/18 maxlen: 18
78.80.0.0/16 maxlen: 16
91.139.0.0/17 maxlen: 17
62.209.192.0/18 maxlen: 18
194.213.32.0/19 maxlen: 19
62.77.64.0/18 maxlen: 18
194.212.0.0/16 maxlen: 16
195.47.0.0/17 maxlen: 17
194.213.192.0/19 maxlen: 19
212.47.0.0/19 maxlen: 19
213.210.128.0/18 maxlen: 18
62.168.0.0/18 maxlen: 18
195.70.128.0/19 maxlen: 19
194.108.0.0/16 maxlen: 16
195.22.32.0/19 maxlen: 19
195.39.0.0/17 maxlen: 17
62.84.128.0/19 maxlen: 19
213.29.0.0/16 maxlen: 16
212.65.192.0/18 maxlen: 18
193.86.0.0/16 maxlen: 16
193.85.0.0/16 maxlen: 16
89.24.0.0/16 maxlen: 16
193.179.0.0/16 maxlen: 16
2001:1ae8::/29 maxlen: 29
2001:af0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:db:c5:17:b9:a6:5c:90:06:6d:3e:38:e8:44:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Apr 28 12:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdebfe6f0341afec9a8f204889e1698bc1445706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:80:32:ef:c6:96:f2:f1:7f:ad:a5:fd:90:
ee:bb:30:45:b4:1e:4f:ba:d4:c5:6b:d9:12:38:9b:
81:9e:ee:22:65:27:3b:4a:bc:2d:a1:45:70:cf:27:
4b:26:ca:6a:ca:f8:ff:8f:e9:ba:f3:c5:5b:ff:2f:
b8:22:f9:7d:d8:a1:3b:33:bc:66:f0:9a:ed:87:91:
29:5c:6c:19:1c:68:d7:7e:b6:39:13:3c:2f:ba:9c:
31:b1:91:d8:b9:8f:f7:77:17:5d:a4:a5:07:53:c2:
ce:c1:14:0c:5a:75:1a:98:9e:2e:e9:34:a0:83:4d:
76:5e:4d:37:f6:f3:73:d8:92:99:74:94:b3:d8:40:
cc:3f:dd:6c:74:8d:6f:7e:0a:70:1a:18:ef:d4:84:
9d:c3:ac:b5:6e:68:46:83:46:23:a9:2a:73:f2:3f:
56:5f:c4:32:50:ed:df:c3:8d:92:fa:75:f4:33:72:
5d:dd:27:76:bb:8f:2d:c4:8d:03:b2:f4:7c:d7:3b:
18:3a:62:b2:14:66:34:ea:e2:7e:41:a2:41:51:9f:
4c:ed:b3:28:7b:cd:e8:73:3f:88:27:05:ba:c1:cd:
7c:f9:ce:f8:94:4b:ac:ff:fe:9a:b4:fd:59:55:18:
e8:5c:99:c3:1f:19:e6:6a:df:3a:dd:c0:df:d5:98:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:FE:6F:03:41:AF:EC:9A:8F:20:48:89:E1:69:8B:C1:44:57:06
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/_ev-bwNBr-yajyBIieFpi8FEVwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.0.0/18
46.13.0.0/16
62.77.64.0/18
62.84.128.0/19
62.141.0.0/19
62.168.0.0/18
62.209.192.0/18
78.80.0.0/16
89.24.0.0/16
91.139.0.0/17
193.85.0.0-193.86.255.255
193.179.0.0/16
194.108.0.0/16
194.149.96.0/19
194.212.0.0/16
194.213.32.0/19
194.213.192.0/19
195.22.32.0/19
195.39.0.0/17
195.47.0.0/17
195.70.128.0/19
195.144.96.0/19
212.47.0.0/19
212.65.192.0/18
213.29.0.0/16
213.210.128.0/18
IPv6:
2001:af0::/32
2001:1ae8::/29
Signature Algorithm: sha256WithRSAEncryption
62:e8:1b:6d:da:6f:0c:8e:4e:7b:f7:43:6a:92:a7:2a:ab:8e:
f3:e4:ae:78:45:47:08:01:4d:8d:2f:de:4e:f9:cb:86:7d:01:
75:c5:37:dd:02:12:52:28:d4:a7:7e:80:ca:1c:d7:a6:69:df:
9d:bc:21:a5:2d:a6:93:ca:d9:81:d4:d4:09:83:3b:ba:92:01:
5c:51:46:4e:5e:43:2a:3b:19:a9:d1:c5:90:c2:97:d8:6d:1d:
e2:bd:03:09:e3:76:3f:93:aa:ce:60:83:7d:0a:4d:60:40:f8:
60:20:40:4c:d3:b4:3a:d1:5a:5f:30:67:c9:59:81:9b:e1:16:
98:10:ca:8f:30:2a:49:89:4f:31:d2:38:07:ab:7f:e7:95:74:
de:d9:ce:a0:3b:74:59:5a:c3:b5:7f:48:f3:70:e5:5d:bc:40:
9f:5a:0c:39:05:e2:ab:cd:9a:be:3a:69:24:77:7f:89:a4:ad:
03:73:8e:18:ef:34:ed:26:aa:e7:4e:ed:25:80:5b:af:36:9c:
34:a8:42:db:26:94:40:68:a8:54:2b:8e:c8:e2:da:18:a9:46:
62:59:8f:95:db:71:03:66:eb:4c:5b:05:e0:78:e4:e9:c3:17:
51:62:40:59:6f:f8:bd:67:e0:96:57:1c:e5:c8:a0:01:80:4f:
54:78:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:45 2024 by rpki-client on console-fra.rpki-client.org