Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/BzgxHGe65eNkJF_Pd2Z3vnvFOJg.roa
File: BzgxHGe65eNkJF_Pd2Z3vnvFOJg.roa (raw, json)
Hash identifier: E2qbHtoPEwhjblpuuFWiOTJdAzb9hHJ8f7jvtDIrKGw=
Subject key identifier: 07:38:31:1C:67:BA:E5:E3:64:24:5F:CF:77:66:77:BE:7B:C5:38:98
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0186E58951C544FE4DC2B26F495FFAC85E50
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/BzgxHGe65eNkJF_Pd2Z3vnvFOJg.roa
Signing time: Wed 15 Mar 2023 13:50:27 +0000
ROA not before: Wed 15 Mar 2023 13:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
2a02:1610::/32 maxlen: 32
2a02:1610::/56 maxlen: 56
2a02:1610:1:1000::/56 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:89:51:c5:44:fe:4d:c2:b2:6f:49:5f:fa:c8:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 15 13:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0738311c67bae5e364245fcf776677be7bc53898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:0a:73:78:82:6a:9b:ee:78:24:c7:9d:92:
d4:39:1a:eb:32:a9:3b:6c:07:99:ff:bc:5a:eb:9d:
78:2f:37:37:a2:92:cd:05:fa:05:25:8c:22:7c:5f:
d6:ca:b1:4c:31:86:52:bb:cf:7f:10:a8:27:67:f1:
5f:d5:ad:cc:f1:5f:93:ea:11:a2:89:40:42:72:68:
63:50:b3:8f:f4:38:70:78:bb:51:bf:84:f8:fe:35:
d7:b0:ae:5e:61:0f:0b:1b:6a:b2:bd:fb:03:52:0f:
44:1e:40:0c:5f:8b:e8:12:5f:1e:19:d5:52:ea:71:
b9:58:84:19:df:cf:6d:5b:c2:e9:f2:1f:6c:9a:27:
75:07:86:29:9d:70:a2:8e:b4:8a:86:f2:fc:7b:a3:
bc:81:e6:a9:86:41:71:56:eb:65:34:bf:5a:b8:12:
01:25:15:fe:87:e1:33:54:d5:4e:99:50:ed:f5:3b:
f6:4a:13:45:61:22:8b:e3:e5:d2:b5:97:15:e6:4b:
07:a3:1e:18:b4:b1:3d:79:49:0e:35:26:79:b4:4d:
d4:20:b1:1f:37:e8:66:f7:46:23:45:2a:1c:37:30:
3f:44:84:8e:2a:bb:2b:f9:23:82:85:30:14:f3:70:
af:0a:ba:32:e3:c6:6e:51:2f:b8:e7:d1:98:0b:2f:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:31:1C:67:BA:E5:E3:64:24:5F:CF:77:66:77:BE:7B:C5:38:98
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/BzgxHGe65eNkJF_Pd2Z3vnvFOJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
53:70:9e:1a:95:ef:c7:4e:1a:37:37:d0:81:0f:07:e9:cf:77:
d6:57:ce:8d:57:d8:c1:7e:0e:69:46:66:d7:da:02:47:34:bd:
b0:c8:79:eb:dc:34:87:08:0e:cf:8f:51:74:6c:e6:48:83:6d:
fa:e5:fd:91:db:b2:09:c4:12:ab:5f:5b:74:7f:b8:61:ab:63:
27:25:73:df:35:b5:82:b5:47:62:b1:f2:01:70:ba:50:0a:a5:
5d:c0:7f:4f:16:85:16:6c:fe:1f:96:9b:dc:4b:e3:42:00:ef:
8e:f0:79:d3:1b:9e:3c:0a:d9:ee:46:6d:db:78:b5:cc:a4:cb:
23:1f:d6:bb:da:71:af:b8:25:87:b7:01:7c:0b:d0:d2:35:18:
00:2d:51:6c:fa:8e:68:98:cc:de:4b:93:fe:c3:71:89:2a:ee:
f8:21:18:07:3e:88:0e:23:87:da:29:e5:a0:5f:ca:f6:8d:d4:
75:e0:49:1d:9e:b0:5f:fd:fc:48:7b:f6:da:c8:70:f9:ee:c1:
d7:2d:7a:10:68:69:bf:40:8e:2f:ef:59:cd:49:ca:cc:98:00:
b2:eb:16:87:6e:0e:d2:71:b1:3e:3d:8b:65:81:8a:f3:d0:45:
b6:2d:95:3a:d7:89:e2:91:31:42:06:ce:9b:d9:03:7f:0a:74:
9d:f3:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org