Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BFVNnNHB1x8Eoqu7Da6A9hk2tGU.roa
File: BFVNnNHB1x8Eoqu7Da6A9hk2tGU.roa (raw, json)
Hash identifier: IdJVGzbdTpIXxBRy9VttHmCqOKGVoPUkSuIZjE56bzc=
Subject key identifier: 04:55:4D:9C:D1:C1:D7:1F:04:A2:AB:BB:0D:AE:80:F6:19:36:B4:65
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0189BC8286CCDFFC0C47357DFA44768FCD14
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BFVNnNHB1x8Eoqu7Da6A9hk2tGU.roa
Signing time: Thu 03 Aug 2023 17:46:58 +0000
ROA not before: Thu 03 Aug 2023 17:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 82.98.192.0/21 maxlen: 21
94.31.0.0/18 maxlen: 18
193.160.88.0/22 maxlen: 22
82.98.232.0/21 maxlen: 21
213.161.64.0/19 maxlen: 19
82.98.240.0/20 maxlen: 20
193.28.62.0/23 maxlen: 23
213.152.224.0/19 maxlen: 19
79.141.32.0/20 maxlen: 20
193.28.104.0/23 maxlen: 23
2a00:16f8::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:82:86:cc:df:fc:0c:47:35:7d:fa:44:76:8f:cd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Aug 3 17:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04554d9cd1c1d71f04a2abbb0dae80f61936b465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:94:58:4d:cf:0b:0c:65:10:9c:c6:c8:96:
ab:d3:25:3b:d4:c3:6f:ab:08:d2:2c:60:ea:78:8b:
45:c4:cc:0b:d7:3d:11:c9:54:55:70:7a:43:e1:5e:
89:eb:fa:54:2d:4a:ed:dc:46:32:71:7d:cb:45:a6:
fc:f4:f2:05:53:53:30:ca:99:10:de:58:91:23:fe:
d6:00:e3:16:13:c6:dc:0c:03:10:40:19:45:d4:33:
ac:c9:72:97:56:33:6c:d6:1f:fe:e9:cd:48:fa:2e:
e5:3c:71:5e:08:54:e2:c4:4a:4d:30:4b:61:04:4b:
38:1d:d1:64:e8:71:5a:43:41:7a:4a:a4:55:c0:bf:
9f:ed:eb:a7:38:c7:13:3f:c5:c3:ce:ba:a5:f0:fe:
d5:96:36:87:73:b2:14:04:e7:40:c4:76:e2:06:2e:
6d:76:03:d9:36:aa:c7:b1:8d:3f:74:2a:ef:48:24:
30:26:2c:ab:77:4b:1f:1e:b1:b5:99:de:82:a1:83:
76:b6:da:92:46:f2:78:fb:ca:3f:ab:9b:86:d1:8e:
cf:91:f6:17:a5:ac:9b:59:59:41:48:77:a3:2d:90:
5c:57:58:81:74:32:47:44:3d:b5:83:0f:63:19:8f:
83:8a:8b:5b:60:36:d8:c9:4c:4a:46:34:d9:03:d7:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:4D:9C:D1:C1:D7:1F:04:A2:AB:BB:0D:AE:80:F6:19:36:B4:65
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BFVNnNHB1x8Eoqu7Da6A9hk2tGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.32.0/20
82.98.192.0/21
82.98.232.0-82.98.255.255
94.31.0.0/18
193.28.62.0/23
193.28.104.0/23
193.160.88.0/22
213.152.224.0/19
213.161.64.0/19
IPv6:
2a00:16f8::/29
Signature Algorithm: sha256WithRSAEncryption
a7:d0:14:2b:a9:56:2b:71:22:75:55:35:f5:3a:75:8a:1b:40:
f7:40:91:52:0d:ff:01:78:62:25:da:6d:12:e4:3a:ac:4f:10:
57:44:24:8c:c7:20:7f:77:27:8f:18:7a:07:a7:82:34:e1:d0:
1c:27:e6:44:ca:dc:8c:e3:a9:98:00:90:4f:94:95:97:34:86:
ec:f5:d0:71:cc:6d:77:bd:0f:b6:62:82:1e:cc:01:c3:5a:31:
18:c4:5c:63:1c:90:f2:6b:0e:20:e9:b2:b7:1a:69:b4:db:2f:
ee:d0:89:61:01:78:f4:00:f6:b9:f1:d4:85:e2:31:57:c2:09:
1c:94:a7:22:02:79:78:23:bb:72:85:11:d8:c5:a3:7d:05:e7:
27:7d:d8:0e:ce:05:47:41:3c:a1:cc:6a:fe:cf:bc:0c:c1:99:
8a:d8:31:4a:ad:4b:05:ef:84:3b:ed:18:08:b3:1b:b9:b8:19:
d4:ec:15:ca:71:6f:11:d3:32:9e:2b:bf:b7:84:ca:05:7b:3c:
72:54:f6:36:c7:c1:58:de:61:39:5e:fe:48:ef:0f:aa:df:54:
54:4e:d6:da:c1:e8:c6:83:98:ad:e7:a0:1e:fe:e5:06:77:ea:
cd:df:04:73:8b:fd:01:06:48:f6:ae:fd:5c:f8:17:4c:b4:93:
c2:a0:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:40 2024 by rpki-client on console-ams.rpki-client.org