Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/BcD5t_3CvYKHJ7DY5EO_N5kvA5g.roa
File: BcD5t_3CvYKHJ7DY5EO_N5kvA5g.roa (raw, json)
Hash identifier: 6y9PokBYt0nlMimEHcDDD9WTwR377ddyO4QMX9n7vlQ=
Subject key identifier: 05:C0:F9:B7:FD:C2:BD:82:87:27:B0:D8:E4:43:BF:37:99:2F:03:98
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 018CC64B5404840E3A51D0AA16D1A9DC19B1
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/BcD5t_3CvYKHJ7DY5EO_N5kvA5g.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29244
IP address blocks: 91.92.11.0/24 maxlen: 24
91.92.9.0/24 maxlen: 24
91.92.10.0/24 maxlen: 24
91.92.8.0/24 maxlen: 24
91.92.13.0/24 maxlen: 24
91.92.12.0/24 maxlen: 24
91.92.14.0/24 maxlen: 24
91.92.15.0/24 maxlen: 24
85.118.192.0/21 maxlen: 21
193.193.182.0/24 maxlen: 24
193.194.147.0/24 maxlen: 24
193.194.155.0/24 maxlen: 24
193.193.171.0/24 maxlen: 24
149.62.192.0/18 maxlen: 18
149.62.204.0/24 maxlen: 24
149.62.206.0/24 maxlen: 24
149.62.205.0/24 maxlen: 24
149.62.208.0/24 maxlen: 24
149.62.209.0/24 maxlen: 24
149.62.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 13:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:54:04:84:0e:3a:51:d0:aa:16:d1:a9:dc:19:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05c0f9b7fdc2bd828727b0d8e443bf37992f0398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:b9:d5:7c:e9:a4:e8:0d:5e:71:fd:ff:1c:
85:94:a2:1f:90:f0:8f:05:19:4b:a8:fb:f3:91:94:
10:d9:28:ed:e6:b0:c6:00:c5:76:fd:e4:d9:c4:b6:
8c:80:e2:46:ae:d8:97:a4:85:5d:61:1f:c1:68:ac:
31:4f:55:51:60:a9:14:cf:c2:8a:f6:5f:e6:4f:b7:
10:b1:ed:88:f3:e9:a6:61:94:c5:d8:a6:c8:ae:0a:
6f:f8:82:dc:8c:cb:9b:3b:bc:19:d1:11:3f:a3:e9:
2b:0a:3b:66:0c:a1:51:38:4c:cb:d0:3d:84:56:17:
b5:56:65:a5:45:d0:f4:57:bf:5b:64:c6:59:64:68:
1f:4b:8b:e4:36:00:db:25:15:41:1e:5c:ab:93:b2:
d9:ef:cf:2d:5c:ec:6c:70:05:61:6a:f2:7b:61:58:
ca:41:93:ae:49:49:bd:08:49:75:04:4b:e7:9f:dc:
29:82:ad:13:dd:ae:73:c9:60:bd:71:a7:70:ec:c2:
96:aa:44:c8:00:02:a8:88:6c:01:ee:09:4d:e5:d5:
55:07:63:b2:b7:eb:f1:2e:5d:b9:b5:5d:e7:29:5e:
6a:1e:40:75:e0:76:bc:28:50:a2:e4:67:9a:45:ea:
d2:6c:2f:6e:40:1a:86:9b:ee:af:c4:2c:97:a0:cf:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:F9:B7:FD:C2:BD:82:87:27:B0:D8:E4:43:BF:37:99:2F:03:98
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/BcD5t_3CvYKHJ7DY5EO_N5kvA5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.192.0/21
91.92.8.0/21
149.62.192.0/18
193.193.171.0/24
193.193.182.0/24
193.194.147.0/24
193.194.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:46:70:89:8a:9c:66:f5:c6:dc:7c:b2:30:f9:f4:3a:ab:58:
1a:f8:be:c2:51:60:3c:f9:91:c0:a0:5b:bc:40:0e:d5:b5:8c:
b5:ee:f0:a3:c9:58:3c:fe:25:5b:d2:0b:88:bd:9c:ae:47:6f:
a3:28:51:26:ff:af:46:9d:c5:45:7f:9e:cc:cf:50:65:01:80:
b4:ce:e9:81:a7:bc:90:40:58:c0:b7:e6:5f:d3:d4:14:36:ee:
b6:fe:73:fc:09:79:6c:df:e4:ef:2a:88:c8:3f:1f:7e:59:fa:
a0:fd:c1:61:33:fd:38:5f:46:83:2e:ca:90:3d:ec:e0:3d:7c:
da:e4:1a:02:68:c9:1c:6e:c3:00:91:e7:b3:1a:44:ff:84:b7:
64:81:40:41:ee:94:50:e1:32:2a:4c:c6:2f:31:75:cf:14:4c:
68:7d:85:43:af:d9:66:cb:60:ae:f3:c5:99:e0:11:a6:33:b5:
7b:b4:56:a0:87:20:51:80:01:30:1b:22:28:5d:41:26:48:b5:
da:05:05:e1:09:02:a7:84:3f:d6:4b:36:b4:99:b6:d6:49:e0:
5c:a7:00:ed:56:5c:e8:78:d1:9e:dc:47:b0:98:fb:e6:76:f1:
b6:9b:59:12:2a:bf:19:43:b2:dc:8e:97:7b:12:c4:c2:5d:55:
37:ec:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org