Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/BSLL6eQhBKNrcwuet6p7ZzNBBXg.roa
File: BSLL6eQhBKNrcwuet6p7ZzNBBXg.roa (raw, json)
Hash identifier: XylVFmLumZwDdTCjMRrYVVAPc+9vQDs+mjkXO9vD+80=
Subject key identifier: 05:22:CB:E9:E4:21:04:A3:6B:73:0B:9E:B7:AA:7B:67:33:41:05:78
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 018CC56E2C2186F589A9FDE552ED25D86777
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/BSLL6eQhBKNrcwuet6p7ZzNBBXg.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12620
IP address blocks: 195.190.160.0/19 maxlen: 19
62.48.96.0/19 maxlen: 19
176.46.192.0/18 maxlen: 18
185.179.16.0/22 maxlen: 22
84.55.192.0/18 maxlen: 18
2001:4b00::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2c:21:86:f5:89:a9:fd:e5:52:ed:25:d8:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0522cbe9e42104a36b730b9eb7aa7b6733410578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:40:dd:8d:5f:27:8c:df:18:ec:a6:80:6e:
26:d9:06:31:7e:f7:96:03:57:71:99:5d:e2:a3:40:
8e:16:42:d7:e9:66:25:c4:36:e1:4b:f8:d3:fc:fe:
6a:2c:30:06:0f:91:cd:9a:0e:fa:98:0e:65:ee:4c:
14:de:3b:e5:4e:32:16:f9:f0:2d:63:8f:4b:65:ee:
9a:6a:d3:30:72:77:ee:25:05:3f:6a:55:ba:10:e1:
de:75:5f:39:de:84:40:e8:14:5f:ac:7a:95:7b:07:
96:e9:66:d8:f8:9a:83:a3:a6:f6:84:bd:99:ab:9a:
c7:56:53:c2:4d:7d:1e:ef:b7:75:70:db:fe:d8:67:
be:98:66:43:b2:8a:bb:b3:4d:13:24:b3:78:66:c8:
7e:45:c8:ef:73:ab:b8:93:91:ce:b9:48:67:53:4a:
0c:a3:a4:6b:d2:a9:13:cc:c6:7c:8a:c1:53:b9:d0:
bf:80:64:b2:3d:5d:da:4b:49:17:06:1e:40:1c:35:
09:d0:c2:ad:cf:c8:aa:10:c8:f2:b6:30:2a:f6:86:
10:18:d8:75:ea:76:a7:a7:1d:08:df:22:d6:1d:55:
48:e4:01:93:b8:42:a1:14:de:4b:c8:8a:71:da:19:
e6:46:7d:d4:e7:71:ed:88:25:b7:2c:e3:bb:7d:8c:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:CB:E9:E4:21:04:A3:6B:73:0B:9E:B7:AA:7B:67:33:41:05:78
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/BSLL6eQhBKNrcwuet6p7ZzNBBXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.48.96.0/19
84.55.192.0/18
176.46.192.0/18
185.179.16.0/22
195.190.160.0/19
IPv6:
2001:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:06:10:5f:b6:f8:7a:41:5a:43:15:d5:78:90:06:4b:77:0c:
b1:bb:61:2f:b3:ae:ad:50:23:9c:5c:0f:0f:d5:e7:6f:d4:ab:
42:9b:ef:99:c4:f6:7c:59:91:6f:8d:fb:39:99:43:ce:b4:f3:
77:6a:7c:fd:44:2e:e1:c3:fa:bb:f0:54:91:57:b4:23:ac:3b:
50:e9:7f:2e:41:da:ad:76:ee:a6:87:86:11:8f:f6:32:05:f0:
8d:5f:62:2b:2b:a6:8c:cf:60:d2:95:89:a6:1f:5e:af:e3:05:
a7:17:55:f1:5d:ab:14:9f:01:8e:1c:ed:9d:01:da:4d:87:7f:
f4:44:1b:36:fc:d4:f2:0f:cc:e6:a1:51:48:cf:89:b4:d0:fa:
4d:29:3a:32:dd:41:06:78:30:46:50:eb:e7:33:48:0f:66:b6:
35:fa:b7:2a:55:71:ee:17:8b:4a:f6:75:9d:99:71:8b:5b:3f:
21:50:56:f4:45:be:bd:4d:79:88:f1:5d:1a:4e:88:f0:9b:15:
07:7d:8d:ad:d1:57:c4:17:39:28:99:b3:e5:c8:ef:e2:44:8e:
b0:0b:a3:98:b8:1f:03:ba:9a:63:59:94:dc:38:63:7a:d3:b6:
bb:ae:1f:7a:3e:c8:b3:04:e7:c6:f5:1c:2b:95:c0:a8:90:89:
47:b0:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:39 2025 by rpki-client