Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/BoRRNLGD-LPWDz22vWHIIia8MdI.roa
File: BoRRNLGD-LPWDz22vWHIIia8MdI.roa (raw, json)
Hash identifier: FQHwkqQAYVIbCX5whp8fIRfgVvjdFImiz81zPp8MmX4=
Subject key identifier: 06:84:51:34:B1:83:F8:B3:D6:0F:3D:B6:BD:61:C8:22:26:BC:31:D2
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018572B4394A01B3318B7FAF46E4EF4FEAB2
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/BoRRNLGD-LPWDz22vWHIIia8MdI.roa
Signing time: Mon 02 Jan 2023 13:38:11 +0000
ROA not before: Mon 02 Jan 2023 13:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8194
IP address blocks: 212.70.160.0/19 maxlen: 24
31.24.192.0/21 maxlen: 24
195.244.144.0/20 maxlen: 24
2a00:1780::/32 maxlen: 48
2a00:1780:dd00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:39:4a:01:b3:31:8b:7f:af:46:e4:ef:4f:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 2 13:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06845134b183f8b3d60f3db6bd61c82226bc31d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:75:07:cc:41:83:01:f3:61:60:e8:8d:01:
f7:4d:17:95:b1:4e:83:25:29:e4:6a:78:2a:67:b8:
d2:44:96:fc:c9:b6:0b:b3:ce:76:97:13:70:cf:e4:
1a:89:e3:d5:5f:d7:63:48:c9:04:88:f4:76:fa:26:
d8:56:e7:aa:d8:19:9b:d6:d3:30:dd:e3:0c:2e:94:
69:3b:30:5f:d2:d4:5f:c9:92:0e:c9:db:02:e1:de:
2d:d2:f0:c8:52:30:85:98:84:b4:ae:72:c1:a6:1e:
3e:90:0b:bd:36:3a:f2:5e:f8:cc:2c:45:1b:02:2a:
24:d7:d0:16:de:95:09:9f:76:3d:f7:ef:ff:9b:8b:
5d:9f:47:2c:3f:dc:9d:1d:11:fa:3c:9a:03:25:23:
ef:6b:51:d3:2d:c5:64:e0:8e:41:b6:e5:3d:1c:9c:
dc:47:66:67:0e:30:46:86:10:40:3e:db:61:6d:bc:
c8:d1:dc:8b:fc:32:61:90:85:6a:9d:09:ca:b8:b8:
96:4d:52:f4:b9:08:74:bd:d8:4e:21:5b:80:94:28:
86:9a:13:67:60:e0:74:47:d2:c7:96:4b:57:cb:82:
71:a7:40:84:6a:93:e0:93:4f:d6:7d:f4:3c:1a:f8:
18:94:74:ac:cb:8d:63:47:7c:08:d0:74:ee:c1:83:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:51:34:B1:83:F8:B3:D6:0F:3D:B6:BD:61:C8:22:26:BC:31:D2
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/BoRRNLGD-LPWDz22vWHIIia8MdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.192.0/21
195.244.144.0/20
212.70.160.0/19
IPv6:
2a00:1780::/32
Signature Algorithm: sha256WithRSAEncryption
57:b9:03:6d:fe:6c:83:7b:3e:a5:22:3f:51:bd:55:d9:0d:1a:
81:b0:52:3b:dd:2c:d2:42:1d:fd:6e:b4:e2:26:22:31:f3:9a:
8a:e9:21:44:68:a1:93:73:6c:d3:85:ad:bf:72:30:65:d9:2f:
f7:3c:8c:d4:85:42:2e:4b:55:5b:50:08:68:21:fb:a5:7c:06:
b5:ec:48:1c:5c:14:25:09:dc:ed:b4:f7:e9:f4:e2:61:ce:c5:
b6:ba:f5:81:19:fa:0f:a6:5e:49:3c:21:29:2c:e8:d3:b0:a7:
48:42:da:41:ff:63:cc:fe:16:65:30:58:cb:c2:a0:36:7e:4f:
79:63:81:0a:7e:56:cd:39:6b:3b:98:d4:86:5d:e4:59:c8:6a:
0e:96:dd:82:1e:bb:f9:de:6c:c1:0a:4a:23:da:e3:82:e6:c0:
07:68:17:81:2a:9b:68:e0:6a:d9:2a:bd:dd:0d:02:42:0c:21:
35:38:ff:49:3e:70:80:52:6d:3d:53:22:bc:3e:10:e2:4c:c3:
f9:b6:3b:5e:ba:be:e8:90:59:2e:7a:0c:76:ee:82:95:a5:f9:
c1:aa:93:d8:9f:07:40:13:97:fb:a0:bf:9a:8c:65:a5:b1:34:
b1:32:d1:f5:b3:3f:6c:f9:cf:c5:7a:72:51:59:70:95:f1:cd:
4c:ec:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org