Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/BpWOl4_xugOEhrmppF4QKFVf2w4.roa
File: BpWOl4_xugOEhrmppF4QKFVf2w4.roa (raw, json)
Hash identifier: yiyqlVnN3YOpUV76ZRQlZ2Lm9W2t4S97Rw21m/Gs7CU=
Subject key identifier: 06:95:8E:97:8F:F1:BA:03:84:86:B9:A9:A4:5E:10:28:55:5F:DB:0E
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0185714C0E4F1A6CE607AD2426D33900E715
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/BpWOl4_xugOEhrmppF4QKFVf2w4.roa
Signing time: Mon 02 Jan 2023 07:04:47 +0000
ROA not before: Mon 02 Jan 2023 07:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24707
IP address blocks: 185.122.82.0/24 maxlen: 24
185.122.82.0/23 maxlen: 23
185.122.83.0/24 maxlen: 24
185.122.80.0/24 maxlen: 24
185.122.80.0/22 maxlen: 22
185.122.80.0/23 maxlen: 23
185.122.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:0e:4f:1a:6c:e6:07:ad:24:26:d3:39:00:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Jan 2 07:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06958e978ff1ba038486b9a9a45e1028555fdb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:77:b7:5a:ab:04:3e:f0:86:0f:17:d7:23:
ea:79:e0:2c:97:fd:16:b1:96:23:77:84:70:8c:58:
da:dd:4d:6e:ce:fb:0f:c2:1e:da:92:a8:23:6c:51:
ed:31:b9:89:03:ce:0a:7a:f4:d1:82:db:7d:16:1d:
3c:99:a5:65:18:35:fa:90:17:3a:4c:9d:2a:de:6b:
c6:f6:03:6c:22:cc:a0:56:1b:cb:01:9b:ca:b9:82:
4a:16:27:e2:42:ba:0f:95:4f:24:d8:5a:8f:b5:7a:
45:56:af:a6:bb:e3:f6:07:ce:02:b3:ef:08:8e:11:
ea:9f:d4:a9:c2:cd:43:cf:25:42:bf:17:51:bb:e8:
50:f8:01:38:b7:b2:49:74:59:9e:8f:33:30:10:80:
b4:5f:7f:9f:e4:1f:3c:e0:5b:82:fa:11:48:3c:17:
cf:38:30:1d:e8:f5:92:7e:11:b2:1c:d6:10:c6:6e:
fb:9b:15:eb:39:58:e3:05:31:d1:63:f3:89:66:fa:
08:1a:06:fc:ec:66:0f:84:e7:e4:42:aa:a8:45:bd:
61:77:77:07:82:21:a8:f9:42:47:9f:fb:f7:ff:cb:
a8:00:fd:32:2b:80:25:0a:6d:6a:65:5f:65:e5:3f:
e9:83:a6:0a:f4:f5:f9:af:e3:a3:de:1f:06:1f:ef:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:8E:97:8F:F1:BA:03:84:86:B9:A9:A4:5E:10:28:55:5F:DB:0E
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/BpWOl4_xugOEhrmppF4QKFVf2w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:d5:c9:de:6f:25:83:41:40:b9:bd:c4:a6:d5:33:2e:a3:e5:
c0:d4:6c:cd:ae:3b:1c:66:15:d2:bf:39:28:a4:39:20:23:a9:
b0:58:79:d9:ca:c8:d7:66:5c:7f:31:a7:41:e5:06:5a:12:61:
32:d9:e6:7c:54:37:b3:2c:b0:5f:63:99:92:bf:d3:1b:d6:2e:
f7:54:0e:05:41:c4:45:65:90:a5:b0:7b:4d:57:1c:e5:24:8f:
6d:d4:dd:ee:84:c7:ca:b7:3d:c7:35:6d:a3:48:88:be:cd:ba:
bd:d5:74:d2:db:73:19:ef:55:ae:50:41:ab:91:e9:33:e9:81:
a8:7c:57:09:55:44:91:7b:ff:e8:08:96:56:36:56:04:70:35:
d1:99:df:43:7d:ff:b9:0a:bf:83:29:05:67:b9:89:61:d8:3b:
87:67:5e:6f:de:9d:4e:a4:06:8b:48:15:8d:e1:03:b4:8f:ee:
6e:24:5c:6c:28:ff:7e:4d:25:a7:ab:4a:db:5f:57:a5:da:9f:
ee:06:64:91:88:0e:4f:63:c1:72:34:fc:8f:8b:e9:94:bb:bb:
0d:11:7d:b0:9b:ba:57:1a:e4:e5:25:3a:64:9d:c3:3c:7c:30:
6d:15:d0:4a:dd:f2:45:db:f4:c1:ce:58:74:60:85:ba:2d:3f:
a7:77:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:09 2024 by rpki-client on console-ams.rpki-client.org