Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/bMCFNVNafFFzfdA7ywBBFA9ifcM.roa
File: bMCFNVNafFFzfdA7ywBBFA9ifcM.roa (raw, json)
Hash identifier: YYGIqrtQHtcQAEgQU+kyd4IYBnLOa41ZZPBnz+t6Gu0=
Subject key identifier: 6C:C0:85:35:53:5A:7C:51:73:7D:D0:3B:CB:00:41:14:0F:62:7D:C3
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCBD5E37E02D1C82EF451B98316849
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/bMCFNVNafFFzfdA7ywBBFA9ifcM.roa
Signing time: Mon 01 Jan 2024 16:30:27 +0000
ROA not before: Mon 01 Jan 2024 16:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47596
IP address blocks: 185.120.57.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 May 2024 05:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:bd:5e:37:e0:2d:1c:82:ef:45:1b:98:31:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cc08535535a7c51737dd03bcb0041140f627dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:0a:54:09:90:80:37:08:85:f5:14:db:59:
63:37:fa:ef:8b:14:b6:84:b2:c3:48:c3:d5:16:4b:
48:4b:7c:b3:d2:84:16:7d:32:a3:16:8c:51:50:b1:
bc:64:1b:bd:be:78:40:1f:6c:3d:b0:51:f8:21:df:
6b:70:48:0a:26:aa:90:b8:ca:28:df:94:4b:e6:82:
2f:f0:80:e7:ac:02:7f:8a:2d:81:1e:d5:37:2e:02:
cb:07:b0:6a:49:9b:cb:72:06:37:31:81:71:e2:d2:
64:26:9e:c5:de:69:24:8e:13:22:4b:4a:76:4d:12:
4a:12:63:25:ad:4f:6f:95:ba:5f:1f:da:fa:71:71:
73:b1:c2:46:ce:7b:da:90:5c:a5:50:24:e3:7c:ee:
7b:64:4d:fa:95:82:bb:71:cb:29:7e:18:e9:04:03:
80:8a:64:42:55:90:6b:4b:79:a9:f8:44:b5:79:07:
70:98:a0:cd:15:b3:63:a0:77:6e:3e:fb:e2:ec:96:
9e:13:b5:42:2e:69:7b:8c:02:a1:11:01:78:4d:5c:
b2:65:f7:e9:7e:26:12:aa:81:a9:13:0c:da:71:96:
da:27:cd:a1:6f:3d:d9:c7:58:ca:35:d9:83:1a:a8:
3f:02:43:9f:69:ee:2b:a5:77:45:bb:e9:71:01:48:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C0:85:35:53:5A:7C:51:73:7D:D0:3B:CB:00:41:14:0F:62:7D:C3
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/bMCFNVNafFFzfdA7ywBBFA9ifcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
3c:e6:aa:3d:08:69:37:45:9f:1d:09:49:94:3d:34:dd:80:c0:
ba:2d:b9:9a:4f:f5:ec:38:54:01:5a:c5:15:7b:d0:92:d7:17:
4d:9a:4a:0e:0f:1c:8a:4b:0c:42:65:89:d8:97:63:88:fe:38:
2d:fa:11:ed:0a:66:1e:6d:8c:da:3c:24:12:1c:a8:6e:c7:3e:
eb:88:18:9d:f7:02:49:40:c2:04:41:43:a4:7a:34:9f:1f:0c:
09:73:24:8a:b4:fd:98:11:da:19:92:37:c8:18:7d:a1:ca:d5:
2d:f8:48:80:c5:fe:d2:ee:51:34:15:d6:49:11:48:65:20:19:
68:7f:d0:e9:03:98:11:91:b4:5c:57:34:23:8b:81:9a:27:76:
f3:09:62:4e:a1:a3:2a:37:e2:f5:46:29:3d:c5:36:37:2d:80:
a1:bf:1d:4f:52:a6:41:60:39:d1:42:c4:60:38:3c:dd:3b:22:
4f:07:98:c5:d2:85:f0:9f:41:98:65:8c:e6:30:4d:6b:68:2f:
14:c8:c1:92:a6:7a:d1:68:98:10:51:3b:83:3f:c9:8e:67:22:
86:6b:4f:b4:e2:13:0c:97:73:20:00:06:17:20:f0:75:3b:01:
39:9f:3f:ed:35:3f:f5:07:44:48:90:95:cf:72:cc:45:a4:d6:
b8:bb:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:25:12 2024 by rpki-client on console-ams.rpki-client.org