Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/BwLZISc6EAI2ltUvsnkLLH6wU7Y.roa
File: BwLZISc6EAI2ltUvsnkLLH6wU7Y.roa (raw, json)
Hash identifier: KUecIA9frXDJtSX4GHinGgH83Fm4VsST66lV5aDzuJc=
Subject key identifier: 07:02:D9:21:27:3A:10:02:36:96:D5:2F:B2:79:0B:2C:7E:B0:53:B6
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018CC5DC32AA1CAD12C84F2322C1ACC989B5
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/BwLZISc6EAI2ltUvsnkLLH6wU7Y.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25135
IP address blocks: 88.82.0.0/19 maxlen: 19
148.252.160.0/19 maxlen: 19
212.183.152.0/21 maxlen: 21
85.255.224.0/20 maxlen: 20
148.252.132.0/23 maxlen: 23
148.252.128.0/23 maxlen: 23
148.252.128.0/19 maxlen: 19
148.252.136.0/22 maxlen: 22
85.255.232.0/23 maxlen: 23
212.183.128.0/20 maxlen: 20
212.183.128.0/19 maxlen: 19
148.252.144.0/23 maxlen: 23
148.252.140.0/23 maxlen: 23
85.255.236.0/23 maxlen: 23
85.255.234.0/23 maxlen: 23
148.252.152.0/24 maxlen: 24
148.252.150.0/24 maxlen: 24
148.252.148.0/23 maxlen: 23
148.252.146.0/23 maxlen: 23
148.252.158.0/23 maxlen: 23
148.252.156.0/23 maxlen: 23
185.69.144.0/22 maxlen: 22
194.62.232.0/24 maxlen: 24
194.62.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 22:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:32:aa:1c:ad:12:c8:4f:23:22:c1:ac:c9:89:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0702d921273a10023696d52fb2790b2c7eb053b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:17:69:1d:7d:ce:52:53:20:dd:b1:d2:b8:
7a:d8:6a:ea:a6:fa:30:a3:ff:1f:e5:1d:89:b9:52:
91:69:bb:c6:70:0f:bc:4f:26:b9:fc:ac:56:8a:7e:
09:77:2e:32:e3:8d:e1:39:5f:01:a6:96:d2:16:eb:
70:dd:71:69:dc:39:fa:f0:4a:cc:59:17:ec:d6:43:
b6:89:54:62:76:bc:7b:c9:1b:02:8f:74:eb:e3:fc:
70:e0:ab:e6:f4:96:f2:ab:28:00:17:de:cc:d9:9c:
32:52:9c:2e:d6:30:31:a0:3b:b8:c4:51:c7:b1:e7:
e9:9e:4d:dd:33:d5:50:e8:46:27:4f:ef:18:22:8d:
6e:7f:81:33:9f:36:ca:c2:e2:7a:3d:7f:2e:2e:88:
32:df:8b:47:c0:4c:3c:26:1b:f2:ba:c0:5b:3f:c2:
6b:4d:b7:6a:d2:b1:b2:b8:f3:4c:96:33:db:4c:ef:
38:6e:cc:38:d2:1e:51:94:f9:96:67:e8:99:01:68:
b8:96:e2:fb:d9:59:f2:19:1c:cc:a0:45:bb:fa:f0:
93:b7:2b:82:f3:f9:f8:e3:39:be:0e:55:cf:ef:e5:
03:99:4a:e2:ea:39:53:af:77:41:02:ce:18:9a:bf:
23:33:1f:1a:ea:23:3a:82:65:ec:76:52:d5:f7:03:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:D9:21:27:3A:10:02:36:96:D5:2F:B2:79:0B:2C:7E:B0:53:B6
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/BwLZISc6EAI2ltUvsnkLLH6wU7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.224.0/20
88.82.0.0/19
148.252.128.0/18
185.69.144.0/22
194.62.232.0/24
194.62.238.0/24
212.183.128.0/19
Signature Algorithm: sha256WithRSAEncryption
61:e1:99:ce:8d:ad:35:41:fb:9c:27:f2:87:1b:b2:a0:9a:5b:
34:24:3e:fd:de:47:f6:ad:3f:0b:67:d8:f0:4c:89:f1:7c:8f:
bc:f1:47:ac:11:44:ce:3a:ed:ba:97:e9:65:82:3c:3d:2b:4f:
a8:ef:25:2f:e2:8e:e5:8f:84:e2:61:19:44:d4:e9:d2:23:0c:
96:52:10:72:65:5c:78:68:f7:37:6f:df:11:08:52:c0:98:a4:
92:2c:87:c2:b9:ac:95:b1:4d:29:fa:ed:dc:1d:a4:c5:ab:f0:
f2:65:04:4d:d2:e6:3c:f2:ae:70:aa:9f:df:7b:09:a1:a3:8c:
5a:a7:27:24:d4:98:77:bd:79:b6:34:a6:ae:3e:b2:d8:f0:ab:
bc:ca:54:55:da:a8:eb:d8:27:25:9d:9d:02:71:e3:a0:b7:86:
78:9b:b3:0a:d7:7e:d7:65:bf:dc:15:5c:cb:cc:c6:6a:56:56:
b2:b3:72:76:24:8f:64:69:02:9f:88:31:05:9e:80:9b:b9:21:
11:f1:e7:ee:4b:8f:76:34:4b:55:a0:b9:84:d6:a0:83:7d:04:
80:80:9d:53:c8:12:1c:db:1e:09:0c:e7:ce:e6:2b:28:ba:ec:
64:4b:e1:72:fa:2c:7c:dd:96:75:1b:9e:2a:f5:4e:34:6c:a2:
41:3b:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 23:48:47 2024 by rpki-client on console-fra.rpki-client.org