Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/BCfKuX13dRjlI7_06u9YLn4HPtA.roa
File: BCfKuX13dRjlI7_06u9YLn4HPtA.roa (raw, json)
Hash identifier: GXLc/SkqXvhNjZc/bsGNC+i0+orPhq+2lh9HUEVqnT8=
Subject key identifier: 04:27:CA:B9:7D:77:75:18:E5:23:BF:F4:EA:EF:58:2E:7E:07:3E:D0
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 018CC3B7316056F936593E0AAA5D04AA75E6
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/BCfKuX13dRjlI7_06u9YLn4HPtA.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51825
IP address blocks: 46.31.98.0/23 maxlen: 23
46.31.96.0/21 maxlen: 21
46.31.96.0/23 maxlen: 23
46.31.96.0/24 maxlen: 24
46.31.97.0/24 maxlen: 24
46.31.98.0/24 maxlen: 24
46.31.102.0/23 maxlen: 23
46.31.103.0/24 maxlen: 24
46.31.100.0/23 maxlen: 23
46.31.99.0/24 maxlen: 24
46.31.100.0/24 maxlen: 24
46.31.101.0/24 maxlen: 24
46.31.102.0/24 maxlen: 24
185.24.206.0/23 maxlen: 23
185.24.204.0/24 maxlen: 24
185.24.204.0/22 maxlen: 22
185.24.204.0/23 maxlen: 23
185.24.205.0/24 maxlen: 24
185.24.206.0/24 maxlen: 24
185.24.207.0/24 maxlen: 24
213.137.65.0/24 maxlen: 24
213.137.66.0/24 maxlen: 24
213.137.67.0/24 maxlen: 24
213.137.70.0/24 maxlen: 24
213.137.71.0/24 maxlen: 24
213.137.72.0/23 maxlen: 23
147.234.92.0/22 maxlen: 22
147.234.96.0/21 maxlen: 21
213.137.64.0/24 maxlen: 24
213.137.64.0/20 maxlen: 20
2a02:5080::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Apr 2024 05:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:31:60:56:f9:36:59:3e:0a:aa:5d:04:aa:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0427cab97d777518e523bff4eaef582e7e073ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:cc:09:01:3d:f6:4c:ec:37:d7:10:75:36:
d9:be:21:33:18:34:e3:7d:d8:48:6f:0a:72:3b:94:
f4:dc:2d:13:90:21:3d:b9:87:10:9f:f5:ed:ee:ff:
a9:9c:f5:d7:99:c5:cb:18:b1:8c:e3:8d:f2:33:be:
95:d3:fd:14:f4:03:93:be:a6:a8:a4:30:15:6a:76:
ef:99:76:cd:bc:e1:26:01:3d:2e:7f:8d:8b:d0:3d:
b3:3a:b6:49:ab:9d:29:16:87:b5:b2:62:2f:e6:7c:
6a:75:cb:8f:c6:83:17:e5:40:ca:24:1c:ab:8a:c8:
56:6e:3c:c1:fb:ea:5d:53:11:81:52:01:1a:92:de:
6b:50:c4:3b:63:a9:61:1a:de:2d:66:01:09:69:ad:
d7:cb:58:08:ca:eb:ca:ff:e9:a0:94:6a:f1:40:17:
db:96:4a:d1:02:40:ca:0f:c2:b0:f8:4a:25:ab:98:
cb:c1:30:1f:ed:40:90:a9:a8:e0:7a:70:2d:5f:0c:
34:b0:94:df:91:4e:cc:d2:d6:ee:25:27:fb:38:95:
3b:00:cb:46:02:81:82:89:c0:44:d8:ee:e5:75:69:
14:49:63:76:28:bc:78:40:3a:8e:fa:13:f3:d9:20:
52:cb:8b:23:21:62:f3:10:8f:7f:55:fd:d0:2b:72:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:27:CA:B9:7D:77:75:18:E5:23:BF:F4:EA:EF:58:2E:7E:07:3E:D0
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/BCfKuX13dRjlI7_06u9YLn4HPtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.96.0/21
147.234.92.0-147.234.103.255
185.24.204.0/22
213.137.64.0/20
IPv6:
2a02:5080::/32
Signature Algorithm: sha256WithRSAEncryption
61:14:0e:3a:4c:cf:03:c6:1e:f6:b5:da:ea:d0:94:93:60:42:
52:75:bc:6f:f7:79:e9:92:0b:2a:dc:e4:19:c2:11:1f:0e:09:
06:a6:de:b9:de:40:00:bf:94:2a:4d:d4:52:e9:47:f3:55:b0:
73:e6:e9:15:36:a8:5e:00:ab:9e:84:c9:8a:8d:98:77:d2:ed:
d6:31:dd:e4:df:f3:d0:fd:c2:f8:95:47:52:9e:30:e4:13:a7:
29:08:ed:17:c3:48:c3:d9:c3:c4:2d:1f:52:c2:88:c1:37:00:
10:ec:9f:ef:cd:51:b3:ce:f3:04:5d:ee:db:55:a0:db:a4:f7:
35:5a:5d:17:5c:a6:02:07:3d:a6:dc:6a:58:13:c1:7e:5e:ae:
73:9d:21:d9:aa:6f:ba:8e:3d:9c:43:36:d7:81:f3:b1:cb:00:
22:e4:bd:a5:9e:29:a5:db:2e:fa:a4:7e:aa:0c:87:3e:10:90:
a3:09:e4:06:96:12:6a:7d:37:f5:db:dd:b3:be:ae:8c:46:b4:
8c:1f:26:b4:87:cc:d1:1a:88:ff:b6:64:21:a1:b3:17:77:07:
ad:ae:df:d4:75:c5:9d:56:7d:bd:31:d5:11:b5:13:11:17:d3:
1f:b1:48:71:67:5e:26:99:6e:ed:75:00:5e:fe:b4:2e:2e:f0:
36:b8:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:04 2024 by rpki-client on console-fra.rpki-client.org