Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bcnspZbl4CSuPU1YbdCuGgRSd88.roa
File: bcnspZbl4CSuPU1YbdCuGgRSd88.roa (raw, json)
Hash identifier: b5CKGHKyxKrfAO22CxdxJKf637Bbk1HNxkhudTStc4Q=
Subject key identifier: 6D:C9:EC:A5:96:E5:E0:24:AE:3D:4D:58:6D:D0:AE:1A:04:52:77:CF
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018714696FA1A3A23D905D52B52AEA3765C2
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bcnspZbl4CSuPU1YbdCuGgRSd88.roa
Signing time: Fri 24 Mar 2023 16:17:46 +0000
ROA not before: Fri 24 Mar 2023 16:17:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
2a12:bec0:7002::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Apr 2023 03:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:69:6f:a1:a3:a2:3d:90:5d:52:b5:2a:ea:37:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 24 16:17:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc9eca596e5e024ae3d4d586dd0ae1a045277cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:9e:b3:72:c6:8d:36:d6:b2:9e:9c:42:73:
23:46:10:b8:d4:bf:e1:b9:ef:70:bf:93:78:e9:f6:
5d:10:ea:19:05:75:5a:c4:7a:18:46:6d:dc:48:5c:
ec:58:0c:c3:b4:03:40:6c:40:06:28:32:20:b0:71:
d2:98:8e:23:9b:ff:9d:4f:43:88:10:58:da:02:07:
9d:4f:a9:c9:c8:cc:df:a0:da:95:7b:d2:3c:46:1a:
d2:44:ba:64:bc:0c:f0:81:7a:78:57:96:81:cd:a9:
fe:cd:34:49:65:38:4c:85:07:04:d0:9d:82:d1:de:
c3:1f:e4:9e:83:d7:6c:b7:cb:b2:46:84:a3:89:7f:
70:fd:56:58:4f:e4:5f:c0:24:15:7b:aa:48:2e:23:
ae:36:88:7f:40:48:f3:cf:bd:20:e5:31:39:5d:08:
29:73:0b:45:f1:a4:b0:c7:f2:32:ff:70:82:90:fe:
f8:61:47:f8:1e:ef:3b:4c:3a:27:de:59:6e:3b:ba:
d5:c7:d2:ac:9b:08:23:16:cd:7e:7a:c1:ef:16:49:
fa:57:15:83:9f:8e:51:c9:e8:3d:84:81:3a:7c:d4:
73:92:83:8b:eb:11:e2:a1:e5:e3:8d:c2:fa:1d:03:
8c:d9:d8:73:d9:7d:36:28:4a:99:f8:d2:b9:91:a5:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:EC:A5:96:E5:E0:24:AE:3D:4D:58:6D:D0:AE:1A:04:52:77:CF
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bcnspZbl4CSuPU1YbdCuGgRSd88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:7000::/46
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
c1:a9:46:51:37:2f:29:ae:fa:3d:bb:00:1f:f9:5d:f5:57:92:
d5:4a:e9:53:c2:a4:2e:f7:7c:15:47:cc:04:dc:16:7c:f3:54:
e1:53:00:18:a9:c1:cc:9d:73:91:22:b6:fd:34:1c:9b:d6:fa:
12:19:7f:19:19:8c:8d:75:c3:0d:9e:02:06:bd:ac:0d:8e:99:
75:b5:8d:52:96:3b:13:51:07:75:41:51:ca:58:2c:fe:50:5d:
d8:1f:23:31:61:67:4e:e8:3a:42:18:cc:05:dc:83:29:86:1f:
b8:e8:d1:33:84:a8:07:86:bd:2f:40:45:81:1b:3d:e9:45:d4:
95:e7:db:18:bd:6f:4a:51:d6:b4:35:5a:f7:cd:0e:bf:c7:51:
56:b1:45:36:ed:75:cc:ba:e8:98:f1:66:83:50:23:85:ea:a5:
f0:b0:3a:a9:5d:75:74:5e:5e:8f:69:8f:8c:08:a0:50:e8:1a:
d4:22:77:42:ab:f1:07:7d:d5:94:50:e3:f1:b5:63:1b:9d:8e:
c4:af:37:5e:6f:b8:a7:38:a5:e0:b7:9a:65:27:2a:1b:2b:32:
29:73:a8:ca:23:39:c6:fa:05:ec:3a:b0:ab:fc:e7:44:15:5a:
d5:07:59:6f:a3:92:ff:1b:09:8a:f2:b6:fa:28:53:b5:37:9c:
a1:48:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org