Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/BuwWuwf3G9ABmyQWOvI6FPv69tw.roa
File: BuwWuwf3G9ABmyQWOvI6FPv69tw.roa (raw, json)
Hash identifier: 9s9YucJiZuW/2w6HRGwtqpsvXGYFfw6K3AkPM/UyKy8=
Subject key identifier: 06:EC:16:BB:07:F7:1B:D0:01:9B:24:16:3A:F2:3A:14:FB:FA:F6:DC
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188C3DE930B0887C8A713AF2B9B6A08DA50
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/BuwWuwf3G9ABmyQWOvI6FPv69tw.roa
Signing time: Fri 16 Jun 2023 11:02:03 +0000
ROA not before: Fri 16 Jun 2023 11:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
194.190.146.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
195.209.147.0/24 maxlen: 24
194.85.16.0/24 maxlen: 24
195.208.222.0/24 maxlen: 24
193.232.226.0/23 maxlen: 23
194.226.41.0/24 maxlen: 24
195.19.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:de:93:0b:08:87:c8:a7:13:af:2b:9b:6a:08:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 16 11:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06ec16bb07f71bd0019b24163af23a14fbfaf6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:6f:29:f5:ce:16:97:c0:d3:05:68:51:d1:
87:e8:38:63:25:5a:dd:be:67:dd:04:ca:80:d8:9d:
03:ee:35:12:c7:1c:ed:17:19:14:b2:c9:1e:8d:69:
e9:2a:85:e8:94:a5:3c:df:c4:5a:cd:79:da:26:9c:
48:60:64:99:48:64:47:2c:8d:6f:57:78:8f:49:7c:
55:53:b3:03:fb:43:f7:7f:ca:d0:6b:48:49:85:6b:
58:05:25:72:e3:56:29:43:73:6a:f2:c2:89:75:b8:
dd:4c:0c:fd:df:b3:c1:73:a8:a9:d0:13:85:90:b2:
16:2d:9c:11:25:ca:14:94:ff:b3:c1:57:7c:b9:6a:
41:87:e8:f5:96:dd:89:aa:52:b0:76:d2:c0:15:c6:
a5:bc:4e:e1:b3:3f:d6:e8:f0:bf:3d:2d:6c:1f:18:
c3:6e:f2:7c:d0:f9:8e:e6:37:5b:58:ca:f9:0f:4a:
46:83:d8:e3:fc:0a:bb:4b:36:2d:d6:12:b4:d5:d2:
dd:cd:89:eb:60:89:0f:8a:87:b1:62:bc:4c:32:c0:
83:6e:d1:eb:fc:b9:a8:ec:65:d3:9e:84:a8:5a:d4:
a1:7d:3f:cd:a7:ee:bc:f6:5f:1d:35:6f:31:73:34:
c8:65:14:17:59:3e:31:a6:c5:cf:d4:7c:1d:1b:3d:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EC:16:BB:07:F7:1B:D0:01:9B:24:16:3A:F2:3A:14:FB:FA:F6:DC
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/BuwWuwf3G9ABmyQWOvI6FPv69tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
193.232.226.0/23
194.85.16.0/24
194.190.146.0/24
194.226.41.0/24
195.19.8.0/24
195.208.222.0/24
195.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5a:12:af:71:f3:ad:26:7e:f7:c8:d5:55:d7:40:50:7d:89:
0d:26:2e:14:16:cb:95:2e:94:df:ba:9f:d1:c2:6a:d4:bb:5f:
98:2b:36:f7:18:28:ea:6d:e9:e1:7a:18:04:6b:32:fc:18:90:
ac:3e:6a:3a:61:87:e0:97:72:2d:7d:b9:b1:c3:e3:bc:09:97:
1c:c2:b5:8d:f7:b9:31:4d:6f:ea:79:7a:d3:a3:a5:4c:21:2e:
f2:c8:f0:fb:6d:4c:70:52:9d:d0:c5:08:63:5a:32:38:f3:df:
f8:45:c9:7e:c8:2b:94:a5:0a:e6:9f:24:52:fc:89:37:29:66:
fa:93:1b:94:45:fc:32:7c:46:67:02:3a:d2:05:ec:c6:81:50:
35:b4:32:e6:dd:9e:17:72:94:da:e0:26:75:c6:09:69:f1:a7:
2d:1b:66:f2:06:bb:31:2c:b6:1a:1c:2f:2b:c5:c0:15:54:2a:
10:d7:13:9b:4a:ac:ee:a4:76:6b:cd:ad:53:4e:34:49:87:d8:
74:c8:20:c1:97:3a:2a:34:40:bc:01:6b:9a:0b:9c:01:7f:d3:
29:75:45:76:c5:c1:28:c5:a7:a2:da:7e:1b:d5:71:d9:ac:fe:
d1:df:b4:d8:c2:ff:e8:a3:1d:7c:4c:66:81:1e:51:1f:9b:29:
b4:cd:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org