Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/BxpEf29-uxf6F5nrAP12ukcQCNQ.roa
File: BxpEf29-uxf6F5nrAP12ukcQCNQ.roa (raw, json)
Hash identifier: zaYX6mR4Yg3rBQvijTgJRDn5Q81qaWN3r/BtUcyvpTg=
Subject key identifier: 07:1A:44:7F:6F:7E:BB:17:FA:17:99:EB:00:FD:76:BA:47:10:08:D4
Certificate issuer: /CN=7ccc95c952551b0f9054c74f7c139043bd3f6211
Certificate serial: 01856E8B0CE441009186D4D6CCEED58FFAB5
Authority key identifier: 7C:CC:95:C9:52:55:1B:0F:90:54:C7:4F:7C:13:90:43:BD:3F:62:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/BxpEf29-uxf6F5nrAP12ukcQCNQ.roa
Signing time: Sun 01 Jan 2023 18:14:44 +0000
ROA not before: Sun 01 Jan 2023 18:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9026
IP address blocks: 62.212.0.0/19 maxlen: 24
185.120.40.0/22 maxlen: 24
2a02:20::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:0c:e4:41:00:91:86:d4:d6:cc:ee:d5:8f:fa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccc95c952551b0f9054c74f7c139043bd3f6211
Validity
Not Before: Jan 1 18:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=071a447f6f7ebb17fa1799eb00fd76ba471008d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:b9:0b:79:e3:42:69:f6:50:a3:5d:41:5b:
f2:5d:2e:de:5d:d8:cd:3e:0b:6a:3c:38:e3:2b:88:
df:43:40:e2:63:ce:60:65:bb:a7:61:cb:a4:5b:5c:
90:ab:50:c1:d3:33:75:1d:7e:d7:64:da:8a:57:dc:
e2:d6:d8:1a:8d:6d:07:e5:16:b3:01:b9:4e:89:c3:
4a:17:be:21:71:d1:bd:cd:b5:8b:0d:89:b8:82:2e:
e7:ac:c5:01:67:91:25:4d:b3:4a:4d:e1:2b:29:e6:
dd:c6:e5:43:69:13:d6:db:48:25:a5:be:bf:84:c6:
df:ed:2f:c6:e7:06:eb:8e:3e:e2:94:d5:f6:06:b5:
25:86:37:e2:72:d8:26:33:85:f3:22:59:9e:92:3c:
88:a7:d0:45:3f:8f:21:7f:1e:81:c6:65:2f:17:c2:
c5:55:66:10:b1:90:65:44:2d:56:2d:66:56:1a:a5:
be:7e:cb:9e:79:40:05:01:30:e0:94:72:ab:6e:1b:
47:c1:41:c2:4d:3c:6a:1f:5b:70:84:72:63:17:0b:
98:be:32:db:e2:1c:28:bc:7a:34:11:c4:fd:ff:7e:
20:3f:5d:26:0e:67:57:69:e8:00:03:ed:b2:a7:a8:
c0:74:d0:c2:1a:3a:aa:70:b7:a0:22:b4:fb:72:4f:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:44:7F:6F:7E:BB:17:FA:17:99:EB:00:FD:76:BA:47:10:08:D4
X509v3 Authority Key Identifier:
keyid:7C:CC:95:C9:52:55:1B:0F:90:54:C7:4F:7C:13:90:43:BD:3F:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/BxpEf29-uxf6F5nrAP12ukcQCNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.0.0/19
185.120.40.0/22
IPv6:
2a02:20::/32
Signature Algorithm: sha256WithRSAEncryption
39:d9:c0:65:5f:39:2d:b4:a3:30:c0:b7:da:bf:3e:01:fa:9a:
ce:15:43:6d:54:e6:fa:fa:f0:90:4b:a4:5c:ee:b7:6a:eb:54:
a7:f0:9d:57:07:8e:8f:17:ae:e1:0e:6a:c1:28:c8:3b:1e:39:
4a:4e:84:36:76:54:a1:79:ff:c1:cb:1d:6c:e1:07:f0:cc:41:
e1:f2:32:9e:bb:4c:ec:e7:75:c6:12:6d:49:6a:2e:42:c5:ad:
6d:da:64:de:26:c4:38:0a:43:ec:52:11:0c:69:28:56:97:d3:
7e:b3:a7:12:f6:74:16:68:e7:bf:bf:5c:4d:57:ed:ab:60:3b:
42:f9:ec:af:8f:63:de:ce:95:d5:6e:89:5b:c4:b1:b1:46:77:
97:e0:98:78:6f:7e:71:89:a3:53:90:95:a0:da:2f:ad:8e:7e:
19:4b:6b:e0:ae:c6:ef:3b:26:b7:b4:dc:8f:d5:32:53:7d:40:
ed:f8:91:39:89:09:be:b2:92:fa:f7:5c:75:31:94:6a:1d:92:
5f:d3:b5:91:82:c7:b1:f2:83:17:7a:d8:32:03:9c:f1:3c:78:
c3:07:c5:03:b1:b9:fd:7a:99:9b:e2:e4:a3:53:94:6d:de:32:
49:ef:ef:a5:ea:c6:a5:1c:d3:95:e7:e3:3e:69:ae:be:68:83:
8c:9e:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:36 2024 by rpki-client on console-fra.rpki-client.org