Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa
File: BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa (raw, json)
Hash identifier: KhNw9q/S1s34oEWmbKfQd2IfJOrPG8XHP3qU/8kmkx8=
Subject key identifier: 05:FA:5F:89:64:3F:6F:45:47:C9:9A:71:FA:46:F4:8E:4F:12:29:8A
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 018B3D40EA84705FA86EF00A4732B3D47C09
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa
Signing time: Tue 17 Oct 2023 10:49:06 +0000
ROA not before: Tue 17 Oct 2023 10:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49121
IP address blocks: 185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 23
37.221.71.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
5.57.209.0/24 maxlen: 24
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:40:ea:84:70:5f:a8:6e:f0:0a:47:32:b3:d4:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Oct 17 10:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05fa5f89643f6f4547c99a71fa46f48e4f12298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:54:da:57:b9:05:07:da:48:08:13:05:b6:
d2:0a:8a:fc:0f:ba:bb:cf:74:a4:1a:a9:f7:b4:90:
58:ee:ac:e8:fc:7c:da:82:f4:3f:ad:2a:34:33:96:
3b:67:26:34:89:09:c1:92:f9:c4:19:91:bc:b2:11:
61:6c:6a:73:3b:1a:22:f1:4d:96:00:4c:49:12:b8:
f9:03:41:8e:4c:8a:3b:c9:80:e1:83:12:9a:3c:e7:
c4:a2:de:9d:77:2c:cd:70:6f:4c:bb:2b:7a:01:81:
44:8e:42:2a:8d:bb:16:3f:99:70:7d:d9:00:40:c5:
23:cf:14:29:d9:20:c4:a6:cd:36:07:86:55:49:85:
e7:f3:48:0e:b1:f6:92:3a:d8:37:c8:c6:d4:1a:10:
0d:ca:c4:a5:79:bd:20:b4:c0:b1:78:fb:40:3c:29:
cf:b1:a4:52:c2:6e:4b:f7:05:99:70:6d:98:1d:14:
33:71:ed:f3:28:b3:12:6e:78:d3:f3:3c:95:3b:8a:
65:04:e8:a7:4e:22:d3:4b:52:0b:b9:41:01:65:91:
c1:fe:61:e9:ff:f2:e0:91:60:65:79:3a:0d:9a:4d:
0b:bd:5c:50:c4:c1:5c:d9:5e:b6:46:13:70:e0:be:
55:73:d7:a6:9f:bf:89:2e:77:26:b3:ea:41:6f:d0:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:5F:89:64:3F:6F:45:47:C9:9A:71:FA:46:F4:8E:4F:12:29:8A
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/BfpfiWQ_b0VHyZpx-kb0jk8SKYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/24
185.232.166.0/24
194.61.10.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
Signature Algorithm: sha256WithRSAEncryption
18:a7:01:4e:18:16:c2:3a:a2:50:1a:8e:0d:aa:e0:42:1a:86:
49:63:4c:3f:86:d9:45:4f:7a:a6:dd:9f:a6:e8:7d:96:e1:9c:
e8:01:80:a1:a7:36:64:08:ee:e4:f7:fc:32:b3:01:fb:8e:5a:
db:c5:f1:36:91:75:30:ae:4c:1b:29:9b:0f:41:8a:5c:db:37:
02:44:f8:79:81:9e:2d:5d:60:d4:e8:a7:35:24:59:3e:26:67:
63:87:5c:aa:8e:bd:11:a7:8e:58:54:f9:b1:2c:72:57:fa:88:
03:ba:28:3a:90:35:20:cf:e5:b7:08:cd:a5:0d:00:12:ec:ba:
4a:da:08:a8:b8:72:6c:95:d2:b6:79:b3:82:b8:bc:de:ec:5f:
4b:3c:59:bd:17:02:66:97:66:4c:43:e5:fa:9f:af:d7:92:a5:
c1:d6:16:65:7a:51:b7:51:c2:dd:05:ad:43:2b:a3:55:ce:6f:
26:25:f9:b4:60:be:d2:62:2e:76:92:8c:10:db:db:7b:94:de:
56:80:e0:3c:5d:f5:77:8d:c9:2d:27:b2:7a:f4:8b:3f:1c:38:
1a:93:a6:9b:2f:c5:74:be:ce:1e:9c:74:ba:be:27:1d:00:3b:
9e:d2:2a:ba:fe:1d:13:6b:dc:0a:46:39:57:e3:03:e6:a0:44:
36:71:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:19 2024 by rpki-client on console-fra.rpki-client.org