Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/bIvJqHIGx3B-g8XOC23KmnrvNVk.roa
File: bIvJqHIGx3B-g8XOC23KmnrvNVk.roa (raw, json)
Hash identifier: NB+KqjcZS9x0fzSi9wq8zLr6/fgNKm/4/gqYMsuwhzI=
Subject key identifier: 6C:8B:C9:A8:72:06:C7:70:7E:83:C5:CE:0B:6D:CA:9A:7A:EF:35:59
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 018A601D6B35AB55EB0F0727BE6B55A5FAFD
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/bIvJqHIGx3B-g8XOC23KmnrvNVk.roa
Signing time: Mon 04 Sep 2023 12:14:15 +0000
ROA not before: Mon 04 Sep 2023 12:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 155.204.64.0/20 maxlen: 20
137.174.0.0/17 maxlen: 22
155.204.80.0/21 maxlen: 21
155.204.96.0/21 maxlen: 21
147.123.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:1d:6b:35:ab:55:eb:0f:07:27:be:6b:55:a5:fa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Sep 4 12:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c8bc9a87206c7707e83c5ce0b6dca9a7aef3559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:dd:30:cc:44:63:f1:ef:50:4b:b4:ce:db:
46:de:e2:be:53:40:b7:45:46:ee:03:b9:bd:ef:0c:
6f:a0:62:22:a8:6d:4d:31:ae:07:55:b5:cb:b9:b9:
dd:88:a6:67:b6:ce:e9:d7:a4:8f:2c:33:9d:ea:d2:
03:26:1f:57:63:7d:3a:01:2b:13:41:3c:1b:e1:03:
cd:f4:1a:4b:e5:b5:02:5c:5a:a7:7a:a1:91:72:22:
c0:e9:13:52:e3:85:40:7f:08:26:d0:ae:c4:12:e6:
8d:73:bd:81:69:80:2a:b2:16:27:e3:bf:f7:32:6e:
3a:f3:56:7e:08:58:0c:12:0e:93:2e:bc:d6:f2:15:
c2:aa:2f:3b:97:01:79:36:3c:73:1e:84:76:51:08:
08:ed:56:b8:09:3f:e1:0a:f6:24:84:c6:42:ce:1b:
74:4b:84:d6:71:b6:c1:51:6f:95:50:57:6e:05:5c:
a6:10:e8:54:94:86:95:36:de:19:39:2d:74:69:55:
4f:8e:83:d9:8d:d4:50:27:a8:d8:c8:3d:47:c6:3e:
16:7f:73:fc:63:3a:7a:d3:a7:d0:a9:94:c3:c5:9b:
b5:83:a7:7f:81:9f:70:c3:63:3f:36:cf:eb:75:31:
55:cc:f5:d7:be:70:7f:82:e4:0b:72:d9:3b:f6:cd:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:C9:A8:72:06:C7:70:7E:83:C5:CE:0B:6D:CA:9A:7A:EF:35:59
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/bIvJqHIGx3B-g8XOC23KmnrvNVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0/17
147.123.36.0/22
155.204.64.0-155.204.87.255
155.204.96.0/21
Signature Algorithm: sha256WithRSAEncryption
92:96:5d:9a:35:07:a6:1b:4c:3e:85:70:78:5e:c8:9f:56:b2:
2f:bc:e1:bc:45:8d:cc:63:f1:5e:15:20:c6:72:34:1f:fd:f7:
9c:4a:3d:20:76:52:02:6c:1b:34:f7:14:22:fb:36:60:57:9c:
cf:31:28:93:a6:62:72:e5:3c:74:36:fb:05:7a:9d:d6:fc:86:
30:66:68:0c:12:92:c7:a7:31:a2:68:b1:30:3b:86:5c:4a:9e:
8e:6f:60:8e:87:33:e5:8b:e4:94:c2:c0:6b:8b:e0:c3:6a:c4:
76:20:f8:bb:36:3b:2c:af:ea:1c:8e:ca:5f:3f:7c:c3:20:2e:
49:81:e0:72:3f:e9:64:8a:98:21:73:48:aa:0b:72:34:97:06:
ba:e9:34:cc:6e:1a:d2:c1:77:53:ee:4e:a9:c2:35:cd:b9:57:
a4:d6:f3:35:fb:b4:7d:ea:c9:98:28:6a:66:9f:7b:50:01:37:
47:61:82:16:96:72:86:36:7c:2c:11:c4:dc:84:c3:3c:65:0c:
3c:a8:fa:4c:db:88:c7:a6:37:2d:3c:19:88:cb:c1:e7:f3:84:
7f:99:f8:52:4f:ce:1f:8f:f3:b2:7f:8e:5c:50:80:f4:25:99:
65:7f:45:e1:69:b1:ca:df:a8:69:42:c7:e2:ec:ac:64:f6:9a:
5a:81:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 14:56:09 2023 by rpki-client on console-fra.rpki-client.org