Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/BOySMYWnWeavwoba8HJsS4MRmo4.roa
File: BOySMYWnWeavwoba8HJsS4MRmo4.roa (raw, json)
Hash identifier: Qm3k2hNszQK922TxF/qbzFPabBz/HQvK9J5Jl5M6uEE=
Subject key identifier: 04:EC:92:31:85:A7:59:E6:AF:C2:86:DA:F0:72:6C:4B:83:11:9A:8E
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 0187B85E9F3BF731D2FF974845C4FDCBCC24
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/BOySMYWnWeavwoba8HJsS4MRmo4.roa
Signing time: Tue 25 Apr 2023 12:23:41 +0000
ROA not before: Tue 25 Apr 2023 12:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 83.137.24.0/21 maxlen: 21
185.93.216.0/22 maxlen: 22
194.63.148.0/22 maxlen: 22
109.106.32.0/21 maxlen: 21
109.106.40.0/22 maxlen: 22
185.127.172.0/22 maxlen: 22
195.60.192.0/22 maxlen: 22
212.120.32.0/19 maxlen: 24
213.213.160.0/19 maxlen: 19
2a02:ab0::/29 maxlen: 29
2a00:5480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:5e:9f:3b:f7:31:d2:ff:97:48:45:c4:fd:cb:cc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Apr 25 12:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04ec923185a759e6afc286daf0726c4b83119a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:c6:5d:5c:bd:fd:2f:52:28:5b:70:ed:7a:
62:1c:2f:f9:60:a4:3c:bf:b9:c7:53:12:b5:47:b7:
7e:79:72:fd:31:ff:11:18:c6:cb:e6:d5:5a:34:39:
f1:dc:93:20:4e:f2:71:5d:7d:b0:4d:f6:c6:d9:10:
fa:bf:ea:a6:9b:ab:03:b6:57:5a:8d:87:0e:0e:de:
9b:69:bb:6f:2f:bb:7d:e4:3d:95:9a:ca:61:9c:84:
3d:97:ba:a7:61:88:d1:fc:c4:8e:df:e1:85:d5:bd:
63:85:8b:ab:3f:84:1d:f1:2e:0e:16:cd:fb:bc:23:
f6:dd:02:c4:42:14:35:5d:52:68:92:cc:7b:60:fd:
21:e2:e3:be:93:50:d5:10:5b:fc:91:bc:c0:60:e4:
7b:51:2b:10:2b:9b:9c:8e:4e:0d:c0:1a:94:44:b0:
6f:3c:e5:f9:a2:f7:19:d9:2f:e3:6f:0d:fa:27:7c:
57:41:0a:a8:e8:14:2f:28:72:0b:85:75:cf:82:aa:
d0:7a:b7:d6:ee:3b:ca:70:ab:b8:a4:e5:37:26:50:
e6:e6:97:ae:25:ac:7c:70:3b:1d:07:b0:20:26:76:
60:c0:73:18:0f:ab:1e:f0:2c:f5:2f:ad:6c:dc:06:
d9:26:60:fc:72:c7:de:a4:49:f9:2f:fc:13:0c:1c:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:92:31:85:A7:59:E6:AF:C2:86:DA:F0:72:6C:4B:83:11:9A:8E
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/BOySMYWnWeavwoba8HJsS4MRmo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.24.0/21
109.106.32.0-109.106.43.255
185.93.216.0/22
185.127.172.0/22
194.63.148.0/22
195.60.192.0/22
212.120.32.0/19
213.213.160.0/19
IPv6:
2a00:5480::/29
2a02:ab0::/29
Signature Algorithm: sha256WithRSAEncryption
50:d2:e3:51:2f:04:d1:e0:e1:6b:61:d5:52:c5:8e:77:10:5d:
0c:d5:27:59:a6:bf:80:36:7a:cc:c8:1a:2d:b6:77:05:21:ec:
e1:13:5f:f2:df:4a:3a:02:ae:03:57:7d:9b:88:df:73:47:55:
70:b7:c6:f5:06:3f:53:ce:55:28:ee:24:89:de:d4:72:f9:e5:
d9:b9:80:f1:eb:0c:1d:79:c8:34:c2:9d:a6:b2:f9:0f:02:c1:
89:c1:02:b6:7a:59:2e:32:ff:5c:99:4c:0b:7c:cc:eb:75:88:
f9:a5:5d:8c:c3:d9:8b:72:6d:9f:2d:cf:16:34:5e:24:74:5e:
64:30:27:10:31:6b:5d:29:5f:ef:e9:eb:56:15:78:b6:cb:6f:
22:d4:1c:61:7e:c2:fd:12:0d:38:5e:04:24:8a:62:be:39:b5:
ed:43:88:f0:40:5a:14:dd:91:5a:9b:d8:78:24:c2:c5:ef:5e:
d2:1f:6e:60:0f:44:9b:fb:d2:25:2f:64:d5:01:9c:6b:ac:c8:
33:32:2f:68:6f:54:36:3c:46:c3:5e:de:f8:93:2a:f8:18:ac:
63:02:b8:31:06:b4:c3:d5:e6:9d:08:1b:14:f3:21:f4:7b:64:
8d:d3:36:91:2f:62:2e:04:f0:89:56:d7:e5:52:b1:42:15:47:
78:d2:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org