Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/bxWRgRUchdrUMWIqomZoblnRHCw.roa
File: bxWRgRUchdrUMWIqomZoblnRHCw.roa (raw, json)
Hash identifier: /1+DDBvAfsZeW6L8FV6Zml/OdW2mJt6SHskSJ7efeGs=
Subject key identifier: 6F:15:91:81:15:1C:85:DA:D4:31:62:2A:A2:66:68:6E:59:D1:1C:2C
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB8E2A6B4F5C3993D8F6C5284B07BE
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/bxWRgRUchdrUMWIqomZoblnRHCw.roa
Signing time: Mon 02 Jan 2023 00:04:49 +0000
ROA not before: Mon 02 Jan 2023 00:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197897
IP address blocks: 95.158.148.0/24 maxlen: 24
95.158.151.0/24 maxlen: 24
151.252.192.0/22 maxlen: 24
151.252.196.0/23 maxlen: 24
31.211.128.0/19 maxlen: 24
151.252.200.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8e:2a:6b:4f:5c:39:93:d8:f6:c5:28:4b:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f159181151c85dad431622aa266686e59d11c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:1c:e3:4c:4f:d9:f8:c2:91:a4:1c:0d:15:
e5:c0:b3:29:62:bc:d0:3b:6e:9d:c7:4b:02:71:54:
66:e0:8a:af:36:bf:32:b9:49:86:5d:53:c1:a1:27:
e9:e2:fc:48:4b:50:df:a3:8a:53:9a:0a:a7:7e:47:
cb:92:01:3f:22:e1:52:b6:e9:af:5f:33:9b:82:09:
1c:09:da:10:7b:dd:b5:73:be:5d:d4:23:47:63:ce:
94:68:2f:b9:49:39:e7:07:0e:54:af:3d:7f:4b:cd:
21:86:31:de:56:17:a7:fe:eb:0d:0c:7d:c7:c7:1b:
85:03:2a:69:c9:b9:33:0e:a2:bf:c6:3f:c6:dc:e4:
fe:a7:c5:61:e3:0a:07:19:87:1f:58:4b:ba:f4:5c:
be:47:ad:43:37:e3:f8:d1:d1:4a:88:e1:bd:66:8f:
4f:04:d4:bf:ab:0c:29:a8:8b:58:56:0b:81:a9:e6:
18:a5:6f:5f:d2:a8:fd:ea:cb:41:a0:90:06:6e:51:
65:5e:81:0e:ac:90:f8:67:c9:22:54:ae:17:df:b8:
01:a0:47:ee:d2:36:2f:fb:69:60:ca:f0:52:89:32:
2e:2a:5b:49:e3:64:57:d6:53:e8:c1:d6:50:34:4a:
a9:87:af:dd:75:01:c4:a0:8a:88:30:fe:73:a3:f7:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:91:81:15:1C:85:DA:D4:31:62:2A:A2:66:68:6E:59:D1:1C:2C
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/bxWRgRUchdrUMWIqomZoblnRHCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.128.0/19
95.158.148.0/24
95.158.151.0/24
151.252.192.0-151.252.197.255
151.252.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:53:9c:24:da:7c:45:c7:50:b6:fc:ca:90:e0:a1:2c:68:7a:
da:2f:28:1d:77:c2:84:04:79:0e:06:3b:a1:0f:78:02:19:23:
69:8c:95:b1:03:e3:52:20:a3:c1:7c:ec:12:74:71:02:28:1c:
88:1e:2b:d4:0a:33:89:b8:37:6a:ac:25:5e:5b:86:ef:9c:67:
a3:1f:0b:4b:e7:d6:c3:a7:c1:f9:5c:ee:d8:24:a9:e6:ab:0e:
97:c0:fa:c5:d8:97:e8:7d:e8:bd:9e:ab:43:13:95:cc:60:50:
fa:b5:a8:13:6a:67:f5:1e:ae:99:12:28:6f:42:8b:5e:7d:3e:
75:35:ac:84:2b:a6:a2:c6:cb:5a:5d:7a:4e:5f:f4:d4:cb:19:
59:b4:a8:23:51:2c:98:92:c1:4f:7c:35:fd:64:bb:dc:3d:0f:
8f:2e:69:9e:c5:ce:ee:d5:b1:19:66:07:da:63:d1:31:7a:6d:
96:61:07:78:49:e9:5d:87:7a:32:c3:8a:74:0d:f9:1f:44:e4:
c6:6c:50:cf:a0:b0:de:6b:06:87:7c:81:e9:b1:58:b2:1e:fa:
6f:65:b4:53:e6:e6:d6:05:f1:69:ae:98:ca:70:6f:56:95:03:
44:e1:dc:ed:8b:ec:b5:f6:11:50:b7:d8:8e:89:fd:d8:73:46:
fd:70:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:30 2024 by rpki-client on console-fra.rpki-client.org