Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/bBYZPV0GuxiVvErl8Gc01B5YMtI.roa
File: bBYZPV0GuxiVvErl8Gc01B5YMtI.roa (raw, json)
Hash identifier: Uw7qFY3xCouky1cK1c76UDrKoMqJ+ka4+m5NiPjInsQ=
Subject key identifier: 6C:16:19:3D:5D:06:BB:18:95:BC:4A:E5:F0:67:34:D4:1E:58:32:D2
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 018572FA72DACE1E60638CD88ED00E0C798B
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/bBYZPV0GuxiVvErl8Gc01B5YMtI.roa
Signing time: Mon 02 Jan 2023 14:54:54 +0000
ROA not before: Mon 02 Jan 2023 14:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212988
IP address blocks: 185.221.190.0/24 maxlen: 24
185.221.191.0/24 maxlen: 24
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:72:da:ce:1e:60:63:8c:d8:8e:d0:0e:0c:79:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 14:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c16193d5d06bb1895bc4ae5f06734d41e5832d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:b3:d1:10:fb:4a:80:19:7a:ef:7d:66:fa:
db:38:12:37:d9:23:86:d2:1b:a0:d1:cb:9d:b1:14:
55:67:7d:70:c4:7f:bd:4d:43:b0:63:51:b5:2a:cd:
01:8b:a1:f2:1d:58:b1:bf:69:45:49:2c:2d:e8:bd:
d0:39:c5:0f:a8:91:ec:53:ef:83:cf:a5:e9:c9:65:
a4:bf:ec:df:c6:33:bf:8d:77:05:69:a8:a0:0f:77:
53:01:f7:7c:5f:38:4f:0f:01:d6:07:1e:a0:cb:ea:
89:10:6e:25:8d:d0:1e:df:71:9a:17:97:db:d1:78:
68:40:1b:8f:f5:eb:63:3f:53:ce:a8:31:a1:b4:1a:
09:b5:35:92:ed:cb:aa:b2:b5:7b:f9:b0:fb:c0:0a:
41:45:a4:a1:9e:9c:85:51:b7:a9:fe:6e:fe:33:b9:
00:85:6e:7e:7f:bb:fd:17:c2:00:29:21:47:18:e3:
4f:c6:41:c5:4d:1f:3c:a0:9c:3a:85:ed:c4:47:79:
25:43:01:00:0f:af:cc:3a:2e:90:bb:3a:a0:4d:07:
07:d7:d7:27:87:91:ab:0e:6a:7b:58:e4:6e:7c:17:
39:6c:58:20:3d:1f:91:ad:7b:08:81:47:16:ca:3b:
47:7b:1f:d1:02:54:60:8d:fa:0f:ce:d4:e8:8e:ab:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:19:3D:5D:06:BB:18:95:BC:4A:E5:F0:67:34:D4:1E:58:32:D2
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/bBYZPV0GuxiVvErl8Gc01B5YMtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.26.0/23
185.219.218.0/24
185.221.188.0/22
Signature Algorithm: sha256WithRSAEncryption
47:34:43:3a:43:00:ac:ce:5a:77:c1:fd:98:0c:79:55:cd:37:
44:4b:08:96:2e:bc:da:ce:09:fe:87:3c:e4:fa:7c:b4:07:b7:
06:92:83:03:f6:60:52:1b:8f:82:75:ee:88:71:e1:e6:00:eb:
b5:98:76:97:21:d1:c3:77:32:51:ca:1d:b5:a0:34:74:85:0d:
ec:89:fd:d6:0e:f4:8a:47:93:9b:8b:b8:6b:98:4c:9e:81:83:
0d:ce:fc:ca:82:74:2a:9f:60:14:9b:03:4e:64:3d:eb:ab:09:
75:77:a5:6b:63:61:b8:ac:23:2c:8e:5c:78:15:b6:36:45:fa:
df:9f:27:5a:88:a0:aa:1e:3a:7a:45:9a:3e:46:c9:5e:20:2d:
22:b2:8f:83:8c:70:6e:cf:26:2e:c3:aa:ce:e5:ed:25:03:02:
8e:a3:f7:d4:c1:35:33:6e:58:5d:cf:67:59:5e:e6:15:be:e6:
f4:03:1c:64:e3:36:fb:ea:1b:51:2a:d6:a4:21:e9:55:2a:fd:
60:c8:45:05:31:13:c8:ea:7f:6d:d6:87:7d:e2:fb:0e:e8:3b:
6d:a6:21:63:49:9f:c4:27:6b:96:31:86:30:b9:fb:36:be:62:
66:67:3d:1e:92:e6:3d:b0:62:01:e6:23:1b:27:d4:d0:11:b1:
ae:00:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org