Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/bFwbdEbIYPAei0NXJBxEw8HYlL4.roa
File: bFwbdEbIYPAei0NXJBxEw8HYlL4.roa (raw, json)
Hash identifier: F74pkFALJ5I8GIkPpwtRFTE5kLgtL4VANtHmdrhwK0s=
Subject key identifier: 6C:5C:1B:74:46:C8:60:F0:1E:8B:43:57:24:1C:44:C3:C1:D8:94:BE
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018572DF136EFFA98DBFD4827551B3C192A0
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/bFwbdEbIYPAei0NXJBxEw8HYlL4.roa
Signing time: Mon 02 Jan 2023 14:25:00 +0000
ROA not before: Mon 02 Jan 2023 14:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212865
IP address blocks: 95.214.148.0/22 maxlen: 24
194.69.196.0/23 maxlen: 24
2.59.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:13:6e:ff:a9:8d:bf:d4:82:75:51:b3:c1:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jan 2 14:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5c1b7446c860f01e8b4357241c44c3c1d894be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:6b:16:d4:e5:32:24:54:f6:82:53:8d:4b:
e9:1e:d3:fe:29:48:c2:54:5e:d3:6e:70:f4:e1:6a:
dd:a4:73:1b:88:27:b3:71:43:d4:6d:7e:08:20:99:
51:8c:a0:89:f4:67:63:73:98:6a:09:33:54:e3:71:
0e:00:59:be:ee:75:0d:82:b5:37:e2:ee:f3:a3:78:
c9:98:aa:16:43:0b:f1:49:c4:3a:8b:db:e4:44:df:
6c:ad:87:20:49:fd:ef:a8:54:b8:22:df:40:6a:16:
ce:b7:15:2f:6a:df:aa:42:f8:9c:c2:3d:3e:10:fc:
0f:f3:de:61:61:67:f9:dc:c3:94:31:45:21:46:1a:
7a:05:55:8f:8c:68:4c:05:af:88:c4:72:19:5b:0c:
eb:65:c9:6d:66:30:7b:af:85:51:da:38:13:ed:24:
c8:61:b1:09:4d:b6:16:6f:d1:03:4f:62:0a:3b:67:
21:11:25:8a:01:ec:76:74:c9:d8:07:14:66:12:b4:
dd:42:2a:6f:f1:7a:73:be:9b:f6:1d:76:51:26:c7:
45:2a:00:f1:bd:01:08:a1:0a:33:bf:be:45:d1:9b:
6c:2a:e9:b7:b9:7f:b7:4d:8f:c9:33:0f:ed:d9:6d:
09:db:54:85:98:42:03:f8:08:71:e2:44:24:08:5b:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:1B:74:46:C8:60:F0:1E:8B:43:57:24:1C:44:C3:C1:D8:94:BE
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/bFwbdEbIYPAei0NXJBxEw8HYlL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.120.0/22
95.214.148.0/22
194.69.196.0/23
Signature Algorithm: sha256WithRSAEncryption
28:76:23:de:a7:f4:5f:64:ce:79:7a:83:d7:f8:e4:8b:de:29:
17:ad:46:ce:ee:d0:f5:b4:e3:b2:a1:36:20:4c:0a:1e:1c:d1:
db:53:d7:22:68:66:a5:d0:69:49:2f:40:a8:7c:80:2b:8c:8c:
36:c4:af:b9:ce:77:9f:7e:74:34:36:42:f7:64:1a:92:4f:cc:
df:19:6a:4c:1f:18:dc:16:5a:72:d4:4d:f5:dd:3d:67:f9:4b:
74:f8:34:9f:63:67:e7:6c:d9:38:c5:36:3d:0c:9f:9a:57:e1:
86:92:c7:62:7c:98:b6:d6:f5:2c:ee:e1:a8:87:29:ab:11:69:
98:cd:ad:93:c5:90:6d:49:5d:ed:95:f4:a8:c9:e7:45:07:26:
b0:43:a3:0d:e4:f3:8d:ef:ce:cd:08:1a:4d:52:92:e6:de:b4:
3b:ae:81:2d:2b:7a:44:d6:cb:99:07:84:a4:65:09:f3:a7:16:
8e:d1:42:0b:2d:f0:56:45:dd:d1:4e:d0:af:e1:4d:0b:91:5f:
fe:ad:7d:de:d5:38:04:a1:07:79:ca:46:1a:e7:97:5f:d9:05:
c4:a9:f1:42:17:64:db:4e:29:a4:28:09:03:70:f7:93:90:20:
ac:06:f7:b0:7a:d9:8c:24:6c:f0:1b:64:2e:1e:98:75:a9:ec:
d4:80:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:22 2024 by rpki-client on console-ams.rpki-client.org