Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BCzYek2MrQDmG3mIGTOfuBCSUhk.roa
File: BCzYek2MrQDmG3mIGTOfuBCSUhk.roa (raw, json)
Hash identifier: 417zqhJb0tTSiQ0Q1Z1/TgYT/N1lqM7e0DFYiCRVWb8=
Subject key identifier: 04:2C:D8:7A:4D:8C:AD:00:E6:1B:79:88:19:33:9F:B8:10:92:52:19
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187A930357DC36A198DF9EAD0B49087D2ED
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BCzYek2MrQDmG3mIGTOfuBCSUhk.roa
Signing time: Sat 22 Apr 2023 13:38:41 +0000
ROA not before: Sat 22 Apr 2023 13:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.208.105.0/24 maxlen: 24
45.66.152.0/22 maxlen: 24
5.180.32.0/22 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
5.180.50.0/24 maxlen: 24
85.208.112.0/22 maxlen: 24
45.8.184.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
5.180.82.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.180.232.0/22 maxlen: 24
85.209.162.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
5.253.36.0/22 maxlen: 24
5.253.44.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
5.253.46.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
45.9.0.0/22 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a9:30:35:7d:c3:6a:19:8d:f9:ea:d0:b4:90:87:d2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 22 13:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042cd87a4d8cad00e61b798819339fb810925219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:1b:42:7f:df:ec:02:8d:08:2d:2d:7b:e7:
fc:bd:30:38:fa:5f:d7:15:25:0e:23:3d:ae:d8:40:
89:a7:3e:f4:f4:6a:02:2f:52:05:d8:2f:ce:c5:14:
3c:be:77:13:f5:c3:99:ce:48:49:da:ba:47:4a:69:
e5:d0:f2:35:28:f9:29:40:07:b9:53:3b:5e:d9:76:
51:ae:79:75:f9:ab:74:be:5d:56:e6:2e:27:d8:cc:
bd:e1:13:92:a6:be:ea:84:aa:9c:76:ea:48:14:16:
d5:c0:cf:bc:f7:68:45:8f:ee:bb:72:4f:65:e7:d5:
09:ff:95:c6:da:65:fc:3b:d5:51:9e:5d:4b:f9:ee:
5e:4b:0f:77:c4:8f:fc:f4:4b:b5:f8:dd:38:9c:fd:
61:f0:a3:5b:62:94:9c:d6:52:da:d8:78:c9:e2:d5:
3d:6b:5f:62:e3:82:4d:66:d7:e9:61:b1:ec:2b:33:
68:39:8c:31:cb:9f:b2:ea:12:8b:b6:7a:45:cd:82:
d8:1b:0d:34:58:f6:93:a6:ab:de:02:17:20:ff:46:
16:68:2b:5c:97:58:ac:1f:17:06:cd:fb:d8:4f:13:
30:08:a2:0d:b6:e1:73:42:fa:15:97:90:2c:e6:c2:
9f:f2:eb:f3:1d:a9:b9:51:0e:7d:38:d0:82:e2:ee:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2C:D8:7A:4D:8C:AD:00:E6:1B:79:88:19:33:9F:B8:10:92:52:19
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BCzYek2MrQDmG3mIGTOfuBCSUhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/24
5.180.50.0/23
5.180.80.0/24
5.180.82.0/24
5.180.232.0/22
5.253.36.0/22
5.253.44.0/22
45.8.184.0-45.8.195.255
45.8.197.0-45.8.199.255
45.8.203.0/24
45.8.252.0/23
45.8.255.0-45.9.7.255
45.66.152.0/22
85.208.105.0/24
85.208.112.0/22
85.209.160.0-85.209.162.255
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:d4:58:1c:ec:05:1c:39:e1:2b:a2:7d:02:76:71:2b:a9:05:
f8:52:d1:4b:6f:8d:99:25:05:6d:ee:b4:95:9e:d2:47:0c:38:
1c:64:98:94:62:42:9e:87:88:e9:db:0f:12:1d:53:34:10:56:
a9:4e:bb:26:6b:c7:73:7f:07:8f:38:9d:b2:7f:9c:63:7f:2a:
7c:b1:9c:d4:ad:12:3a:1c:59:28:d1:0e:66:9f:1a:99:f0:18:
b5:68:62:fc:49:41:da:9c:73:37:5f:05:c3:e5:25:9c:0c:4a:
9e:7a:17:86:8b:58:31:6d:d6:09:c3:fc:cf:e2:de:89:cb:12:
9f:41:6f:fc:7d:2b:79:c8:b2:67:a3:c8:f6:10:a9:8c:6d:58:
e7:fb:19:ed:97:28:e5:29:f6:11:db:f7:37:6f:fb:40:20:c7:
bd:89:c3:f7:99:1f:61:27:e4:67:a0:f3:20:fb:f5:8e:63:4d:
55:07:cd:c2:2f:38:67:c7:58:dc:c0:7f:c2:57:39:57:4d:ce:
f7:2a:a9:e6:92:7d:d2:01:5b:38:77:0b:fa:f7:2a:38:ac:46:
fb:72:93:55:fb:f9:ab:65:fe:21:25:fb:48:b4:7f:33:9a:f8:
c0:88:56:22:eb:db:7c:c2:a7:71:5e:ae:60:5f:22:49:cf:a6:
27:3d:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org