Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/vP-2FKdNVDm8Be2GT9eEGvYuZlI.roa
File: vP-2FKdNVDm8Be2GT9eEGvYuZlI.roa (raw, json)
Hash identifier: BiicrsOERY3Fmu0hAgutuGdjKj79ljMHHWJ91WZcP6A=
Subject key identifier: BC:FF:B6:14:A7:4D:54:39:BC:05:ED:86:4F:D7:84:1A:F6:2E:66:52
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 0187C2327C517DECF1EB56884083E556E360
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/vP-2FKdNVDm8Be2GT9eEGvYuZlI.roa
Signing time: Thu 27 Apr 2023 10:11:41 +0000
ROA not before: Thu 27 Apr 2023 10:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44558
IP address blocks: 185.37.184.0/22 maxlen: 22
31.209.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:32:7c:51:7d:ec:f1:eb:56:88:40:83:e5:56:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Apr 27 10:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcffb614a74d5439bc05ed864fd7841af62e6652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:00:27:47:9b:53:e2:7f:39:25:80:82:c8:
99:ae:a1:d6:ac:49:e5:f3:72:20:a1:ca:66:39:5c:
5b:a0:d1:a1:17:d4:15:99:4e:61:a1:0e:71:82:c9:
0d:6e:44:d4:e5:ff:98:6a:4c:de:d7:12:88:73:4a:
7b:90:72:cb:e4:cb:68:e2:ab:d1:66:26:d1:6e:33:
3c:0a:56:73:58:b6:77:fb:9f:56:39:df:ca:01:ce:
d5:1f:15:5f:81:78:3e:36:64:c3:08:2d:1d:3b:95:
90:12:12:dd:7d:96:43:98:ed:c9:9e:dd:56:c4:98:
4d:83:ab:a8:11:63:89:cc:dd:74:c9:8f:8a:80:c7:
2e:ff:ca:29:c8:08:6e:cb:9a:d6:44:54:13:3d:85:
4a:d5:b9:58:ae:ef:c5:ae:74:6e:0d:4c:5b:d7:01:
e7:2c:22:6d:21:5a:24:88:52:a1:5c:d5:f6:d0:4e:
4e:eb:65:dd:ca:c6:71:7d:0e:8a:c3:b0:a7:80:7c:
61:fd:02:dd:d2:82:3e:dd:fd:b2:66:40:a5:98:80:
e4:f4:ed:3f:00:7e:62:49:23:db:36:ed:2b:82:af:
47:e4:26:91:c7:58:1c:01:e4:70:94:f7:c2:ad:92:
e5:49:5b:49:57:a4:b2:c3:6a:7e:c6:ac:3a:f6:b7:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:B6:14:A7:4D:54:39:BC:05:ED:86:4F:D7:84:1A:F6:2E:66:52
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/vP-2FKdNVDm8Be2GT9eEGvYuZlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.96.0/20
185.37.184.0/22
Signature Algorithm: sha256WithRSAEncryption
92:51:1c:ce:86:49:d8:f5:e9:56:6f:a9:90:91:be:b8:9d:11:
46:b9:ea:81:46:47:0e:08:e6:fd:73:c0:93:f9:a1:71:3b:cc:
12:0e:31:c0:b7:a9:37:b2:4a:93:ab:f5:a6:25:55:5a:5c:97:
a2:bb:0a:f3:58:a7:ef:62:a3:1e:01:9f:5d:f8:fe:cb:fc:0f:
4f:79:5a:33:b0:dd:29:ef:9c:de:7f:4b:10:e8:56:a3:4f:e7:
44:28:6f:b6:7d:40:c1:ba:9c:92:af:b5:23:9e:1b:59:47:8f:
2d:f5:f8:91:3a:07:9c:38:2f:f0:bf:85:b3:43:c0:b8:e4:27:
0f:e3:99:f4:75:01:59:3e:25:d4:ad:50:fa:71:08:f6:12:ab:
48:e8:23:b5:78:cf:7c:40:37:fe:ea:f8:ec:30:f1:4e:e9:c0:
8b:b8:16:f3:4d:d8:d9:55:74:c5:2d:ec:14:bf:e4:2c:5b:9f:
1d:9e:7a:18:cd:b5:59:ab:4a:e7:e8:54:89:ed:09:e4:97:75:
19:85:12:21:be:6b:0b:2c:fb:90:80:29:c5:38:37:c0:99:51:
7c:b8:08:77:4d:1b:a2:77:b2:12:1e:d9:47:a3:a7:52:65:62:
e6:de:e4:df:3f:f4:3b:88:f3:85:13:86:aa:53:00:b2:44:21:
07:4b:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:13 2024 by rpki-client on console-fra.rpki-client.org