Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/BDjAjWwky59PEmgSUiYmohcIiEo.roa
File: BDjAjWwky59PEmgSUiYmohcIiEo.roa (raw, json)
Hash identifier: uySaSjp9MrlANp0gHmFl8LRcUoTsKhRvfrROHHKKvMA=
Subject key identifier: 04:38:C0:8D:6C:24:CB:9F:4F:12:68:12:52:26:26:A2:17:08:88:4A
Certificate issuer: /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial: 01856F9497295E553F4E026797AC317EA868
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/BDjAjWwky59PEmgSUiYmohcIiEo.roa
Signing time: Sun 01 Jan 2023 23:04:47 +0000
ROA not before: Sun 01 Jan 2023 23:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200487
IP address blocks: 5.188.28.0/22 maxlen: 32
5.183.188.0/22 maxlen: 32
185.105.224.0/22 maxlen: 32
2a01:5a60::/32 maxlen: 128
2a0e:1600::/32 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:97:29:5e:55:3f:4e:02:67:97:ac:31:7e:a8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Validity
Not Before: Jan 1 23:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0438c08d6c24cb9f4f126812522626a21708884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:58:50:40:6c:7c:6c:bb:d6:60:b2:ef:54:
7a:14:d0:7a:49:c8:4c:29:2e:18:eb:30:3c:1a:72:
7e:dc:e6:f3:3c:19:59:4c:3c:76:1b:6d:9a:7a:27:
89:38:1c:3d:4f:7e:21:d4:8f:6b:97:04:e1:90:d6:
d6:34:78:bb:fd:2a:ea:22:22:39:5a:95:73:0f:46:
fc:39:95:8f:83:a2:f0:13:fb:e5:a4:fb:58:17:09:
67:af:da:51:a0:ea:bb:54:2f:01:03:00:17:fa:11:
f9:1c:cc:81:27:a0:cc:4f:20:36:35:53:15:ca:74:
4e:ea:6f:ae:31:c8:27:d6:43:b0:3f:fc:c3:5b:bb:
3b:19:a2:ef:ac:c6:56:bf:a2:f7:9c:dd:a5:87:94:
3f:b1:bf:ab:68:0a:be:89:b8:23:18:80:e1:df:b5:
52:6a:f4:11:50:9e:c1:7a:a1:a7:9f:65:f2:28:de:
d0:4e:d7:d5:e5:d7:77:3b:06:6c:4e:26:69:6f:b4:
12:17:88:b8:b9:e4:09:c3:ce:0c:b9:d4:06:59:9e:
a6:ac:8e:34:dd:f7:19:e8:77:4d:cc:19:a5:96:ff:
38:10:5d:ba:1a:0c:1b:94:c4:89:e0:b6:38:9a:f1:
24:8d:45:06:b4:49:c7:d7:09:d6:c1:7f:93:a0:c9:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:C0:8D:6C:24:CB:9F:4F:12:68:12:52:26:26:A2:17:08:88:4A
X509v3 Authority Key Identifier:
keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/BDjAjWwky59PEmgSUiYmohcIiEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.188.0/22
5.188.28.0/22
185.105.224.0/22
IPv6:
2a01:5a60::/32
2a0e:1600::/32
Signature Algorithm: sha256WithRSAEncryption
47:ac:34:cd:70:72:7c:ba:2c:c4:48:72:52:e2:d0:2e:db:3f:
88:03:15:46:b5:15:f0:81:0b:e1:02:c8:ad:b7:a0:19:21:7f:
71:d6:8f:dc:9d:3d:86:56:d5:a5:5a:09:b0:1c:50:ee:6b:cf:
e6:7e:ff:82:2b:f7:68:30:e1:b3:37:5c:7d:d5:49:67:4e:fa:
95:dc:3c:aa:bc:db:87:80:be:45:13:25:d9:f4:03:8a:bd:61:
b1:9e:d9:89:95:cd:44:61:69:94:08:d9:cf:2b:4d:0a:f7:b8:
0c:7b:e0:f4:e0:75:11:82:ca:39:80:d4:44:97:d5:0c:eb:08:
83:5d:ac:06:cf:85:3b:35:35:e8:71:2b:a3:ef:93:90:e7:a2:
bf:5d:4f:d4:a3:2a:c6:8a:e0:e2:c3:ce:98:5f:9c:aa:7c:72:
aa:1a:ea:75:bb:66:b9:40:7b:a3:74:71:f9:8f:cd:fb:ea:fa:
31:f5:8d:c9:15:76:3b:dc:bd:9c:79:b1:e2:eb:37:b3:e1:15:
98:8b:41:7f:69:3a:ee:03:52:a5:3f:4b:37:d8:8d:2d:5b:a8:
4d:97:54:ff:ff:cc:6c:f8:ef:94:0a:07:59:72:d0:c9:23:5e:
2a:d0:98:f8:7b:f8:03:37:f4:9e:2c:9c:78:4b:21:e9:43:a2:
54:d2:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:41 2024 by rpki-client on console-fra.rpki-client.org