Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BcdGKfSLN0JLyRgTZSghpe2Oxn4.roa
File: BcdGKfSLN0JLyRgTZSghpe2Oxn4.roa (raw, json)
Hash identifier: mkEaZ+Ft/pO4oHxFSe7EDd1pbA2Nguzculc0jOxcybs=
Subject key identifier: 05:C7:46:29:F4:8B:37:42:4B:C9:18:13:65:28:21:A5:ED:8E:C6:7E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018DCB7EAAAD5C14E186F54914AAA8F64A91
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BcdGKfSLN0JLyRgTZSghpe2Oxn4.roa
Signing time: Wed 21 Feb 2024 11:48:12 +0000
ROA not before: Wed 21 Feb 2024 11:48:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 45.8.209.0/24 maxlen: 24
213.108.196.0/24 maxlen: 24
2a0b:da00::/29 maxlen: 29
2a0c:77c0::/29 maxlen: 29
2a0c:aa40::/29 maxlen: 29
2a0d:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 May 2024 20:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:7e:aa:ad:5c:14:e1:86:f5:49:14:aa:a8:f6:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 21 11:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05c74629f48b37424bc91813652821a5ed8ec67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:5b:e0:f2:7b:cb:a0:2b:03:6a:5c:18:6f:
43:5e:00:60:5f:0f:35:c0:c0:19:7f:7e:44:13:25:
f6:e2:b8:dd:74:08:18:63:cb:d5:75:10:7f:aa:02:
b4:90:d6:54:d7:e7:28:3b:47:ee:3a:66:05:06:da:
75:98:3d:59:45:c1:9f:4f:38:67:a4:ba:a0:24:c4:
50:20:99:11:3c:94:11:32:2b:18:e6:15:c2:b0:94:
04:da:23:60:28:e3:38:2c:d4:87:a8:ab:dc:35:f3:
a6:e1:a4:5e:0d:23:4d:f6:4d:42:2e:fa:0a:41:13:
34:48:66:c1:cc:c9:2e:2d:25:79:0b:ff:f6:1e:2c:
6d:1b:eb:40:7a:60:1d:9b:a9:01:c3:57:78:6c:85:
89:83:0e:3c:a4:74:53:c3:d6:f5:f7:96:fc:c7:56:
2a:7f:23:ed:8c:b6:d8:cd:4e:23:50:12:a5:59:ce:
8b:3d:c6:25:5d:fd:b4:04:40:72:1b:75:ac:7b:6e:
d5:28:6f:2b:58:ea:8c:94:6b:29:cb:6a:88:c6:01:
31:af:2b:01:2a:6e:ca:62:4c:51:48:28:06:18:ff:
93:15:c2:f4:1a:c5:8d:ab:f9:1b:de:48:e7:b7:5a:
ce:01:19:be:94:e7:b6:9a:ab:3a:b5:cb:1b:0c:a3:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:46:29:F4:8B:37:42:4B:C9:18:13:65:28:21:A5:ED:8E:C6:7E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BcdGKfSLN0JLyRgTZSghpe2Oxn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
213.108.196.0/24
IPv6:
2a0b:da00::/29
2a0c:77c0::/29
2a0c:aa40::/29
2a0d:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:bf:73:0e:ad:80:73:52:20:61:d4:db:b4:4d:5d:99:a1:5a:
53:14:25:60:3f:12:88:e9:da:d8:c1:aa:c7:10:dc:33:c5:87:
a7:5b:f6:a7:d9:6e:f3:5d:38:b2:13:32:68:5f:37:37:9c:7c:
2a:99:37:48:da:e0:fa:46:d7:df:96:48:0f:63:c2:66:43:87:
1c:d9:9d:42:53:b4:84:cc:02:d6:c9:8e:26:58:49:c7:83:a1:
c6:93:d2:bf:6f:98:39:f5:a0:aa:c7:10:6b:06:c0:f0:6d:35:
bd:61:2d:29:8f:e4:92:d5:fb:82:ac:e9:99:df:f8:aa:54:21:
71:32:ae:aa:a5:a6:2d:f7:6b:69:4e:87:4c:2d:cf:bf:69:de:
da:2b:5f:ac:16:2b:1b:aa:08:b3:95:19:2f:dd:47:ee:47:45:
b2:c5:f3:25:3c:fa:84:c4:40:32:e4:4d:07:a4:ac:a4:1d:1f:
ec:a4:41:94:df:61:ad:0a:39:9c:d6:25:83:f5:76:a8:3f:db:
11:b3:d1:b7:6a:51:23:a7:6d:70:e8:69:0e:74:b5:6e:9f:31:
fc:99:58:d7:96:e0:59:58:4e:c3:c5:5a:f4:81:cc:fe:92:eb:
ef:f1:b9:32:0c:7c:92:ae:65:8f:03:09:5c:65:9e:55:08:6b:
74:7c:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org