Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/BXw9D_HYCRTFLaH6Qj0HlS0KSQo.roa
File: BXw9D_HYCRTFLaH6Qj0HlS0KSQo.roa (raw, json)
Hash identifier: lL5ABdIpG0ZqKwYyUmyGlNliiTZRBnG/BzouM8yzTg4=
Subject key identifier: 05:7C:3D:0F:F1:D8:09:14:C5:2D:A1:FA:42:3D:07:95:2D:0A:49:0A
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01889F1FA84240E9C6BD332C633A10EA359E
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/BXw9D_HYCRTFLaH6Qj0HlS0KSQo.roa
Signing time: Fri 09 Jun 2023 07:47:11 +0000
ROA not before: Fri 09 Jun 2023 07:47:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47844
IP address blocks: 62.122.88.0/21 maxlen: 21
31.130.0.0/19 maxlen: 19
31.130.16.0/20 maxlen: 20
178.212.80.0/21 maxlen: 21
93.157.163.0/24 maxlen: 24
93.157.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:1f:a8:42:40:e9:c6:bd:33:2c:63:3a:10:ea:35:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 9 07:47:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=057c3d0ff1d80914c52da1fa423d07952d0a490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:81:2b:e3:d7:b6:e9:e0:7e:02:92:17:1b:
65:ca:84:30:c1:3e:c7:50:1a:4c:5f:08:90:08:54:
ad:eb:f6:ca:30:74:33:2d:ef:b4:f3:3d:8d:a8:e2:
ac:39:b0:ca:db:05:ff:e9:ba:f4:93:8b:5a:d0:a9:
2a:bf:5e:a4:a5:c3:e4:a2:02:75:bd:91:40:84:a6:
d4:32:4d:d6:5d:8e:97:96:6f:2a:7f:64:e2:63:f2:
15:a7:19:45:ac:12:9e:9e:6e:c9:20:50:b0:df:0f:
57:84:47:26:e0:61:d6:d2:8b:de:cd:ad:69:d6:a6:
03:ea:b3:0c:7f:1f:da:0d:38:23:0d:ff:08:7e:a3:
6a:b7:5a:84:8d:14:4a:a6:38:e1:37:2a:62:2c:4b:
c5:b2:8d:33:b5:a2:3a:2d:a8:d7:3e:fb:18:31:d3:
b1:0a:6b:e2:4c:82:08:71:61:46:44:00:93:1c:ab:
8f:9e:d6:be:12:62:bb:36:81:85:fc:ed:44:6e:c6:
c6:e3:b5:b1:49:8c:68:2d:fb:8e:39:54:8f:0d:d7:
24:d3:17:37:dd:0d:24:1a:ba:02:3a:2c:39:84:c9:
03:8c:05:1e:c8:37:cd:33:b9:41:b2:7a:b7:f6:e4:
b3:80:d8:2c:31:71:0d:57:e8:5c:0c:8e:f4:81:e1:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:3D:0F:F1:D8:09:14:C5:2D:A1:FA:42:3D:07:95:2D:0A:49:0A
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/BXw9D_HYCRTFLaH6Qj0HlS0KSQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.0.0/19
62.122.88.0/21
93.157.160.0/21
178.212.80.0/21
Signature Algorithm: sha256WithRSAEncryption
74:f4:05:0b:de:9f:ec:e4:2d:72:89:a4:f7:49:0f:9f:66:29:
02:60:00:46:5b:61:64:8e:14:d3:2c:5e:e3:4d:0e:33:7b:a0:
32:8f:1f:f5:f4:cd:b7:2e:97:39:71:1e:a9:c6:1b:6c:3d:d9:
ab:6a:24:09:37:c9:33:06:33:89:b8:ea:5e:ce:14:39:fa:c0:
5b:5f:04:34:16:27:7f:7c:dd:59:c9:55:1a:9d:df:85:00:6f:
28:02:83:18:4c:b5:49:fb:ce:0e:5f:69:10:c2:b0:43:96:c6:
c7:50:d3:13:6e:93:64:0d:77:e0:c1:b8:f6:46:10:ec:19:82:
0c:70:ed:80:a8:96:5f:29:60:2b:9a:51:7d:87:03:b3:46:e1:
25:bb:49:4c:d1:b2:28:9f:02:b4:4b:31:c6:87:4a:0c:45:02:
00:75:c9:65:4e:14:f2:c6:57:41:3d:48:c8:02:89:26:59:b6:
c2:26:bd:9d:12:14:23:d0:41:71:19:82:bc:b4:7a:e8:5e:bc:
df:c6:f3:d5:2e:0a:ce:69:a4:e7:76:c6:85:e6:49:e8:6c:0f:
e1:b5:e7:b6:74:2a:13:08:ff:20:3e:1e:1a:f5:df:9b:43:9e:
b7:de:85:b3:df:34:80:f4:5b:17:d9:95:eb:31:5f:79:3c:2d:
3e:17:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:37 2023 by rpki-client on console-ams.rpki-client.org