Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Bchlekx3MmPhDM9qFOQGpPbjWik.roa
File: Bchlekx3MmPhDM9qFOQGpPbjWik.roa (raw, json)
Hash identifier: csimyF0pmX0WF7LT9T4aHbm6OPHdnP9gpLWdSzC1D6I=
Subject key identifier: 05:C8:65:7A:4C:77:32:63:E1:0C:CF:6A:14:E4:06:A4:F6:E3:5A:29
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 018CC72742E81D89940133CB01CCECE891B3
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Bchlekx3MmPhDM9qFOQGpPbjWik.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1820
IP address blocks: 185.170.192.0/22 maxlen: 32
195.66.93.0/24 maxlen: 32
31.223.224.0/21 maxlen: 32
91.226.1.0/24 maxlen: 32
195.177.72.0/22 maxlen: 32
185.45.244.0/22 maxlen: 32
185.16.228.0/22 maxlen: 32
193.16.47.0/24 maxlen: 32
2a00:6180::/29 maxlen: 128
2a13:8800::/29 maxlen: 64
Validation: Failed, certificate revoked on Wed 21 Feb 2024 11:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:42:e8:1d:89:94:01:33:cb:01:cc:ec:e8:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05c8657a4c773263e10ccf6a14e406a4f6e35a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:b8:3c:b0:2c:7c:da:35:41:db:3c:32:67:
24:48:1b:10:63:fb:71:0c:c4:f1:2e:c9:40:fb:db:
3f:7e:ef:66:4e:0f:05:13:ff:33:65:3c:34:ea:91:
7b:f6:37:c3:74:93:0a:21:8d:fb:bf:a3:33:0c:1d:
04:82:06:30:67:16:a7:d3:12:cc:68:56:79:b7:a1:
22:92:bc:ba:44:78:c9:f4:3f:4d:21:8f:7a:e3:2b:
3f:a5:0f:97:4c:19:52:8c:c2:88:86:71:b7:32:71:
70:75:4f:f9:c7:7c:96:6c:f7:4a:7e:d5:ec:5d:1e:
8a:96:37:71:71:1a:38:b9:03:e7:ec:5a:b5:3e:ae:
78:f7:33:25:c8:64:19:2f:1a:8e:54:b0:80:73:71:
f9:74:9c:d5:ea:52:35:4b:4b:cc:4c:b4:c6:cb:ef:
7d:55:ee:43:e6:5c:66:4c:f5:c4:36:93:23:69:85:
da:cc:c2:06:13:a3:25:f9:88:db:f1:d0:fa:34:26:
10:dd:6b:f4:08:79:18:59:f0:92:04:d4:9c:f8:b8:
75:08:84:be:52:f2:45:2e:28:cf:00:72:98:b2:62:
c4:6d:27:db:69:71:87:da:e1:81:19:fb:47:bf:44:
72:30:87:31:8a:21:05:fc:4f:cb:90:2f:13:48:59:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:65:7A:4C:77:32:63:E1:0C:CF:6A:14:E4:06:A4:F6:E3:5A:29
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Bchlekx3MmPhDM9qFOQGpPbjWik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.224.0/21
91.226.1.0/24
185.16.228.0/22
185.45.244.0/22
185.170.192.0/22
193.16.47.0/24
195.66.93.0/24
195.177.72.0/22
IPv6:
2a00:6180::/29
2a13:8800::/29
Signature Algorithm: sha256WithRSAEncryption
67:a9:1d:3f:24:c4:66:be:e0:33:f0:fa:2c:a2:72:51:46:4d:
e6:f9:53:b4:18:48:54:2b:85:3f:e8:2b:00:6c:14:6a:cd:3d:
7a:13:13:6a:15:1d:2e:aa:28:dc:f2:0f:7c:db:46:33:0c:74:
dd:b1:a1:53:cb:35:f1:9a:ce:e0:a9:cb:cd:7e:b3:61:78:2d:
cc:a1:d0:d4:e7:3f:c0:55:b0:04:1f:24:82:54:e0:1b:04:74:
25:03:ed:0c:8a:3f:50:83:05:d3:e9:ac:8b:87:c2:5c:ee:32:
c5:e3:01:41:b1:1b:5d:37:f5:23:1a:85:a3:83:1d:0c:16:30:
97:60:26:61:da:3a:34:7d:31:5d:50:62:95:af:36:96:5f:78:
1a:d0:08:ef:4a:be:28:36:31:3d:5e:7d:cd:9e:c6:05:13:9b:
55:36:16:84:f0:e5:13:59:4b:11:4b:b5:ec:f8:e2:ad:cc:13:
2a:b5:cb:ec:dd:88:57:6d:4f:70:f8:42:24:f1:f6:cb:a4:88:
96:76:14:16:48:bd:f1:3a:c3:e5:0f:ea:d0:97:bb:44:fc:72:
e7:9f:e5:1b:98:14:63:d0:9b:be:d4:9e:b2:cc:cb:f5:28:28:
d9:53:b0:43:7b:c0:57:fa:b7:c8:4f:f8:cf:0f:a7:ce:d7:e8:
3d:f0:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 16:10:57 2024 by rpki-client on console-ams.rpki-client.org