Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/Bghiy7dZJR7mw8Qtx7t7imKHgo0.roa
File: Bghiy7dZJR7mw8Qtx7t7imKHgo0.roa (raw, json)
Hash identifier: Zn5Z3Pf+AeCzTMSFJR2Ovtz4eh66TXddxmtiPYS34kg=
Subject key identifier: 06:08:62:CB:B7:59:25:1E:E6:C3:C4:2D:C7:BB:7B:8A:62:87:82:8D
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 01856D0A8C130A11A14F7D44165A0582660A
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/Bghiy7dZJR7mw8Qtx7t7imKHgo0.roa
Signing time: Sun 01 Jan 2023 11:14:45 +0000
ROA not before: Sun 01 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199335
IP address blocks: 188.241.40.0/21 maxlen: 21
185.113.60.0/22 maxlen: 22
85.92.164.0/22 maxlen: 22
85.92.160.0/22 maxlen: 22
85.92.168.0/22 maxlen: 22
85.92.172.0/22 maxlen: 22
85.92.176.0/22 maxlen: 22
85.92.184.0/22 maxlen: 22
85.92.180.0/22 maxlen: 22
85.92.188.0/22 maxlen: 22
185.5.64.0/22 maxlen: 22
80.94.192.0/20 maxlen: 20
176.126.224.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8c:13:0a:11:a1:4f:7d:44:16:5a:05:82:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Jan 1 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=060862cbb759251ee6c3c42dc7bb7b8a6287828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:a6:c3:a5:1b:8c:d8:5a:56:d8:09:49:68:
84:c2:86:0c:96:07:91:8b:6f:06:c2:e5:ca:59:0e:
85:81:ff:32:34:e1:82:5a:70:a7:4d:93:00:2b:f1:
ca:db:ce:18:9d:e3:d2:bd:51:5b:a5:ee:df:a8:57:
51:99:c2:de:72:f0:96:38:c0:dc:51:18:36:34:6a:
72:ab:29:df:62:43:a3:3b:f1:75:7f:2e:55:6f:05:
6e:ad:b5:fb:dd:14:5c:70:9f:a0:8e:b6:2a:05:62:
c6:ab:45:85:9a:a8:04:e5:ac:5e:25:6a:51:a8:a1:
27:e3:df:ae:1d:86:1c:9f:8b:35:be:30:2c:06:d5:
c7:4b:e9:cd:0c:fb:3e:bb:d8:1e:f4:22:b2:70:8a:
93:47:ef:75:0b:5f:46:0e:b6:17:86:6a:33:b5:03:
c8:1a:cc:b6:24:e5:f1:b9:52:24:9e:ce:51:b2:55:
94:81:2d:c7:e6:73:c4:b4:ad:f2:56:c5:df:32:9d:
24:08:2e:66:45:f5:1c:d7:76:ad:c7:13:77:1f:1d:
d1:d1:d2:b0:51:c1:fd:36:9e:5d:4f:b1:bf:ff:5c:
03:c9:67:67:a2:b4:a9:5c:a6:b0:8d:b1:dc:04:d4:
43:15:8d:48:92:fb:6f:75:98:9b:df:6a:07:35:65:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:62:CB:B7:59:25:1E:E6:C3:C4:2D:C7:BB:7B:8A:62:87:82:8D
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/Bghiy7dZJR7mw8Qtx7t7imKHgo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.192.0/20
85.92.160.0/19
176.126.224.0/21
185.5.64.0/22
185.113.60.0/22
188.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
23:fe:06:7c:fc:2d:4c:fe:b5:e7:5d:de:10:41:b2:53:55:77:
4d:a7:91:30:75:fa:d8:29:88:f3:b7:56:a3:61:03:19:5a:1f:
1a:74:fc:a5:1c:ac:56:b9:55:d9:96:79:c7:4e:ed:52:77:7a:
87:55:d4:7d:41:76:11:f4:da:52:b3:f2:38:35:6e:b3:e2:d4:
52:af:2d:71:b6:29:cb:c4:00:9d:c4:c4:7c:b0:51:22:b6:2c:
8b:28:a5:32:40:aa:a3:67:9a:57:bd:fa:1b:76:35:ec:e0:98:
d0:f7:3e:9c:90:8b:f9:cf:8c:f9:6b:64:49:d7:68:81:2e:d6:
48:22:cb:27:69:15:17:c5:1a:6f:af:77:f1:c0:b2:e5:e2:e8:
30:c2:72:b2:45:cf:e7:4f:cf:3d:7e:48:64:05:79:75:98:6e:
7b:ad:2b:b8:89:35:a0:04:43:19:24:62:1b:cf:d3:05:1e:25:
f0:b6:04:a1:68:39:0d:be:bd:ac:97:e1:b7:30:44:c3:f8:38:
78:b6:91:85:7c:9e:5e:13:77:84:6c:72:d0:7a:84:d0:ff:ca:
6a:8a:b4:6a:0c:05:19:88:69:46:b4:36:d9:75:e4:be:31:78:
29:4a:8c:40:b0:8c:cd:10:0a:33:f8:80:5c:b4:f0:aa:a6:d8:
f4:83:48:02
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 3 08:30:01 2023 by rpki-client on console-ams.rpki-client.org