Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/bc8GNhzQQq11TzUlT8_oBKxvkFI.roa
File: bc8GNhzQQq11TzUlT8_oBKxvkFI.roa (raw, json)
Hash identifier: FLWFJDLiV3zRxDhyBoTtJCV8LR2aiWGIINrfpz6eobc=
Subject key identifier: 6D:CF:06:36:1C:D0:42:AD:75:4F:35:25:4F:CF:E8:04:AC:6F:90:52
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 018CC9BBC9B2D50CAA872DA7809B8F37895A
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/bc8GNhzQQq11TzUlT8_oBKxvkFI.roa
Signing time: Tue 02 Jan 2024 10:32:56 +0000
ROA not before: Tue 02 Jan 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201434
IP address blocks: 193.29.207.0/24 maxlen: 24
185.75.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 Apr 2024 06:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c9:b2:d5:0c:aa:87:2d:a7:80:9b:8f:37:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Jan 2 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dcf06361cd042ad754f35254fcfe804ac6f9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:2d:e5:10:8a:16:b2:8a:64:1b:3d:a7:b4:
4d:de:f4:0e:ad:4f:28:0b:78:c3:de:40:04:9b:a0:
1d:24:c3:48:b2:42:16:e0:b4:68:08:68:d7:20:bf:
a3:c7:ad:07:08:ce:16:90:80:df:2a:cd:89:b4:44:
6a:db:56:85:9b:a5:e8:36:6a:9d:45:04:37:c3:37:
29:a6:0c:b4:95:81:48:bd:46:e0:ac:ed:bb:f0:99:
96:99:3d:c4:74:52:58:15:97:7e:78:51:3f:6f:1b:
e0:bf:3d:cb:f9:bf:23:a3:d3:f2:ea:47:5e:c6:d3:
11:51:f9:55:b2:0e:d1:aa:14:95:b3:0e:36:04:fe:
16:c0:ae:79:e5:fb:3d:ef:2f:e9:33:8e:80:94:8d:
f2:77:8f:4c:85:e4:6c:95:52:24:d3:04:9b:b2:f3:
23:9c:5d:43:06:7d:7d:95:1a:7c:ad:e3:58:49:83:
06:0e:e6:d4:cc:25:70:37:5d:68:79:5f:e2:8c:cd:
01:9b:7e:0d:9b:d2:18:8a:9f:45:b1:be:64:2f:21:
94:81:7e:45:b9:10:91:d3:d8:9e:22:26:0f:10:82:
2d:26:42:3e:8d:95:03:f6:6a:34:33:2d:fb:c4:aa:
b2:c0:56:17:1b:5b:ed:e5:db:1f:b0:71:b1:08:d0:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:06:36:1C:D0:42:AD:75:4F:35:25:4F:CF:E8:04:AC:6F:90:52
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/bc8GNhzQQq11TzUlT8_oBKxvkFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.36.0/22
193.29.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a8:15:e3:d8:9c:56:96:bc:53:5c:2f:68:34:66:b6:17:1b:
f0:9d:81:42:67:be:9c:e1:4e:1a:ff:86:f9:41:0b:8f:ba:86:
f8:f4:9e:98:c1:ad:f1:98:22:7c:f7:b5:02:8c:71:34:6e:7c:
ca:29:52:33:92:e8:cb:ff:60:1f:b2:90:3b:65:b3:dd:60:27:
69:64:35:2f:e4:eb:f0:00:b9:dc:ed:d6:5a:b6:d8:27:cf:04:
51:a3:a3:92:00:60:50:84:bc:14:9f:e6:e1:d7:5a:08:47:e4:
d5:5e:83:01:57:12:67:4b:08:a5:c5:31:32:c0:d2:fd:53:69:
fa:50:96:4a:5c:bb:18:58:d3:07:62:57:58:25:56:7e:36:78:
d5:9e:68:64:ff:2f:80:21:46:8d:5b:72:a7:d6:39:79:34:f2:
3c:72:43:34:18:3c:67:ea:db:18:97:2b:7f:23:31:48:87:37:
dc:a1:d6:ae:19:5a:3b:74:d8:4e:5a:b1:ec:6d:d9:8e:6e:1f:
4b:2a:de:49:16:02:c9:ea:ff:8d:53:8b:f8:7c:bd:f1:be:47:
d6:75:88:27:1f:b8:ad:af:bc:e7:f1:a1:50:37:a8:bf:f0:a2:
c8:13:d1:0d:6d:29:0b:7d:1e:5d:4c:e0:db:cf:43:5e:0d:fe:
61:a3:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:50 2024 by rpki-client on console-ams.rpki-client.org