Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/BqwT4yP3b6wKlFmDRX58upPehXA.roa
File: BqwT4yP3b6wKlFmDRX58upPehXA.roa (raw, json)
Hash identifier: 2g2mtC0JT0jo8s7+h91ikoRmiqaozAhMv8NjVCDPsHk=
Subject key identifier: 06:AC:13:E3:23:F7:6F:AC:0A:94:59:83:45:7E:7C:BA:93:DE:85:70
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0188721841488755725F7ECBCC16FF42B64C
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/BqwT4yP3b6wKlFmDRX58upPehXA.roa
Signing time: Wed 31 May 2023 13:56:11 +0000
ROA not before: Wed 31 May 2023 13:56:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 185.162.88.0/24 maxlen: 24
185.162.90.0/23 maxlen: 24
185.174.41.0/24 maxlen: 24
185.174.42.0/23 maxlen: 24
185.172.36.0/23 maxlen: 24
185.170.130.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.175.164.0/22 maxlen: 24
185.165.152.0/23 maxlen: 24
185.165.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:18:41:48:87:55:72:5f:7e:cb:cc:16:ff:42:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: May 31 13:56:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06ac13e323f76fac0a945983457e7cba93de8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:91:f4:7f:ca:84:53:7b:98:0b:6f:3e:9d:
8d:5e:8d:c8:56:f8:fd:c3:76:d8:7d:29:34:d9:bd:
b1:22:f5:2b:d0:2a:a8:d0:b3:39:e7:76:79:36:3a:
85:07:89:c3:03:9f:af:63:b0:55:cc:66:b2:7f:74:
5f:a9:92:5c:c9:88:39:03:0d:22:77:c2:81:9c:8c:
0e:47:2c:b9:29:bb:60:73:ab:b9:b8:11:cb:4a:7c:
91:96:39:0e:87:c8:94:ad:fb:c8:c8:73:f5:7e:d7:
8b:1c:8e:72:f4:45:f1:d5:27:44:f7:6a:61:03:2a:
42:a7:68:69:99:b2:37:e8:b8:8a:cf:52:90:8c:3f:
cd:59:36:3a:41:78:07:36:1f:82:b7:e9:1b:73:64:
43:4d:6e:f8:c4:9f:a3:15:30:74:e1:64:aa:dd:b3:
61:66:ea:8e:ee:f5:9f:62:91:6a:0b:e1:db:6c:3c:
8a:fe:f5:d8:64:fa:12:34:c8:59:64:db:8b:d3:50:
62:8b:23:69:f1:38:53:1a:3a:6f:f6:c5:74:5e:68:
da:25:b8:35:72:eb:cb:e0:e3:07:09:48:4f:0c:d0:
5c:40:db:48:be:69:3b:29:50:c6:ac:b7:d3:58:79:
f3:4a:ea:a7:c8:5b:1c:19:16:58:80:43:a8:8e:b1:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AC:13:E3:23:F7:6F:AC:0A:94:59:83:45:7E:7C:BA:93:DE:85:70
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/BqwT4yP3b6wKlFmDRX58upPehXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.88.0/24
185.162.90.0/23
185.165.152.0/23
185.165.155.0/24
185.170.128.0/24
185.170.130.0/24
185.172.36.0/23
185.174.41.0-185.174.43.255
185.175.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:7e:8b:a8:01:6a:73:d9:22:62:a8:b4:34:17:cf:f3:5f:ca:
90:fb:36:32:c7:7d:52:1e:73:56:d1:3e:80:6d:a9:52:c5:cb:
8d:17:bf:8d:82:66:9e:0a:55:56:dc:20:68:92:7a:e2:9c:45:
74:14:1e:f3:12:0c:01:2e:f2:36:89:5d:b2:47:8e:cd:63:96:
40:2f:eb:90:75:d3:79:13:41:42:07:92:e5:ca:ff:3f:24:11:
38:7f:b1:c5:8c:7f:27:f4:e4:f3:d5:9b:b5:f3:d0:80:76:06:
71:ce:75:4b:90:77:61:2a:6e:f2:02:bb:ec:79:0f:11:9a:60:
a8:57:0f:e6:a8:7d:2a:fe:03:46:2c:01:dc:28:30:78:24:30:
7e:b8:fd:b9:69:1e:b3:41:36:79:a9:79:41:09:b2:e2:a6:c8:
b5:02:49:ef:ce:b2:72:77:fb:a4:44:3f:74:2c:6f:7e:e2:fd:
cf:03:51:45:13:fd:14:ad:e1:aa:64:fa:3d:e0:cb:10:14:7b:
7d:d0:9d:43:48:ce:57:e8:2c:2d:b3:a7:7a:59:19:5c:bd:3f:
0a:e9:d3:54:61:74:83:e0:a9:62:4c:f8:da:c0:ca:1f:c3:f8:
59:1d:67:67:33:68:f6:36:69:c8:56:31:c5:17:61:ab:dc:cf:
ca:1f:a1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:21 2024 by rpki-client on console-ams.rpki-client.org