Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/u5IS-Ph2AqkI7UJNBtdfBxEragM.roa
File: u5IS-Ph2AqkI7UJNBtdfBxEragM.roa (raw, json)
Hash identifier: +I+ggZAj3fgs4WWv/c5sZKwfe/nuEk1/W20+mxqnPO8=
Subject key identifier: BB:92:12:F8:F8:76:02:A9:08:ED:42:4D:06:D7:5F:07:11:2B:6A:03
Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial: 01856E5D5732074AC0DE86FD2FF332531892
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/u5IS-Ph2AqkI7UJNBtdfBxEragM.roa
Signing time: Sun 01 Jan 2023 17:24:49 +0000
ROA not before: Sun 01 Jan 2023 17:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198913
IP address blocks: 46.243.123.0/24 maxlen: 24
46.243.124.0/24 maxlen: 24
46.243.120.0/21 maxlen: 21
46.243.125.0/24 maxlen: 24
46.243.121.0/24 maxlen: 24
46.243.122.0/24 maxlen: 24
46.243.126.0/24 maxlen: 24
46.243.127.0/24 maxlen: 24
31.220.147.0/24 maxlen: 24
185.132.24.0/22 maxlen: 22
185.132.24.0/24 maxlen: 24
185.132.26.0/24 maxlen: 24
185.132.27.0/24 maxlen: 24
185.132.25.0/24 maxlen: 24
185.173.228.0/24 maxlen: 24
185.173.228.0/22 maxlen: 22
185.173.229.0/24 maxlen: 24
185.173.230.0/24 maxlen: 24
185.173.231.0/24 maxlen: 24
217.19.13.0/24 maxlen: 24
2a03:d400:228::/48 maxlen: 48
2a03:d400:123::/48 maxlen: 48
2a03:d400:26::/48 maxlen: 48
2a03:d400:126::/48 maxlen: 48
2a03:d400:121::/48 maxlen: 48
2a03:d400:25::/48 maxlen: 48
2a03:d400:125::/48 maxlen: 48
2a03:d400::/32 maxlen: 32
2a03:d400:120::/48 maxlen: 48
2a03:d400:122::/48 maxlen: 48
2a03:d400:13::/48 maxlen: 48
2a0b:6f00::/29 maxlen: 29
2a03:d400:231::/48 maxlen: 48
2a03:d400:27::/48 maxlen: 48
2a03:d400:127::/48 maxlen: 48
2a03:d400:230::/48 maxlen: 48
2a03:d400:229::/48 maxlen: 48
2a03:d400:24::/48 maxlen: 48
2a03:d400:124::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:57:32:07:4a:c0:de:86:fd:2f:f3:32:53:18:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Validity
Not Before: Jan 1 17:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb9212f8f87602a908ed424d06d75f07112b6a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:4e:51:6d:ad:97:82:78:ae:f4:44:02:47:
39:b0:fd:7b:35:18:d9:e0:eb:7d:cb:a3:01:8e:bb:
b9:f1:d6:38:37:a1:c4:1a:4e:ac:50:f6:de:ac:9c:
ef:e9:11:df:c5:f1:50:aa:cb:ce:60:cf:9c:cc:00:
95:4a:1d:7e:c3:0d:90:47:19:f8:ae:c2:8b:7a:14:
19:80:3d:e8:f3:2a:d8:8d:8c:1f:97:11:aa:86:f1:
a8:0b:01:b4:c1:8e:ff:f8:b2:f6:0c:76:82:8b:97:
8d:36:c9:58:a0:91:39:26:f5:f8:ec:52:fe:c9:68:
59:99:61:06:66:5d:63:0c:2d:9d:2a:d7:f9:ad:66:
d3:10:57:a8:4b:66:95:fa:ad:69:7f:ab:26:ba:29:
91:c0:40:b6:07:d0:a7:82:00:fb:eb:b3:29:23:51:
86:24:8c:c6:c3:dd:30:21:06:03:62:bd:54:62:0f:
60:03:fc:85:09:7c:94:d1:09:bc:5e:fe:97:5c:45:
0d:e2:07:e0:65:c9:b2:8e:6d:6e:9e:c6:c3:4c:05:
50:13:eb:92:62:96:7b:72:77:69:59:49:cf:e3:71:
96:42:1e:93:cd:b4:46:ec:e9:e0:45:42:7b:01:ea:
ae:9c:76:de:4f:ab:7c:78:3e:2c:0d:84:8f:5c:ac:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:12:F8:F8:76:02:A9:08:ED:42:4D:06:D7:5F:07:11:2B:6A:03
X509v3 Authority Key Identifier:
keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/u5IS-Ph2AqkI7UJNBtdfBxEragM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.147.0/24
46.243.120.0/21
185.132.24.0/22
185.173.228.0/22
217.19.13.0/24
IPv6:
2a03:d400::/32
2a0b:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:5d:74:e2:dc:3a:04:92:54:67:f4:c9:21:5a:d9:9e:cd:b1:
51:c3:8e:50:a2:36:66:f7:11:ab:b0:22:7d:4e:42:0b:21:c2:
7b:e5:05:ef:57:d3:f1:6e:08:db:32:59:05:35:c5:26:68:1c:
2e:8e:d6:ec:b7:a2:04:26:df:f7:17:c9:c2:21:13:fa:33:27:
6f:2f:f5:cc:ac:85:06:52:81:72:f7:aa:a2:33:bf:8c:0a:f6:
0b:cd:ff:f1:70:e0:5d:68:1a:fc:30:00:4b:74:66:d1:b5:f9:
af:d9:fb:b6:8e:ae:41:7a:e8:dd:cc:69:f4:99:38:38:3e:47:
67:8b:25:22:d9:80:f4:bf:bb:05:5b:43:82:c2:78:89:3b:7d:
88:63:b9:b1:2e:62:73:20:e0:c7:95:11:ec:9e:3b:ad:08:72:
95:68:3f:1d:f8:a2:5b:11:8e:b4:e9:fe:ed:f5:0c:d4:63:c0:
c3:19:60:d0:90:52:b3:15:cb:94:2e:6d:d5:e8:54:2e:e9:78:
ea:ce:88:22:39:4f:10:dc:2d:c6:63:59:69:2e:d9:3e:de:87:
8f:c4:4c:92:0b:7a:66:a6:f6:98:d4:5a:04:45:8b:0d:86:bf:
3b:c0:c8:c0:05:83:96:46:01:1b:7b:aa:3b:0e:bf:6a:29:29:
78:61:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:34 2024 by rpki-client on console-fra.rpki-client.org