Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BXW8NtIewdqytRO5xdS8ot0IHwU.roa
File: BXW8NtIewdqytRO5xdS8ot0IHwU.roa (raw, json)
Hash identifier: zM59NUggKMV8qsL7VpQMr1POjjm5CqoVUvzKaPtKbUo=
Subject key identifier: 05:75:BC:36:D2:1E:C1:DA:B2:B5:13:B9:C5:D4:BC:A2:DD:08:1F:05
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01882544B3AD742B61D6C8AF0AF25C7FD67B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BXW8NtIewdqytRO5xdS8ot0IHwU.roa
Signing time: Tue 16 May 2023 15:53:59 +0000
ROA not before: Tue 16 May 2023 15:53:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209706
IP address blocks: 185.172.20.0/22 maxlen: 22
185.64.100.0/22 maxlen: 22
62.112.12.0/23 maxlen: 24
86.107.108.0/23 maxlen: 24
188.212.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:44:b3:ad:74:2b:61:d6:c8:af:0a:f2:5c:7f:d6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 16 15:53:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0575bc36d21ec1dab2b513b9c5d4bca2dd081f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:66:59:53:3e:fd:9e:4f:4d:6f:ab:55:ec:
9a:90:22:9f:f7:88:1f:0e:28:8f:34:f7:c2:69:0b:
93:60:2f:79:f8:e4:5f:72:1d:c6:12:de:72:ff:b8:
65:15:cd:3d:5d:45:70:0d:8b:53:42:e9:b1:56:ba:
fb:7b:8e:2e:fc:da:6e:d3:c1:a3:17:04:f7:79:b0:
7b:28:11:4e:e4:b4:d0:0c:b4:4e:c4:3f:69:13:f9:
ea:c5:9b:88:8b:a9:78:4a:ee:a4:80:43:3e:dd:55:
9e:7b:1b:3f:dc:f3:48:ce:f2:11:46:5c:3f:61:61:
1d:d6:83:4a:d6:d0:1b:a7:fd:b0:44:15:3b:f6:41:
28:ac:05:c1:22:60:f1:f0:00:94:c9:ac:bd:d0:db:
1f:be:c3:06:03:9f:37:b2:b3:fe:b4:95:81:c4:e6:
18:27:25:cd:b8:0a:78:8a:b1:44:72:af:fe:f8:f6:
79:b3:31:2e:13:a3:30:83:bd:c8:4c:1d:db:1d:7f:
f3:b0:cf:fc:be:aa:37:98:74:a9:76:bc:6d:ba:31:
db:18:0a:c3:05:fa:ee:2c:b8:35:85:38:98:39:f1:
cd:3a:7a:db:f1:19:21:b5:81:ca:8d:75:e6:d3:06:
ba:9f:d8:41:5c:47:76:36:3e:42:f3:ff:95:dc:5e:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:BC:36:D2:1E:C1:DA:B2:B5:13:B9:C5:D4:BC:A2:DD:08:1F:05
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/BXW8NtIewdqytRO5xdS8ot0IHwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
86.107.108.0/23
185.64.100.0/22
185.172.20.0/22
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:33:9b:71:f5:63:c4:34:f3:4d:bd:a9:91:42:5b:15:25:27:
9b:38:87:3c:ae:e2:4b:4b:cd:8f:a8:b7:69:b7:d5:00:27:a8:
33:26:7b:42:61:ba:7f:08:aa:60:ba:87:29:aa:c5:6c:c4:a7:
fc:57:e9:d8:5e:3a:9a:1c:1d:42:31:ae:56:62:70:72:66:19:
7a:cf:1f:66:d1:b4:de:c7:82:c0:26:0b:1f:29:04:4b:ef:51:
2f:90:55:0d:8e:16:34:25:2e:32:50:ae:1e:f4:c5:34:ed:a3:
5d:66:f5:61:f0:68:11:6d:63:22:55:29:ee:c4:ae:6a:bd:ee:
21:85:3d:ce:e0:65:c3:b2:56:b6:7e:78:b4:72:2e:a6:6b:0a:
0d:27:4f:ca:bf:32:14:fb:29:0a:e2:ee:a0:dd:6a:b9:03:2d:
2a:6b:ad:4c:43:a5:da:2b:50:77:9b:55:e9:ec:13:95:76:4a:
79:08:7a:68:48:0a:ca:26:6a:42:b7:d1:e0:8e:96:49:6a:5a:
22:a0:25:ec:22:79:1a:56:86:61:4d:fb:3d:51:22:98:41:51:
7a:c8:50:58:2e:2a:8f:bc:53:2d:12:82:e5:4d:fd:a1:eb:ec:
57:64:e3:51:06:6e:7b:a6:3c:bf:07:63:8b:35:f4:8b:17:6e:
73:d0:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:11:07 2023 by rpki-client on console-fra.rpki-client.org