Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/BjkNh1aPyDODxWCwyCiThFdGJLE.roa
File: BjkNh1aPyDODxWCwyCiThFdGJLE.roa (raw, json)
Hash identifier: V+V6WGWY9IL/u9QcJe0su61nURgQfst9sds+CiIUmYM=
Subject key identifier: 06:39:0D:87:56:8F:C8:33:83:C5:60:B0:C8:28:93:84:57:46:24:B1
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 01856DCAD5759905578325AFDBC691191FD1
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/BjkNh1aPyDODxWCwyCiThFdGJLE.roa
Signing time: Sun 01 Jan 2023 14:44:47 +0000
ROA not before: Sun 01 Jan 2023 14:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39729
IP address blocks: 185.110.66.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:d5:75:99:05:57:83:25:af:db:c6:91:19:1f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Jan 1 14:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06390d87568fc83383c560b0c8289384574624b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:54:30:a7:51:3c:96:6f:6a:8b:df:72:68:
62:67:62:4b:49:a9:55:64:93:1e:40:f6:84:8e:4b:
e9:1c:45:f6:9f:2b:ea:7e:bb:5f:2c:11:f6:ce:51:
d9:e6:c4:b8:03:a3:f2:2f:a3:b1:8c:22:e2:24:83:
99:df:31:f6:e7:e8:d0:13:80:7b:eb:1e:f4:57:95:
28:fc:1b:57:d0:b1:60:6d:62:20:a5:f5:1e:8e:d4:
ff:79:e9:0f:74:11:aa:31:9d:21:aa:4d:fb:5b:b5:
4f:20:4e:bf:91:97:1b:b1:de:37:4b:ce:f1:05:b5:
03:57:fa:70:53:be:28:f7:4d:fb:52:c2:d9:dc:05:
16:96:f4:cb:a1:f7:8b:7e:fd:94:59:46:4a:a3:d7:
75:ba:7d:ab:1d:ba:44:49:3d:f2:0a:58:78:0c:7e:
80:bc:76:89:03:fd:ba:0b:76:0f:b9:f9:f2:e1:92:
15:d1:d4:50:52:12:14:7f:5e:f9:fe:ac:13:60:68:
74:94:f5:b6:a4:2f:cc:12:23:46:b8:ee:81:4c:59:
55:f0:4f:f9:03:64:89:7d:94:5f:88:5b:62:cf:e6:
3b:bd:1e:ec:64:61:c6:ea:fb:28:f8:4a:93:81:c4:
96:9a:e6:75:c7:92:ac:f1:44:43:48:fe:88:a5:f8:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:39:0D:87:56:8F:C8:33:83:C5:60:B0:C8:28:93:84:57:46:24:B1
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/BjkNh1aPyDODxWCwyCiThFdGJLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.66.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:46:5c:f1:2c:ce:18:06:64:e1:d5:31:18:9f:1c:c7:b6:8b:
48:24:45:d1:1d:4e:31:62:62:10:5c:8b:3b:6b:44:97:19:c0:
c8:d5:ac:98:f5:80:55:e7:1f:6b:31:59:61:0b:41:b2:5c:70:
fc:24:16:2b:ac:dd:c5:9f:78:87:3f:c2:ee:a0:5f:b6:14:c1:
4d:51:99:2e:77:ac:35:a1:96:cc:e8:74:de:aa:b2:d1:fd:26:
02:8b:da:5d:12:6b:19:ba:32:22:12:fc:72:02:3c:55:c8:81:
a3:dc:68:5c:9f:66:7c:ec:e1:ad:ec:21:f7:8a:c2:15:90:d6:
dd:c5:0c:5e:61:bd:12:13:53:f8:71:f7:9f:2b:57:e1:6c:a8:
74:6d:7f:67:b7:86:69:06:da:80:f3:e5:7e:1c:32:a0:eb:98:
dd:77:a0:81:24:d7:cc:80:0d:7b:9a:d4:b9:e2:6d:f3:39:85:
ea:95:f4:15:33:a8:a0:24:88:90:cc:09:4c:18:7d:37:76:8e:
26:66:1c:6e:ef:44:32:71:94:5e:8e:c9:73:a0:93:5c:60:84:
61:60:0c:db:74:c1:0e:8a:2b:cb:8a:e0:6a:f0:6f:94:5b:c6:
46:a6:f3:10:eb:b0:72:9b:bd:13:9b:f5:da:40:c7:a1:77:e6:
d5:bd:55:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtytV1mQVXgyWv28aRGR/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZmQyYzc0YWQ2ZmFlMmRkZDBmNmU5YzM5ZmRlODMxODkz
YWU2ZjkwHhcNMjMwMTAxMTQ0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjM5MGQ4NzU2OGZjODMzODNjNTYwYjBjODI4OTM4NDU3NDYyNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRRUMKdRPJZvaovfcmhiZ2JLSalV
ZJMeQPaEjkvpHEX2nyvqfrtfLBH2zlHZ5sS4A6PyL6OxjCLiJIOZ3zH25+jQE4B7
6x70V5Uo/BtX0LFgbWIgpfUejtT/eekPdBGqMZ0hqk37W7VPIE6/kZcbsd43S87x
BbUDV/pwU74o9037UsLZ3AUWlvTLofeLfv2UWUZKo9d1un2rHbpEST3yClh4DH6A
vHaJA/26C3YPufny4ZIV0dRQUhIUf175/qwTYGh0lPW2pC/MEiNGuO6BTFlV8E/5
A2SJfZRfiFtiz+Y7vR7sZGHG6vso+EqTgcSWmuZ1x5Ks8URDSP6IpfjAJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAY5DYdWj8gzg8VgsMgok4RXRiSxMB8GA1UdIwQY
MBaAFML9LHStb64t3Q9unDn96DGJOub5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQt
NTM1Y2MwYzEwMmYwLzEvQmprTmgxYVB5RE9EeFdDd3lDaVRoRmRHSkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQtNTM1Y2MwYzEwMmYw
LzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuW5CMA0G
CSqGSIb3DQEBCwUAA4IBAQC7RlzxLM4YBmTh1TEYnxzHtotIJEXRHU4xYmIQXIs7
a0SXGcDI1ayY9YBV5x9rMVlhC0GyXHD8JBYrrN3Fn3iHP8LuoF+2FMFNUZkud6w1
oZbM6HTeqrLR/SYCi9pdEmsZujIiEvxyAjxVyIGj3Ghcn2Z87OGt7CH3isIVkNbd
xQxeYb0SE1P4cfefK1fhbKh0bX9nt4ZpBtqA8+V+HDKg65jdd6CBJNfMgA17mtS5
4m3zOYXqlfQVM6igJIiQzAlMGH03do4mZhxu70QycZRejslzoJNcYIRhYAzbdMEO
iivLiuBq8G+UW8ZGpvMQ67Bym70Tm/XaQMehd+bVvVX3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:56 2024 by rpki-client on console-fra.rpki-client.org