Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bvCTOUssQgEBTg2seUe0oJ6jOpg.roa
File: bvCTOUssQgEBTg2seUe0oJ6jOpg.roa (raw, json)
Hash identifier: YNuSB7id3LxXMkbtyhEKN41hkISS6FA2D4A93TSWeys=
Subject key identifier: 6E:F0:93:39:4B:2C:42:01:01:4E:0D:AC:79:47:B4:A0:9E:A3:3A:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D8212AA56FC5FA2A9E3093F0AA91491
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bvCTOUssQgEBTg2seUe0oJ6jOpg.roa
Signing time: Sun 01 Jan 2023 13:25:19 +0000
ROA not before: Sun 01 Jan 2023 13:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210624
IP address blocks: 85.217.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:12:aa:56:fc:5f:a2:a9:e3:09:3f:0a:a9:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ef093394b2c4201014e0dac7947b4a09ea33a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:12:de:17:c5:2a:18:2e:a9:03:a7:82:fc:
d8:ba:99:02:dc:b9:06:65:9a:30:7b:26:9f:f7:d6:
e9:ee:38:6d:47:d8:b7:b2:9d:b0:5e:a9:68:e0:14:
09:5a:6b:96:56:10:f9:47:f7:d6:95:e1:33:90:5c:
73:3e:50:b8:1a:6d:31:48:7e:5a:dc:b5:d4:e7:b4:
d9:7b:0c:d8:6a:37:63:6d:0d:7e:e3:84:a9:28:64:
67:83:6b:c5:90:7e:78:ec:a9:ea:d6:6b:51:80:a2:
d6:7d:29:47:86:51:6f:2f:1d:22:ce:bd:f7:6a:e3:
45:c6:3d:89:04:55:32:35:b2:52:3b:7e:d3:52:ff:
bc:5f:03:5a:e9:9d:b9:2f:ae:57:58:0c:7f:6c:c4:
ae:47:ef:a2:54:0a:62:c2:36:28:1f:55:d9:22:00:
1f:1e:6b:4b:ab:cf:7d:44:df:9d:a3:fa:58:c9:bf:
74:e6:04:30:c5:bc:3c:0e:d9:4d:1a:82:45:22:1a:
90:87:41:58:a9:37:90:91:83:cf:f4:52:ec:a4:be:
68:8b:b1:d1:16:7c:56:e1:c5:80:a8:82:e2:7f:c8:
79:71:3c:65:00:ff:40:eb:3a:3a:0f:42:f4:a3:43:
5c:4c:4f:a8:1b:69:d6:1e:02:36:aa:4f:1e:04:68:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:93:39:4B:2C:42:01:01:4E:0D:AC:79:47:B4:A0:9E:A3:3A:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bvCTOUssQgEBTg2seUe0oJ6jOpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:70:a2:cf:68:4f:20:b1:de:f6:3b:3e:39:6e:e6:37:64:54:
5a:98:f9:7d:3b:ab:d4:d7:d7:27:e6:8c:24:c5:ee:da:cb:70:
67:24:52:96:d5:f3:f4:a7:3e:70:2e:ea:82:db:f4:36:e9:25:
78:33:12:69:50:ab:bb:27:1e:e0:9e:4a:1e:ec:ec:fd:3d:c0:
cb:03:c7:5d:b9:8e:e0:51:e2:6f:3d:79:99:72:af:df:93:a3:
9b:ce:f6:c6:c3:cb:ea:6a:30:89:fe:a7:a4:ef:47:3c:02:e3:
5a:ee:ad:0c:1c:bb:ba:9c:b2:81:9c:33:fb:47:39:b0:30:81:
65:2f:bb:6d:14:6f:3f:df:23:3c:9e:e9:2e:db:5f:9b:61:a0:
94:0a:e5:2b:73:6a:5b:5c:97:dc:e5:01:11:9d:1c:89:04:1e:
2c:f0:89:b7:03:05:2b:3a:04:ff:47:4f:6c:46:d4:91:73:70:
ae:5c:2d:0c:3e:d1:b3:66:60:9f:fa:e0:ed:4d:df:64:4d:d2:
70:02:ab:29:7a:5a:83:e6:25:b0:64:c0:95:4a:28:a1:09:b5:
9c:0a:50:84:0d:af:38:4b:aa:c9:d0:24:f4:45:66:93:99:32:
91:14:34:3d:6e:57:ae:54:a7:5c:6c:6b:3a:2c:db:56:15:0b:
d8:3b:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org