Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/BvYhfg9mmtfYHNrFKR-1RGhzB5E.roa
File: BvYhfg9mmtfYHNrFKR-1RGhzB5E.roa (raw, json)
Hash identifier: BCQXo9ajOv32352CpPVCfh0FkJxVOPXvbHLlpQNW3OI=
Subject key identifier: 06:F6:21:7E:0F:66:9A:D7:D8:1C:DA:C5:29:1F:B5:44:68:73:07:91
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0F643652CB8DEA744A19C417C60BD
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/BvYhfg9mmtfYHNrFKR-1RGhzB5E.roa
Signing time: Mon 02 Jan 2023 10:04:55 +0000
ROA not before: Mon 02 Jan 2023 10:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48427
IP address blocks: 5.154.56.0/24 maxlen: 24
5.154.56.0/22 maxlen: 22
5.154.57.0/24 maxlen: 24
109.167.92.0/23 maxlen: 23
109.167.92.0/24 maxlen: 24
84.232.55.0/24 maxlen: 24
109.167.93.0/24 maxlen: 24
93.114.253.0/24 maxlen: 24
93.114.252.0/24 maxlen: 24
93.114.252.0/23 maxlen: 23
109.167.58.0/23 maxlen: 23
109.167.58.0/24 maxlen: 24
109.167.64.0/23 maxlen: 23
109.167.64.0/24 maxlen: 24
109.167.59.0/24 maxlen: 24
109.167.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f6:43:65:2c:b8:de:a7:44:a1:9c:41:7c:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f6217e0f669ad7d81cdac5291fb54468730791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:e1:93:9d:e1:bb:c5:5d:32:f6:1a:80:b5:
4f:07:b9:69:5d:ed:a4:0a:a1:48:65:02:17:42:5e:
2b:44:86:9f:44:51:80:f8:81:ff:07:43:e6:93:3c:
ab:f4:6e:be:16:23:1d:92:90:39:d1:dd:bf:8a:9f:
0a:3d:6c:8d:5a:83:1e:2c:63:d1:7e:82:e4:d4:0a:
20:36:35:b3:3e:71:f5:2f:a2:21:3a:59:83:dc:19:
42:2b:74:fb:72:1f:bc:57:82:28:65:a9:34:a5:5c:
08:77:76:5a:c6:1e:2c:eb:eb:04:77:c4:fc:9f:bd:
9e:7f:97:1d:60:07:89:df:e3:3b:f3:85:81:d0:7a:
eb:f3:54:24:f3:03:f5:d4:fe:40:9e:fd:5f:8b:bb:
20:01:a9:1c:45:07:ae:bc:55:87:6f:ab:cb:58:b8:
06:93:e1:04:e5:20:ad:30:34:da:1f:7f:17:5f:6b:
db:54:e3:cb:58:8b:fe:e6:be:0d:54:60:a7:63:80:
68:8f:a7:84:58:73:f2:76:56:19:0d:6f:4a:07:1c:
b1:27:e3:a8:87:69:9b:14:75:2c:5e:e6:ab:85:d2:
c8:63:ca:ba:25:30:da:46:84:4b:b3:a9:cb:f7:71:
56:4d:17:a4:db:56:6d:02:28:54:cf:f6:2c:be:76:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:21:7E:0F:66:9A:D7:D8:1C:DA:C5:29:1F:B5:44:68:73:07:91
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/BvYhfg9mmtfYHNrFKR-1RGhzB5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.56.0/22
84.232.55.0/24
93.114.252.0/23
109.167.58.0/23
109.167.64.0/23
109.167.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:1e:a5:bd:86:ba:bb:ff:e1:f9:db:4c:8a:e3:f1:72:cc:ad:
0f:e6:a8:80:16:3f:10:e6:0c:ff:41:80:90:7a:e8:fe:a7:62:
55:e3:3e:29:a6:f6:c7:7a:fa:fb:9a:4f:60:56:6f:7b:76:95:
fd:74:d4:3c:5d:1c:a1:bc:02:13:92:d8:69:de:c0:ea:84:79:
42:fd:b5:e0:f7:01:b3:59:47:d3:35:55:49:e6:78:44:c7:7e:
87:9d:02:e5:3c:1d:67:96:c0:eb:84:71:6d:b8:47:e0:26:dd:
3c:a3:98:a3:a4:99:a5:17:fe:22:a2:d5:84:cc:12:f7:0d:f2:
23:66:bd:08:a6:43:e1:d8:70:26:3f:4c:5a:ef:e1:fc:39:8a:
0a:8e:2b:25:c0:19:8f:f9:e9:0b:83:95:c3:78:cd:4f:1c:e1:
f6:81:9c:f4:e8:56:5a:2e:35:dc:5e:23:03:b2:73:3a:b8:24:
79:e6:4e:d7:58:2f:e7:d0:00:7c:95:db:b8:44:d5:fa:97:be:
68:e4:3c:be:fc:45:47:3e:0c:5b:6b:0e:16:bb:3e:e3:a2:74:
13:d2:31:6c:5b:33:8b:ea:27:d0:09:61:16:38:06:cc:d8:2f:
6f:37:97:9e:86:77:64:64:ce:56:c7:83:c2:4a:5c:71:ba:b0:
62:a8:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:46 2024 by rpki-client on console-ams.rpki-client.org