Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/BWI19mMkwc1yqO8wP7eMBboeEUg.roa
File: BWI19mMkwc1yqO8wP7eMBboeEUg.roa (raw, json)
Hash identifier: YeSernoG17bP9U2p+24xZlxXbkaBxT1jb0OKMFMEA58=
Subject key identifier: 05:62:35:F6:63:24:C1:CD:72:A8:EF:30:3F:B7:8C:05:BA:1E:11:48
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 01856C7839E7FE9C514F96A5E585BA8AC3F9
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/BWI19mMkwc1yqO8wP7eMBboeEUg.roa
Signing time: Sun 01 Jan 2023 08:34:56 +0000
ROA not before: Sun 01 Jan 2023 08:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200356
IP address blocks: 185.159.106.0/23 maxlen: 23
2a07:b880:80::/41 maxlen: 41
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:39:e7:fe:9c:51:4f:96:a5:e5:85:ba:8a:c3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jan 1 08:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056235f66324c1cd72a8ef303fb78c05ba1e1148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:ef:93:16:e7:25:94:65:42:b9:0e:ff:fe:
fd:04:09:10:5f:04:b9:ad:2f:e1:56:c3:54:15:3f:
42:41:42:b8:62:3b:85:8a:88:06:21:49:fe:42:21:
d5:09:70:bf:a9:8a:15:58:0a:9e:30:f9:c4:ba:5d:
58:bd:b8:3f:0e:37:3c:ed:47:a8:7f:a0:ae:49:e7:
2d:ea:15:0e:c1:2c:79:72:26:91:19:7b:ce:b3:47:
ad:4b:37:48:68:ab:16:85:64:f5:0e:ad:77:e6:6e:
e2:f1:dd:fb:4e:84:7e:d6:ec:b9:e1:ed:5e:fa:53:
ef:d1:11:c1:a4:36:2f:02:24:35:84:0a:3b:a0:4b:
1c:8c:3f:de:92:c7:60:80:fa:f4:13:b9:3b:51:f0:
f4:6b:a9:8b:a1:38:ef:1a:9c:26:93:19:c5:83:81:
63:66:1e:24:75:05:86:5e:35:ba:2f:0a:9d:8c:f9:
b8:19:ce:fb:5d:79:92:cf:f4:fc:4c:3b:63:ac:74:
93:33:e5:0d:3c:bc:86:38:a3:fc:fa:56:18:0b:6b:
2f:ee:db:da:51:b2:7a:97:b0:c9:3c:56:41:54:87:
8d:df:7e:87:7e:7e:99:0c:9f:b1:27:69:cb:77:11:
f6:71:8b:d0:30:98:d4:bd:cb:0b:8b:4a:2c:fa:25:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:35:F6:63:24:C1:CD:72:A8:EF:30:3F:B7:8C:05:BA:1E:11:48
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/BWI19mMkwc1yqO8wP7eMBboeEUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.106.0/23
IPv6:
2a07:b880:80::/41
Signature Algorithm: sha256WithRSAEncryption
1f:61:ba:78:01:67:e4:95:3a:71:45:c6:c0:ee:a8:23:c5:11:
63:94:c6:80:59:b2:78:32:23:ec:2d:35:ad:6c:23:f9:00:f3:
3c:f4:a2:7d:6d:36:24:95:15:a6:01:88:36:6e:a0:05:91:aa:
93:80:3e:d4:5e:ae:9a:cf:c8:99:d1:cb:21:1d:65:c8:ae:7d:
25:3d:01:1d:75:cf:25:75:ec:c5:03:30:97:b8:52:8c:98:40:
92:0d:1a:45:4c:59:40:ee:70:6c:95:36:1c:80:e7:02:5f:be:
b9:ab:db:eb:d8:cd:fa:52:07:c5:cd:bc:9e:df:d6:dc:39:3b:
70:c3:6f:c0:86:9d:65:35:58:a6:05:4e:25:9a:8f:d2:e6:f5:
a9:89:09:87:df:14:17:d6:c0:2e:40:bd:ed:23:bf:27:0a:71:
18:6b:b7:4b:55:ca:42:82:35:eb:80:b0:78:c2:74:96:ec:f3:
98:17:bf:83:f8:d8:69:e6:74:39:80:c6:93:ab:40:ca:35:c4:
25:45:55:f8:b3:4e:2a:6d:4c:56:80:a8:8d:07:36:fb:cb:8a:
ab:31:e9:77:6d:2f:ac:b6:75:64:7c:42:79:d9:44:a6:0a:ca:
ac:4c:e9:0d:ab:c1:09:a5:51:bb:9d:86:f3:7d:3b:57:64:6a:
0f:92:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:48 2024 by rpki-client on console-ams.rpki-client.org