Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/BiOWOIi_RB-5dhC1LnrdRNBpHCY.roa
File: BiOWOIi_RB-5dhC1LnrdRNBpHCY.roa (raw, json)
Hash identifier: ecjwtPZoXfXchK0AZgRaPx/lKsThcG6Vpt/P/ulqBQ0=
Subject key identifier: 06:23:96:38:88:BF:44:1F:B9:76:10:B5:2E:7A:DD:44:D0:69:1C:26
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 01856C9386B2CD73BE579044A302F8FA9D6D
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/BiOWOIi_RB-5dhC1LnrdRNBpHCY.roa
Signing time: Sun 01 Jan 2023 09:04:45 +0000
ROA not before: Sun 01 Jan 2023 09:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48492
IP address blocks: 185.181.108.0/22 maxlen: 24
185.75.224.0/22 maxlen: 24
2a0d:4f00::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:86:b2:cd:73:be:57:90:44:a3:02:f8:fa:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jan 1 09:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0623963888bf441fb97610b52e7add44d0691c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:70:7e:bb:95:5b:c3:f3:12:86:af:e8:f3:
e2:ce:7d:b7:8a:71:94:c3:57:14:19:43:d8:49:4e:
00:49:09:e8:02:e4:de:a0:11:43:67:25:c2:56:20:
c2:d5:61:da:e7:84:69:d9:de:a9:ee:93:a6:29:47:
98:67:94:eb:cc:de:41:51:a0:d3:64:f4:87:92:ee:
df:68:f5:5b:65:d2:a6:39:ca:8c:60:e5:14:a2:ca:
34:3c:1c:f1:be:d4:0a:48:16:67:a0:37:23:ed:b2:
a8:a7:da:c2:dd:5c:0d:2a:ae:fb:c5:9c:6d:d1:10:
8b:47:4b:ab:30:34:bc:e8:f7:87:6f:ec:4e:93:6f:
d7:30:ec:91:1d:5e:d2:b5:e0:da:bf:78:45:9d:41:
69:e5:51:78:3e:3f:27:1f:3c:d9:44:cb:3b:74:8f:
12:a3:b5:cc:51:c0:c8:a8:05:89:ee:0e:22:77:35:
5a:7d:9e:67:67:c4:99:33:81:62:a9:1f:26:42:72:
87:3f:75:ab:f8:58:ad:59:fe:bd:fe:c1:6e:1b:d3:
a0:64:d3:16:83:62:10:83:72:4f:46:fa:0b:6e:a9:
9a:d5:9a:4c:b9:38:82:5d:03:9f:9a:b8:f0:63:c9:
00:70:c5:0f:d4:a7:fb:12:bb:3f:c9:76:a7:30:67:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:96:38:88:BF:44:1F:B9:76:10:B5:2E:7A:DD:44:D0:69:1C:26
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/BiOWOIi_RB-5dhC1LnrdRNBpHCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.224.0/22
185.181.108.0/22
IPv6:
2a0d:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
c4:78:13:41:67:48:59:f4:b8:01:c0:5f:a3:98:cb:90:92:9b:
40:6a:5e:bc:63:ed:f4:0b:4e:6f:69:f6:db:28:c2:c2:45:c7:
6a:ad:18:19:a7:94:f0:24:b4:49:a7:60:91:8a:9d:3b:ff:ec:
64:a4:82:96:dc:99:86:49:93:c1:d5:04:ed:68:b8:98:02:37:
75:4a:54:c9:d2:6a:43:43:0f:e5:be:5d:b7:6f:66:65:0a:c8:
b4:59:2f:f9:68:5d:74:5e:9a:48:0d:16:e1:3b:52:36:d8:ba:
27:a8:8c:76:51:51:8c:60:eb:ab:07:c5:99:62:d9:52:a6:20:
bc:ff:31:e1:c8:52:70:21:11:cf:21:b0:01:d3:a8:1b:d9:65:
16:b6:23:e7:22:8d:3b:23:20:a2:1d:4e:93:b8:f2:85:b0:26:
17:d4:8d:39:d9:dc:e9:25:41:ca:42:80:48:97:10:32:70:89:
8c:28:ec:03:2d:85:46:a5:32:60:a2:ee:32:42:71:3c:a8:cb:
f7:9f:5b:02:ed:49:03:8f:29:80:a8:98:2b:5d:19:92:59:7c:
dd:5a:f7:a2:49:3f:3f:3a:51:c9:97:6e:25:49:3f:5e:e6:9a:
8f:08:5f:6c:26:ce:23:d2:16:12:0a:84:7b:b4:ac:b4:e0:bc:
57:ca:5a:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsk4ayzXO+V5BEowL4+p1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjMwMTAxMDkwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjIzOTYzODg4YmY0NDFmYjk3NjEwYjUyZTdhZGQ0NGQwNjkxYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq5wfruVW8PzEoav6PPizn23inGU
w1cUGUPYSU4ASQnoAuTeoBFDZyXCViDC1WHa54Rp2d6p7pOmKUeYZ5TrzN5BUaDT
ZPSHku7faPVbZdKmOcqMYOUUoso0PBzxvtQKSBZnoDcj7bKop9rC3VwNKq77xZxt
0RCLR0urMDS86PeHb+xOk2/XMOyRHV7SteDav3hFnUFp5VF4Pj8nHzzZRMs7dI8S
o7XMUcDIqAWJ7g4idzVafZ5nZ8SZM4FiqR8mQnKHP3Wr+FitWf69/sFuG9OgZNMW
g2IQg3JPRvoLbqma1ZpMuTiCXQOfmrjwY8kAcMUP1Kf7Ers/yXanMGdKDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAYjljiIv0QfuXYQtS563UTQaRwmMB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvQmlPV09JaV9SQi01ZGhDMUxucmRSTkJwSENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUvgAwQC
ubVsMA0EAgACMAcDBQMqDU8AMA0GCSqGSIb3DQEBCwUAA4IBAQDEeBNBZ0hZ9LgB
wF+jmMuQkptAal68Y+30C05vafbbKMLCRcdqrRgZp5TwJLRJp2CRip07/+xkpIKW
3JmGSZPB1QTtaLiYAjd1SlTJ0mpDQw/lvl23b2ZlCsi0WS/5aF10XppIDRbhO1I2
2LonqIx2UVGMYOurB8WZYtlSpiC8/zHhyFJwIRHPIbAB06gb2WUWtiPnIo07IyCi
HU6TuPKFsCYX1I052dzpJUHKQoBIlxAycImMKOwDLYVGpTJgou4yQnE8qMv3n1sC
7UkDjymAqJgrXRmSWXzdWveiST8/OlHJl24lST9e5pqPCF9sJs4j0hYSCoR7tKy0
4LxXylq/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:32 2023 by rpki-client on console-fra.rpki-client.org