Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/BtLyayxENfsm4RLxxBNkXJmOLGQ.roa
File: BtLyayxENfsm4RLxxBNkXJmOLGQ.roa (raw, json)
Hash identifier: EIf52uam4W7xNBssJpRIHyrX8cVK8IgeUiACnZXCQ40=
Subject key identifier: 06:D2:F2:6B:2C:44:35:FB:26:E1:12:F1:C4:13:64:5C:99:8E:2C:64
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA69426F3EE2B2BA7CEA508C70982
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/BtLyayxENfsm4RLxxBNkXJmOLGQ.roa
Signing time: Sun 01 Jan 2023 05:45:00 +0000
ROA not before: Sun 01 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 88.218.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a6:94:26:f3:ee:2b:2b:a7:ce:a5:08:c7:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d2f26b2c4435fb26e112f1c413645c998e2c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:61:57:60:2d:91:84:c8:d6:68:d5:82:f2:
a6:4f:31:f6:a4:65:ce:c2:ba:5f:b7:77:ad:9a:e2:
44:34:dd:3b:9e:78:b8:01:c0:10:84:10:2d:ee:5b:
b9:17:a6:66:b4:1f:fe:c7:fb:30:11:45:b0:73:5b:
12:3a:cd:04:68:93:bf:70:1f:b0:07:98:e2:48:d2:
68:aa:65:4a:73:5c:77:9f:62:13:27:a9:a2:30:97:
dd:6e:84:66:6d:72:dd:af:7f:39:1b:7e:47:31:74:
90:f7:65:84:55:6f:cc:85:95:dc:ee:02:23:a7:e2:
3a:b5:4d:63:33:1c:6a:af:63:2c:4d:25:75:80:c3:
3d:8a:13:ce:aa:cb:d7:5a:c1:6b:1e:5d:c4:4e:51:
2b:1b:79:d7:94:43:f4:9f:fd:c5:98:e5:59:bb:2d:
1d:e0:ef:42:b5:48:99:20:f1:08:72:93:8e:42:66:
8a:c3:27:38:90:c7:74:42:5a:fb:79:90:72:96:af:
1f:4b:10:4e:38:fd:11:10:50:33:29:7a:8f:ec:bc:
f9:eb:a4:eb:e4:f4:d9:46:33:09:f2:58:05:cd:1a:
5b:d5:91:c8:9c:7c:92:39:3a:13:ab:77:a9:87:7b:
b1:01:84:6f:b3:dd:df:09:8c:b9:bf:a6:8b:5b:6b:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:F2:6B:2C:44:35:FB:26:E1:12:F1:C4:13:64:5C:99:8E:2C:64
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/BtLyayxENfsm4RLxxBNkXJmOLGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a4:27:24:2b:95:d2:d7:e3:f4:7b:c9:92:4e:7e:6e:14:ca:
2f:7c:a1:f1:55:82:f1:67:72:6a:c4:be:41:5b:ec:8a:2c:68:
d7:d9:92:77:0c:73:01:14:0a:22:01:50:4f:37:ee:1a:c2:cf:
cf:8f:99:95:68:60:dc:8b:11:28:bf:fc:0f:52:f5:27:07:07:
e1:9e:4d:38:e1:4b:95:e1:65:65:3d:c9:39:1b:7e:52:eb:60:
6f:36:85:ae:53:bc:04:df:a2:2c:2e:c5:17:8c:9b:70:86:65:
9f:28:35:24:f3:41:41:ba:4c:ff:e0:8f:51:70:6e:46:fb:e8:
e6:84:ef:0c:75:d9:1f:e9:48:c7:19:b9:a4:35:38:22:72:2e:
d7:fe:ba:bd:97:8f:62:51:88:33:ed:a3:7b:c6:b6:b8:67:25:
13:34:36:6a:8d:af:22:dc:cf:bc:53:88:a8:1b:07:2c:ab:1b:
b7:8c:3c:12:46:8a:c2:d6:44:f1:a2:b9:3f:03:d4:db:ba:c8:
ab:5f:c7:59:a4:5d:21:cd:1d:f0:a6:71:c3:73:18:52:94:8e:
ac:af:ba:81:10:7f:90:4d:3b:7e:6d:34:f5:7f:6a:4e:72:0e:
4b:99:54:8e:f7:96:51:9e:ab:ab:7a:33:e0:cd:13:7d:03:65:
8e:cd:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:56 2024 by rpki-client on console-fra.rpki-client.org