Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/BKY1AEAhb-thQ7O6CzO_Xak_6Zw.roa
File: BKY1AEAhb-thQ7O6CzO_Xak_6Zw.roa (raw, json)
Hash identifier: H69pUIV0EhkvvMrd3UCUDJhOgB2K9XUtIaqBLQN3UCk=
Subject key identifier: 04:A6:35:00:40:21:6F:EB:61:43:B3:BA:0B:33:BF:5D:A9:3F:E9:9C
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0188D54849F7659E428F113D4D4E8FC53B65
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/BKY1AEAhb-thQ7O6CzO_Xak_6Zw.roa
Signing time: Mon 19 Jun 2023 20:11:04 +0000
ROA not before: Mon 19 Jun 2023 20:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 85.11.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 13:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:48:49:f7:65:9e:42:8f:11:3d:4d:4e:8f:c5:3b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jun 19 20:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04a6350040216feb6143b3ba0b33bf5da93fe99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:85:e1:f2:a2:a2:d9:56:c1:db:c9:ca:1f:
86:60:d7:55:7a:20:40:3b:15:cc:d5:05:f8:7d:db:
88:35:e4:1f:5e:5f:26:06:39:c6:58:03:f5:18:3d:
99:95:b3:60:d3:0f:8b:ec:88:46:5a:d8:4b:be:fc:
8e:a4:35:24:4b:3d:60:0f:55:68:9e:7b:ba:94:ff:
fa:83:f4:c8:75:8d:17:03:12:2d:b5:28:0f:73:5a:
5b:65:6c:2c:3e:3b:ed:5f:2b:e4:a1:6e:32:6c:fb:
95:7a:99:03:68:da:5b:be:0b:92:e3:1b:80:88:a8:
4e:be:f0:4a:55:fc:aa:a6:a0:bd:e1:8c:77:1a:12:
41:7c:92:5c:70:13:08:88:af:3f:9a:a0:7e:ab:39:
34:e2:e3:f4:e2:1b:de:50:4c:b3:90:55:c1:cf:c1:
a6:32:46:9a:2f:5e:58:b5:3e:3f:af:b8:c6:05:57:
db:ac:bf:df:0b:fe:68:63:68:43:32:ad:cc:f0:a9:
7c:4d:25:c6:c3:89:66:99:a6:ea:53:5d:e2:f4:ee:
8d:f0:40:4a:36:c7:a3:c6:6b:e0:7e:7b:51:fd:87:
3c:49:ee:62:9c:9e:34:7a:a6:b1:7d:6d:bc:af:52:
9c:97:cd:a2:67:81:ce:17:eb:fb:46:0a:d9:6e:5a:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:35:00:40:21:6F:EB:61:43:B3:BA:0B:33:BF:5D:A9:3F:E9:9C
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/BKY1AEAhb-thQ7O6CzO_Xak_6Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
14:07:21:9f:a2:9b:f3:f9:95:6b:04:98:89:48:46:55:be:2b:
0b:11:e5:8a:7c:6c:9b:60:24:62:bc:cc:67:7a:d1:d3:36:f3:
84:da:be:ab:0f:0d:c0:63:d1:78:49:6a:b1:8f:67:08:27:fa:
b7:45:d0:00:31:11:2d:7e:85:ef:ec:89:c3:4e:cc:47:b7:20:
bd:6b:cf:33:f3:1b:ba:e9:25:dd:0c:30:2d:4c:ca:79:a7:96:
e4:41:eb:de:2e:5d:71:d4:ce:5d:2b:f0:62:54:9e:b5:bf:f3:
23:ad:9c:3f:86:c2:d3:d1:07:2c:0e:d2:ac:91:2b:d9:97:97:
c2:ba:30:c6:1c:db:02:2e:bd:1c:87:59:c6:b9:7f:fe:b5:71:
0a:36:29:26:ad:0d:08:5c:10:1e:9f:c4:74:1b:7a:24:81:f8:
22:36:34:ca:51:ea:62:29:0d:ec:63:74:dc:85:e4:c8:02:33:
24:84:af:70:94:cd:87:78:92:96:9f:32:b5:41:57:87:7c:d7:
9d:76:95:59:83:57:9b:1e:27:71:b9:61:39:96:7d:8a:fb:69:
2b:80:bb:aa:41:bc:9d:8f:ce:8f:57:63:be:60:a5:ca:44:b8:
f0:83:d6:c0:b8:b4:9f:11:4a:4d:4f:1e:57:ea:6b:2e:ff:8a:
1e:e2:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org