Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/byiC4i-S5x0pWLZFKWCPv8Wsim0.roa
File: byiC4i-S5x0pWLZFKWCPv8Wsim0.roa (raw, json)
Hash identifier: PCYc+3/Wwaj1OvMcKrvZkureggiQLrBTqsTCKZQYZ2c=
Subject key identifier: 6F:28:82:E2:2F:92:E7:1D:29:58:B6:45:29:60:8F:BF:C5:AC:8A:6D
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 0186BB94DCF6B05D48EFD5ADB91E7BF5631C
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/byiC4i-S5x0pWLZFKWCPv8Wsim0.roa
Signing time: Tue 07 Mar 2023 10:19:00 +0000
ROA not before: Tue 07 Mar 2023 10:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211510
IP address blocks: 85.193.191.0/24 maxlen: 24
185.54.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:94:dc:f6:b0:5d:48:ef:d5:ad:b9:1e:7b:f5:63:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Mar 7 10:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f2882e22f92e71d2958b64529608fbfc5ac8a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:a8:65:70:bc:93:e4:da:93:d5:6e:c1:0d:
4d:08:38:3c:08:fd:a1:33:c0:64:70:0b:29:8d:ec:
e4:6f:6d:6f:3c:95:32:f4:cc:64:f2:3d:48:d9:be:
56:ac:3f:e5:e0:38:dc:58:2d:57:8a:a3:e3:c2:03:
8f:00:06:08:e3:bf:4a:88:9f:01:31:d5:3f:85:f7:
15:00:4c:d2:3c:7e:2c:d8:70:a9:74:0e:d3:a4:ba:
98:90:0c:1b:4d:9b:76:76:63:27:a8:e8:06:72:c7:
85:11:9b:2d:ef:71:32:c1:0f:30:68:54:d9:f3:1e:
22:f7:93:13:2f:57:19:51:da:4f:f8:05:b7:2d:d3:
db:64:86:5d:38:9a:07:e8:ed:ff:84:d2:64:1e:fb:
44:d5:7c:ed:b3:96:90:96:ab:f0:48:23:73:4c:a3:
73:22:66:2a:c6:f3:60:48:35:0f:f3:35:c8:5f:ab:
ef:b8:a5:3b:f2:b5:43:82:70:34:a9:14:cc:fc:12:
36:85:88:e1:c8:d4:3c:98:50:09:de:3b:31:48:0e:
41:e3:25:c0:ee:11:15:5b:d5:c7:6b:eb:f1:ef:6d:
7c:98:54:da:40:12:c2:dd:21:48:44:38:54:8f:fa:
81:49:0b:dd:60:90:7e:7c:1d:c8:a4:36:ac:b8:55:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:82:E2:2F:92:E7:1D:29:58:B6:45:29:60:8F:BF:C5:AC:8A:6D
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/byiC4i-S5x0pWLZFKWCPv8Wsim0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.191.0/24
185.54.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:95:ab:ba:97:45:d0:a5:25:d0:28:71:8c:0f:3d:aa:c0:87:
36:a0:84:19:f4:e9:6b:02:a2:a7:e6:ea:34:36:ff:15:fb:6f:
4e:59:48:29:37:64:c6:a3:99:f7:90:d9:a2:ef:56:a1:f3:48:
2c:5c:78:a9:38:05:ad:99:14:34:ec:50:8e:bc:c7:c8:31:13:
ea:50:4e:de:be:76:a6:da:8c:21:db:85:5a:e9:fb:08:20:8a:
5b:0b:05:ec:f5:d5:ab:77:39:83:79:48:cf:24:a0:31:95:42:
3b:97:e0:4e:7b:f5:d2:72:05:27:af:08:f2:1a:ea:7e:e3:38:
f0:07:c0:64:c4:d4:03:24:99:aa:71:f1:8a:d7:d6:42:4e:96:
65:a0:5b:b1:fd:62:37:a2:89:32:17:e4:a3:58:89:f7:60:9a:
77:54:81:39:f1:52:0e:73:49:bb:2b:1c:dd:b0:8a:04:10:87:
6b:fa:3e:11:a3:d5:61:25:dd:5d:f8:6f:65:85:b3:3d:51:e2:
62:0e:fa:5b:e1:5c:6c:29:bb:85:6d:9f:f4:f2:9f:43:3a:2c:
78:f5:f9:ae:b8:89:fd:4c:00:fd:e1:e7:73:c4:82:7d:89:74:
b6:cd:bc:e5:c7:58:1f:a3:1c:e5:7d:50:64:33:75:1d:63:1b:
27:8b:19:cd
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 20 04:53:53 2023 by rpki-client on console-ams.rpki-client.org