Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/BCQOQgHgiNsooakJDyud8e9U0U0.roa
File: BCQOQgHgiNsooakJDyud8e9U0U0.roa (raw, json)
Hash identifier: wYAUxn9sSRjgJkvltHXyZ0ly0u6L4tRR/ehzPE5MuBE=
Subject key identifier: 04:24:0E:42:01:E0:88:DB:28:A1:A9:09:0F:2B:9D:F1:EF:54:D1:4D
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0187EC9A42ADFB63ACC59E125053FA81940E
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/BCQOQgHgiNsooakJDyud8e9U0U0.roa
Signing time: Fri 05 May 2023 15:49:05 +0000
ROA not before: Fri 05 May 2023 15:49:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42615
IP address blocks: 185.186.8.0/24 maxlen: 24
185.186.11.0/24 maxlen: 24
2a0b:6b81:3::/48 maxlen: 48
2a0b:6b81:1::/48 maxlen: 48
2a0b:6b87::/32 maxlen: 32
2a0b:6b81:4::/48 maxlen: 48
2a0b:6b82::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:9a:42:ad:fb:63:ac:c5:9e:12:50:53:fa:81:94:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: May 5 15:49:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04240e4201e088db28a1a9090f2b9df1ef54d14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:9a:1b:f3:63:fb:ee:04:1e:a0:d8:6d:43:
95:f0:03:82:f4:26:9c:5c:86:30:24:38:fd:74:f6:
a1:84:bf:a1:bd:c4:d7:a1:ab:0d:c1:c3:bc:6f:76:
f6:ff:39:25:36:c9:ae:c3:07:07:97:84:44:cb:12:
a6:29:05:79:aa:f0:a3:59:3b:ad:a9:ee:46:e2:2f:
8d:f7:17:6f:cb:7f:f1:4a:43:73:a3:cf:78:5c:d6:
d2:2b:ba:e8:e5:53:02:f2:ae:2b:49:ee:f5:f8:4e:
df:ba:5e:ca:5a:36:e0:c4:20:90:71:74:bf:c8:08:
37:86:9d:cc:31:ca:19:4a:7a:3f:0b:b9:86:1d:d1:
d3:e8:85:f1:e8:77:b3:11:82:bc:ce:17:e5:69:76:
ff:d9:21:74:4a:1e:70:b9:f9:8c:89:45:5e:a7:31:
c1:af:fe:44:f0:24:5b:cc:05:c2:e9:0d:3c:90:d9:
4c:cb:b0:60:6a:c9:81:fe:d4:73:29:91:03:44:88:
87:a1:f9:b4:6d:98:2f:6f:ab:fd:84:f7:e2:3a:18:
99:6f:26:61:26:70:2d:d7:b8:71:d8:9f:9c:0a:86:
12:c4:8d:40:01:72:94:68:46:bb:07:c6:66:10:ec:
c2:1a:48:73:0a:c1:6a:d5:26:7f:d7:cc:c4:df:ce:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:0E:42:01:E0:88:DB:28:A1:A9:09:0F:2B:9D:F1:EF:54:D1:4D
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/BCQOQgHgiNsooakJDyud8e9U0U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.8.0/24
185.186.11.0/24
IPv6:
2a0b:6b81:1::/48
2a0b:6b81:3::-2a0b:6b81:4:ffff:ffff:ffff:ffff:ffff
2a0b:6b82::/32
2a0b:6b87::/32
Signature Algorithm: sha256WithRSAEncryption
35:93:b0:80:07:d3:28:15:7f:77:f3:50:af:91:61:95:2e:58:
63:38:e2:ec:d5:cc:81:00:0f:e8:6c:e0:94:38:29:dc:bf:3b:
c1:f1:75:d7:64:7a:17:02:05:c5:7e:5c:0a:2c:2d:b4:45:c7:
c2:99:6e:b5:f8:b5:ca:ce:78:43:50:ae:7d:53:5d:e9:73:cc:
77:c4:cc:f9:bd:34:7c:3c:d8:03:35:b7:2f:a3:cc:b3:f9:67:
ff:50:e0:b4:e0:a4:0f:77:cb:eb:c3:bf:2f:9d:2b:86:ac:bc:
94:44:8e:ae:7b:99:c4:a5:5c:4b:c8:be:3c:a1:95:c9:d0:08:
ea:d3:51:3e:04:ae:61:b6:85:69:50:b8:b8:b5:9c:be:bc:13:
9b:78:d4:6f:21:b4:ea:fa:ec:95:dc:b5:c1:c6:80:4b:0a:1c:
99:6a:ce:cc:0c:79:95:10:91:95:2b:86:c2:cb:09:b5:6c:f1:
de:27:7f:5c:49:6c:d8:53:1c:ab:6d:14:7e:93:08:b6:d6:fb:
8b:da:22:d4:f4:9a:05:a8:a2:d3:fa:47:d8:97:65:48:11:fc:
73:98:b1:d3:86:86:33:7b:3d:04:03:37:aa:24:ec:1e:8d:50:
9f:0c:b5:92:27:37:d8:ad:b4:30:1e:78:75:fa:41:f7:3b:9b:
a3:d8:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org