Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/bayVirQv-WsWjDCRkXMec5hSQaE.roa
File: bayVirQv-WsWjDCRkXMec5hSQaE.roa (raw, json)
Hash identifier: UUUVLNtaXIHN4fXIo6YTKHoJgCAlffVH+kExnca5sGQ=
Subject key identifier: 6D:AC:95:8A:B4:2F:F9:6B:16:8C:30:91:91:73:1E:73:98:52:41:A1
Certificate issuer: /CN=996a5f948435acb112a66e2563792263ec8b657e
Certificate serial: 01856D01C3A36DBBDE8692640AB539889F7B
Authority key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/bayVirQv-WsWjDCRkXMec5hSQaE.roa
Signing time: Sun 01 Jan 2023 11:05:10 +0000
ROA not before: Sun 01 Jan 2023 11:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203616
IP address blocks: 185.129.80.0/24 maxlen: 24
185.129.80.0/23 maxlen: 23
185.129.83.0/24 maxlen: 24
185.129.82.0/23 maxlen: 23
185.129.82.0/24 maxlen: 24
185.129.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c3:a3:6d:bb:de:86:92:64:0a:b5:39:88:9f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996a5f948435acb112a66e2563792263ec8b657e
Validity
Not Before: Jan 1 11:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dac958ab42ff96b168c309191731e73985241a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:e6:f1:2f:a2:9c:fb:20:2c:86:7c:a1:62:
6f:19:85:16:1c:74:3d:e5:73:7b:08:f8:23:fa:54:
d6:6e:63:d2:87:0d:46:cb:98:cb:08:ff:c2:a4:bb:
19:00:49:a7:e7:a0:ad:66:58:83:72:31:79:5d:c7:
e3:2e:92:b5:e3:1e:63:06:0c:ba:23:a0:de:2f:45:
47:70:43:71:45:da:39:ef:d6:40:c5:89:17:fe:ad:
12:c8:f1:61:3d:07:50:6f:77:82:b0:3d:82:9c:00:
21:40:88:da:14:b1:8d:49:89:d6:7d:18:c0:7f:1c:
88:0f:0f:50:7d:9d:04:07:67:38:4c:55:aa:6c:e5:
a0:3d:01:f7:d1:95:0e:93:a0:dc:03:69:a5:49:9a:
10:c4:4f:09:b5:31:52:eb:ea:55:a0:a0:48:0b:c9:
b6:43:cf:0d:5b:37:f9:6a:4e:dd:4d:5b:95:89:9f:
c3:6e:fa:0a:75:d5:93:4d:8a:72:20:93:43:09:0d:
ab:22:7e:71:b8:f0:54:98:e5:98:d2:1b:15:e7:18:
92:8d:91:4b:aa:34:c3:d5:b5:79:7c:51:20:75:09:
ec:f9:bd:05:fb:12:5e:d3:6b:e6:47:64:fb:62:11:
16:1c:31:21:72:b2:ec:6a:5e:13:f7:31:8c:0f:62:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:95:8A:B4:2F:F9:6B:16:8C:30:91:91:73:1E:73:98:52:41:A1
X509v3 Authority Key Identifier:
keyid:99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/bayVirQv-WsWjDCRkXMec5hSQaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.80.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5f:51:20:4c:8c:e0:7c:ce:47:df:16:d5:fd:0e:c6:73:e1:
ae:03:c7:2a:96:2c:80:d8:e4:33:b8:d7:1d:74:fe:92:46:d5:
30:9d:6a:83:2e:e0:67:64:b3:66:19:8f:ce:31:0a:01:44:2c:
0a:1b:c4:19:d0:ce:39:a0:f2:fe:69:69:2a:7c:d9:8d:e5:89:
06:39:cb:29:13:51:3f:8c:78:80:12:86:5b:73:0f:b8:c6:ae:
62:35:3f:be:3e:28:b6:c2:a9:b1:f7:df:5c:c6:85:5c:9b:83:
0c:bf:6a:26:5b:00:f4:e0:55:da:cc:f1:5c:79:a4:38:f0:14:
27:76:f0:de:fc:18:8f:2b:03:e3:67:95:c0:0b:1f:dd:df:2c:
54:2d:52:a8:57:c2:22:8b:59:de:12:b1:4e:9c:b9:cf:c6:20:
a0:1a:05:e2:3c:74:1d:63:0e:3d:4a:0f:0a:0d:34:16:0b:89:
0e:74:0a:6e:fb:a7:ec:a6:ab:ab:d7:35:ac:29:72:48:b9:be:
9f:48:0f:db:bc:5b:a0:a4:7a:54:56:7c:72:c3:30:9c:e7:ca:
34:b6:eb:59:31:40:15:1d:bd:51:a8:a0:37:ac:3b:8c:78:95:
16:bc:ca:36:63:65:f6:a1:a4:7f:31:bb:2b:35:7e:b5:38:3d:
a9:28:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:26 2024 by rpki-client on console-ams.rpki-client.org