Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/BWgJvUCwfz-FsJAn_JTy_0z8ZwQ.roa
File: BWgJvUCwfz-FsJAn_JTy_0z8ZwQ.roa (raw, json)
Hash identifier: tfifC+RfSCiMNIMMo7e80yFkbXF8+K7249tXwxi6exI=
Subject key identifier: 05:68:09:BD:40:B0:7F:3F:85:B0:90:27:FC:94:F2:FF:4C:FC:67:04
Certificate issuer: /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial: 018572E811D45EE659C9EE1EEC3ED1688968
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/BWgJvUCwfz-FsJAn_JTy_0z8ZwQ.roa
Signing time: Mon 02 Jan 2023 14:34:49 +0000
ROA not before: Mon 02 Jan 2023 14:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 185.122.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:11:d4:5e:e6:59:c9:ee:1e:ec:3e:d1:68:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Validity
Not Before: Jan 2 14:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056809bd40b07f3f85b09027fc94f2ff4cfc6704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:50:9c:02:13:84:8d:d4:70:e9:43:0b:be:14:
78:4d:dd:53:a3:a6:53:b3:8e:1b:ac:c4:43:2e:63:
4f:67:0e:db:f3:42:74:ad:da:59:b2:32:1f:48:7b:
9e:9c:7f:54:d5:58:5f:09:5e:72:76:8c:65:23:c0:
cc:4f:fb:4f:2c:0d:07:bc:17:71:36:f5:3c:ac:71:
d3:d0:75:df:fb:c2:20:9b:a7:c2:dd:cd:23:ee:09:
3c:48:3b:fa:5e:6f:b9:87:1d:41:ec:78:b4:54:02:
94:f6:6f:83:c3:76:97:d8:25:10:5b:8c:df:61:32:
66:d7:c4:87:43:c6:45:3a:83:b7:02:3e:d2:7c:de:
41:06:a8:0f:65:97:42:e3:48:9d:b1:08:62:0e:82:
32:b4:04:7d:c2:47:41:59:d8:52:a1:e8:75:c4:f4:
c3:2f:a6:bd:4c:b2:f5:3d:b0:da:ac:39:c6:32:bc:
ca:0b:7b:f9:b1:0d:f7:92:08:79:e1:57:be:de:bc:
65:39:72:eb:16:cb:20:fe:8d:3b:22:00:71:e6:32:
85:ec:f4:59:59:c6:c6:ed:9d:50:00:55:9c:47:4a:
b4:5c:33:b7:de:64:16:91:bc:ad:7b:c7:7b:ce:dc:
0d:51:02:e2:da:dd:54:60:e9:9f:ce:b8:33:92:f7:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:09:BD:40:B0:7F:3F:85:B0:90:27:FC:94:F2:FF:4C:FC:67:04
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/BWgJvUCwfz-FsJAn_JTy_0z8ZwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5d:97:03:b6:4f:96:e6:3f:12:92:6f:2e:78:34:3a:ea:c8:
80:17:86:24:f6:cd:53:88:78:3c:a3:73:fe:c8:5f:34:4e:81:
28:19:fd:8d:5e:b9:b7:3d:8a:8a:8d:b2:bb:73:d5:ec:6b:f1:
c1:f8:58:e7:bc:1f:17:f9:95:95:60:13:c7:94:a5:99:da:af:
5d:ac:ef:70:0b:f6:f5:0c:ac:be:d8:26:96:5f:c1:10:f9:16:
ed:75:0f:e8:a8:2d:a3:c4:0c:2c:eb:ae:2e:f0:4d:1c:a1:dd:
55:3d:3d:24:12:ad:27:e5:47:6d:56:21:6b:24:c7:9b:72:03:
29:23:92:cd:23:80:5d:07:b0:8e:54:bd:f3:91:fc:b9:64:1d:
60:47:ec:29:f9:30:90:9e:be:b1:c4:45:94:d2:db:38:10:54:
7d:ec:d5:cb:d6:7a:6c:c1:3d:70:d8:bd:97:ab:f2:70:25:da:
cb:5d:82:f0:55:e1:8c:9e:15:c3:cf:0b:46:ed:70:b2:12:04:
47:da:b4:04:1b:77:8f:36:ac:98:d0:aa:9a:e2:8a:6a:3e:c6:
ec:88:ae:ae:9a:86:f9:de:4c:4d:da:9d:cb:fa:49:72:4d:28:
89:2f:1e:ca:bc:b5:37:40:03:61:6e:3e:43:3b:53:69:d7:c2:
ce:29:83:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6BHUXuZZye4e7D7RaIloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYWU2ZGMzYzkxOGM3ZWE4Y2QyNzhmNDk3Zjg1NGRj
YTNkYzgwHhcNMjMwMTAyMTQzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTY4MDliZDQwYjA3ZjNmODViMDkwMjdmYzk0ZjJmZjRjZmM2NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lCcAhOEjdRw6UMLvhR4Td1To6ZT
s44brMRDLmNPZw7b80J0rdpZsjIfSHuenH9U1VhfCV5ydoxlI8DMT/tPLA0HvBdx
NvU8rHHT0HXf+8Igm6fC3c0j7gk8SDv6Xm+5hx1B7Hi0VAKU9m+Dw3aX2CUQW4zf
YTJm18SHQ8ZFOoO3Aj7SfN5BBqgPZZdC40idsQhiDoIytAR9wkdBWdhSoeh1xPTD
L6a9TLL1PbDarDnGMrzKC3v5sQ33kgh54Ve+3rxlOXLrFssg/o07IgBx5jKF7PRZ
WcbG7Z1QAFWcR0q0XDO33mQWkbyte8d7ztwNUQLi2t1UYOmfzrgzkvfTDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVoCb1AsH8/hbCQJ/yU8v9M/GcEMB8GA1UdIwQY
MBaAFNvgyubcPJGMfqjNJ49Jf4VNyj3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ESzV0dzhrWXgtcU0wbmowbF9oVTNLUGNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMDVkOTEtZTE0Zi00YmRmLThmOTkt
Mjg0OWViNzMzNGI2LzEvQldnSnZVQ3dmei1Gc0pBbl9KVHlfMHo4WndRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMDVkOTEtZTE0Zi00YmRmLThmOTktMjg0OWViNzMzNGI2
LzEvMi1ESzV0dzhrWXgtcU0wbmowbF9oVTNLUGNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXrOMA0G
CSqGSIb3DQEBCwUAA4IBAQBjXZcDtk+W5j8Skm8ueDQ66siAF4Yk9s1TiHg8o3P+
yF80ToEoGf2NXrm3PYqKjbK7c9Xsa/HB+FjnvB8X+ZWVYBPHlKWZ2q9drO9wC/b1
DKy+2CaWX8EQ+RbtdQ/oqC2jxAws664u8E0cod1VPT0kEq0n5UdtViFrJMebcgMp
I5LNI4BdB7COVL3zkfy5ZB1gR+wp+TCQnr6xxEWU0ts4EFR97NXL1npswT1w2L2X
q/JwJdrLXYLwVeGMnhXDzwtG7XCyEgRH2rQEG3ePNqyY0Kqa4opqPsbsiK6umob5
3kxN2p3L+klyTSiJLx7KvLU3QANhbj5DO1Np18LOKYMy
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:04 2024 by rpki-client on console-ams.rpki-client.org