Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/BiYQvkSQAnxQu97fsnGe68VPnC4.roa
File: BiYQvkSQAnxQu97fsnGe68VPnC4.roa (raw, json)
Hash identifier: BFQAyNcjOCI+nn0dTMNi/NHsZQd2Arh9HDftXEzFJLg=
Subject key identifier: 06:26:10:BE:44:90:02:7C:50:BB:DE:DF:B2:71:9E:EB:C5:4F:9C:2E
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 01856D01888409A5B2C7F4B13A0EE39745E7
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/BiYQvkSQAnxQu97fsnGe68VPnC4.roa
Signing time: Sun 01 Jan 2023 11:04:55 +0000
ROA not before: Sun 01 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35374
IP address blocks: 86.110.208.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:88:84:09:a5:b2:c7:f4:b1:3a:0e:e3:97:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jan 1 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=062610be4490027c50bbdedfb2719eebc54f9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:3b:e9:c0:b6:c5:90:c4:ae:a7:76:33:c9:
9b:31:18:d1:09:43:75:d8:2b:51:98:01:a7:be:0f:
77:bd:90:b5:cf:17:37:7a:d0:cc:fa:a8:a4:b3:b9:
27:f1:6b:10:f0:aa:46:a1:e5:9d:01:9d:da:fe:a3:
55:cd:04:57:90:60:03:48:e5:2e:b6:50:38:0a:f5:
49:f6:a0:00:9b:f2:cb:f5:38:ca:eb:36:9a:13:28:
76:16:2e:de:7d:19:5f:8e:50:87:1a:90:31:25:f4:
af:16:7e:ba:b7:a9:c8:d6:c6:7e:3a:79:76:e6:47:
73:d2:23:af:65:39:e9:92:0f:21:34:c7:9d:ad:9e:
cf:f6:f4:28:28:42:0a:89:d2:55:dd:fd:9b:7f:f7:
83:39:7d:cf:6a:06:37:8f:e6:1f:c5:73:4d:e5:5f:
df:73:fc:fc:7b:b8:45:64:83:d0:11:89:5b:93:c8:
7a:cd:d0:60:ce:fb:dd:2a:24:89:64:d5:bc:2f:bf:
fe:c8:9a:46:07:2f:22:80:4c:62:4e:c1:e1:7e:76:
22:c0:c6:63:dd:84:38:e4:f5:ff:95:6c:2c:da:6d:
48:92:bc:76:e9:64:87:bf:f7:6a:46:3c:64:5d:8c:
07:65:0e:aa:07:6c:52:cb:e8:1a:74:4d:9f:25:f0:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:10:BE:44:90:02:7C:50:BB:DE:DF:B2:71:9E:EB:C5:4F:9C:2E
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/BiYQvkSQAnxQu97fsnGe68VPnC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.208.0/23
Signature Algorithm: sha256WithRSAEncryption
06:80:da:6a:4c:1a:41:fd:a6:85:ec:c5:cb:83:d9:3b:12:a3:
7b:ce:b7:88:cb:af:f4:6c:f4:44:9b:87:f2:03:7c:cc:c3:b8:
df:22:ce:6c:8e:07:1c:da:d5:41:f2:a0:90:68:b5:ca:0d:a8:
ac:a7:65:44:95:1b:d8:ea:72:39:2b:d2:16:37:32:dc:d5:3d:
61:42:7f:7f:65:e7:0f:0e:75:34:e4:a9:2e:21:87:a1:9a:10:
ba:6b:c8:24:f0:a9:1c:40:56:59:59:bb:35:0f:c9:26:c3:ea:
7c:99:dd:c7:91:a8:b2:49:ef:10:e3:ac:b2:1e:73:b3:79:85:
66:d1:8c:75:f7:0f:ac:e9:49:56:74:58:0f:ad:b7:dd:8d:e2:
e8:ef:53:ad:61:65:4f:ea:49:d9:8e:fc:e8:7f:ce:df:1d:8f:
ff:70:1c:43:dc:d9:ae:08:3e:14:0e:65:52:bd:ff:5a:b2:41:
59:06:07:61:0d:17:b2:93:2a:23:38:a1:70:a4:14:bc:ab:bc:
aa:c0:aa:5e:7b:fc:40:29:e0:97:56:b2:fd:76:77:eb:4e:e3:
b9:7c:53:ff:66:c3:48:fa:5f:10:bc:c6:81:d8:12:ef:cf:a1:
d0:75:b8:e0:5c:0a:d2:9e:52:52:39:d9:67:fd:29:a9:03:15:
a6:07:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:44 2024 by rpki-client on console-ams.rpki-client.org