Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Bv5slw5LYkk3CalAEPfxLAxhNA0.roa
File: Bv5slw5LYkk3CalAEPfxLAxhNA0.roa (raw, json)
Hash identifier: wlhac4jG4ZwmMphYXg5MiqcLQix1HF63FxZdqo2wIBs=
Subject key identifier: 06:FE:6C:97:0E:4B:62:49:37:09:A9:40:10:F7:F1:2C:0C:61:34:0D
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B9DFF80ED99AE525CA24301672FA0B
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Bv5slw5LYkk3CalAEPfxLAxhNA0.roa
Signing time: Wed 25 Jan 2023 11:39:33 +0000
ROA not before: Wed 25 Jan 2023 11:39:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21509
IP address blocks: 89.167.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b9:df:f8:0e:d9:9a:e5:25:ca:24:30:16:72:fa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:39:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06fe6c970e4b62493709a94010f7f12c0c61340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:5c:6d:fd:0d:83:b2:c9:db:6d:a6:2d:b2:
0d:75:ec:08:fe:64:a1:5f:7e:70:b0:64:2d:e5:da:
b2:7d:42:a0:ef:42:f6:f0:4d:32:f9:f7:17:e6:45:
2a:f2:85:5e:41:9d:34:5f:b0:54:bc:53:fc:6b:a0:
a3:1f:f7:b5:0a:3a:d2:f6:65:8a:62:51:91:0a:d5:
44:b2:6c:35:24:a4:83:3a:c3:b1:d7:c1:81:17:1b:
93:ef:f7:4a:03:39:a6:53:82:fe:30:22:91:6d:51:
04:6d:dd:73:2b:cf:48:77:47:38:72:ce:fb:45:d6:
0d:94:8a:65:5a:ae:f4:17:bb:31:e1:f2:37:d5:7f:
3b:b6:7c:5c:bf:fa:59:f4:05:00:06:88:46:c0:26:
c4:af:07:89:d6:4d:26:30:f7:d4:66:c8:66:99:fc:
f8:9b:b5:5b:46:0c:82:98:00:b1:af:75:83:0c:66:
0d:91:41:a8:45:e1:0a:e1:1f:ef:34:6b:1c:e0:44:
b5:ab:21:c0:27:6d:45:ba:a3:e7:c5:1e:69:87:dd:
5e:df:f6:7f:8f:fd:4e:69:f6:de:02:8f:1a:6e:2f:
91:5f:f2:f7:ad:db:21:f3:c2:72:3f:8f:d4:f9:81:
33:0d:7f:3f:10:1e:ea:e8:65:7a:25:8e:25:74:28:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:6C:97:0E:4B:62:49:37:09:A9:40:10:F7:F1:2C:0C:61:34:0D
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Bv5slw5LYkk3CalAEPfxLAxhNA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.135.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b5:3f:25:fb:c4:9c:21:15:55:14:83:da:55:8b:d6:62:55:
9a:60:ee:c8:1e:66:1a:96:a6:8f:07:a0:70:15:5f:0f:0a:e2:
21:57:b1:04:8a:24:0d:07:cb:fc:16:77:74:b8:6f:55:c0:80:
5a:4a:24:e0:96:ea:41:b8:84:fc:13:33:ad:06:a7:38:50:a8:
7e:00:58:e3:04:a0:c8:72:78:a2:c2:4d:8d:5a:40:14:e0:31:
11:0f:a5:0d:1b:f1:0f:b5:f5:2f:6a:cd:a5:35:17:61:40:08:
57:66:73:e7:d4:a4:43:94:cd:e8:a6:a4:2c:eb:a5:1a:72:52:
36:38:e1:e3:55:88:41:e1:47:f8:a7:54:ec:95:2e:0b:94:2d:
3e:18:ca:19:c5:ff:8f:9d:75:b7:de:54:a2:42:46:a9:4f:26:
40:c4:bd:28:94:23:b8:e5:ab:ec:2f:4b:bc:b5:8f:66:9b:d5:
d0:66:a1:46:94:80:ae:99:12:32:70:41:b8:9c:7a:b9:bc:de:
30:fc:4e:2e:82:8c:63:18:43:e2:82:68:bc:e2:7d:bb:c9:c7:
90:74:6a:bc:ce:3c:e9:7f:28:be:3a:ec:c2:f3:c4:ea:a7:b0:
c4:3f:2b:86:23:4d:1f:6a:3c:67:2f:d7:74:f9:c2:f4:40:95:
d4:bc:cd:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXoud/4Dtma5SXKJDAWcvoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjMwMTI1MTEzOTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZlNmM5NzBlNGI2MjQ5MzcwOWE5NDAxMGY3ZjEyYzBjNjEzNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgpcbf0Ng7LJ222mLbINdewI/mSh
X35wsGQt5dqyfUKg70L28E0y+fcX5kUq8oVeQZ00X7BUvFP8a6CjH/e1CjrS9mWK
YlGRCtVEsmw1JKSDOsOx18GBFxuT7/dKAzmmU4L+MCKRbVEEbd1zK89Id0c4cs77
RdYNlIplWq70F7sx4fI31X87tnxcv/pZ9AUABohGwCbErweJ1k0mMPfUZshmmfz4
m7VbRgyCmACxr3WDDGYNkUGoReEK4R/vNGsc4ES1qyHAJ21FuqPnxR5ph91e3/Z/
j/1OafbeAo8abi+RX/L3rdsh88JyP4/U+YEzDX8/EB7q6GV6JY4ldCiWrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAb+bJcOS2JJNwmpQBD38SwMYTQNMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvQnY1c2x3NUxZa2szQ2FsQUVQZnhMQXhoTkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaeHMA0G
CSqGSIb3DQEBCwUAA4IBAQBHtT8l+8ScIRVVFIPaVYvWYlWaYO7IHmYalqaPB6Bw
FV8PCuIhV7EEiiQNB8v8Fnd0uG9VwIBaSiTglupBuIT8EzOtBqc4UKh+AFjjBKDI
cniiwk2NWkAU4DERD6UNG/EPtfUvas2lNRdhQAhXZnPn1KRDlM3opqQs66UaclI2
OOHjVYhB4Uf4p1TslS4LlC0+GMoZxf+PnXW33lSiQkapTyZAxL0olCO45avsL0u8
tY9mm9XQZqFGlICumRIycEG4nHq5vN4w/E4ugoxjGEPigmi84n27yceQdGq8zjzp
fyi+OuzC88Tqp7DEPyuGI00fajxnL9d0+cL0QJXUvM2n
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:58 2024 by rpki-client on console-ams.rpki-client.org