Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/BVrnCVkharPDQmTwGFwhuKIg-K8.roa
File: BVrnCVkharPDQmTwGFwhuKIg-K8.roa (raw, json)
Hash identifier: w6KGwOKVbnyoE8X63UTZWigMwwBJyw//lAy0yvcGXLk=
Subject key identifier: 05:5A:E7:09:59:21:6A:B3:C3:42:64:F0:18:5C:21:B8:A2:20:F8:AF
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 018570302D6E28D1828FC288E257C6C719CF
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/BVrnCVkharPDQmTwGFwhuKIg-K8.roa
Signing time: Mon 02 Jan 2023 01:54:43 +0000
ROA not before: Mon 02 Jan 2023 01:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206370
IP address blocks: 185.165.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2d:6e:28:d1:82:8f:c2:88:e2:57:c6:c7:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jan 2 01:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=055ae70959216ab3c34264f0185c21b8a220f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:5e:20:f8:ff:23:1a:42:de:65:f4:e8:53:
2e:aa:f8:9b:1e:ed:cd:5d:6a:b8:c3:d7:e3:6f:15:
5e:fa:26:d4:0a:b0:22:21:92:ae:e8:f6:da:9a:59:
25:dc:8c:b1:c6:86:eb:c9:13:41:8e:fe:03:18:ab:
10:12:e1:ee:86:7d:bf:02:9b:00:27:ad:3b:92:01:
79:f7:5f:53:83:fd:c9:d7:1d:ed:ad:39:1f:2c:7e:
13:41:6b:66:02:df:6f:e2:70:75:ec:fc:2b:86:14:
82:4f:87:46:18:a3:cf:94:ba:72:a6:9f:72:84:7d:
c1:b2:a0:7b:30:ba:c3:6e:02:56:37:09:59:dc:5b:
81:ba:62:10:f9:6f:91:8b:48:f7:4a:7a:38:49:90:
85:be:f2:18:0f:e3:3f:cf:3a:8f:f5:19:9b:19:83:
a5:b6:16:09:56:ea:61:4a:11:62:ef:b0:41:dd:e5:
0b:20:ab:11:98:d4:90:6e:e4:82:f0:d8:32:0e:8c:
c7:04:d0:9c:56:95:a5:36:78:29:76:71:98:71:08:
f0:c5:77:d9:14:9f:fd:43:49:ae:8b:7c:cd:54:37:
83:20:4e:19:e1:d6:c8:24:15:22:38:7d:19:c7:5c:
2b:db:d0:b2:6a:48:2c:27:3f:4e:e5:93:a0:f9:87:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:E7:09:59:21:6A:B3:C3:42:64:F0:18:5C:21:B8:A2:20:F8:AF
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/BVrnCVkharPDQmTwGFwhuKIg-K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.223.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4c:60:03:9e:ef:4a:94:7f:9c:d6:c1:de:b5:51:c3:10:6f:
a2:96:34:42:72:c6:bd:46:c4:f8:c7:6c:20:dc:c3:8c:0e:0f:
51:39:78:c8:e7:12:5a:d0:59:c4:c4:4d:1f:05:7d:95:32:99:
f9:65:dc:e7:a3:1a:d9:7b:2e:b2:ed:bc:b3:f7:33:50:9b:3f:
15:2f:7e:82:02:7f:4e:30:e6:6a:61:55:6f:51:33:8c:b9:5d:
c2:47:1f:be:3a:36:34:38:f0:e5:07:f4:0a:ed:28:e9:23:67:
27:e0:a8:6f:68:f3:7b:51:a4:d0:14:a9:a0:cf:66:97:74:0e:
ec:0c:32:23:27:03:07:9e:45:49:ab:e3:59:c7:e7:7a:ee:3f:
67:b6:f4:be:85:7f:47:6a:34:d7:36:45:61:ce:c7:c4:0a:31:
8a:2d:59:16:dd:32:9d:ae:d5:27:62:f7:27:c0:69:ca:f5:93:
14:2a:86:a8:22:76:3a:66:cc:1b:95:16:26:29:b7:e5:5e:23:
b3:bc:15:4f:75:c5:6f:0d:55:55:a9:ac:e5:f0:87:83:d9:c2:
f6:9f:c4:50:73:8b:f3:cd:3d:84:cd:04:72:0e:b1:d8:00:a8:
9c:48:8e:7d:83:03:b1:e8:b9:44:07:7c:fe:cf:32:47:95:bf:
6e:4d:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:58 2024 by rpki-client on console-ams.rpki-client.org