Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Bel-DEu9G9BY5KHXYqw0xPFfNTY.roa
File: Bel-DEu9G9BY5KHXYqw0xPFfNTY.roa (raw, json)
Hash identifier: VI6rnT6eEPM4sMKp5APrpzO657NxPTGzB1Nz0Wd0xyk=
Subject key identifier: 05:E9:7E:0C:4B:BD:1B:D0:58:E4:A1:D7:62:AC:34:C4:F1:5F:35:36
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 018793FC0AAA59D3C8DADB155C8724F354F4
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Bel-DEu9G9BY5KHXYqw0xPFfNTY.roa
Signing time: Tue 18 Apr 2023 10:49:41 +0000
ROA not before: Tue 18 Apr 2023 10:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 87.120.100.0/22 maxlen: 22
93.187.110.0/24 maxlen: 24
2a13:1540::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Apr 2023 11:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:fc:0a:aa:59:d3:c8:da:db:15:5c:87:24:f3:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 18 10:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e97e0c4bbd1bd058e4a1d762ac34c4f15f3536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:c1:47:5c:13:b7:41:f0:31:2b:db:a4:d2:
47:06:16:f5:16:01:4d:d6:c5:d7:3a:0d:a0:e0:7c:
6d:67:6d:43:1a:b2:b4:9d:f5:c0:72:75:76:60:1e:
f6:41:35:3a:20:83:0e:9d:56:a7:21:75:1c:78:de:
ea:03:49:3f:6f:7f:d5:29:8d:b7:80:fa:bc:11:ae:
78:dc:61:d6:ef:94:39:c1:ab:e3:34:a6:47:a2:a6:
53:0b:68:ee:82:67:ff:54:87:ed:36:67:b4:6c:ca:
58:14:6a:d4:5a:37:a4:45:f9:77:49:b5:a0:a6:90:
ee:32:ea:a6:a2:ef:d7:90:50:66:c3:d5:42:9c:2f:
df:3c:4f:ee:f2:78:f7:8a:97:05:74:7a:08:4d:64:
92:3a:f7:fd:63:ab:83:e6:0d:1a:b7:6d:55:31:13:
4a:bb:f4:01:dc:80:cf:ff:c4:68:ff:0b:35:16:87:
5c:51:7c:e8:78:f8:a2:27:2e:0e:05:46:0f:01:ee:
72:d2:24:50:91:38:e7:04:65:1a:8e:82:5b:d5:10:
78:c0:5e:ec:11:dc:02:69:97:60:9a:c8:01:43:ab:
7e:70:8e:4d:02:12:60:2b:62:73:05:a8:a9:08:52:
10:54:8e:21:90:c3:50:5f:95:83:f3:ba:d7:86:a9:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:7E:0C:4B:BD:1B:D0:58:E4:A1:D7:62:AC:34:C4:F1:5F:35:36
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Bel-DEu9G9BY5KHXYqw0xPFfNTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.100.0/22
93.187.110.0/24
IPv6:
2a13:1540::/48
Signature Algorithm: sha256WithRSAEncryption
2d:59:fd:5a:0f:58:fb:18:0b:d0:40:6d:19:86:43:ee:a6:55:
35:6a:3a:f4:fe:0f:62:ca:70:4b:cc:21:59:aa:88:6b:cc:93:
61:e6:df:99:ee:1c:0e:07:d5:7f:d1:49:18:ce:7a:df:e2:05:
a0:44:02:05:d5:61:d3:47:9c:90:b7:fb:c7:eb:94:11:d2:77:
61:78:7d:9e:6c:d8:3a:e9:87:3e:d6:6a:ea:7b:7b:d2:82:a7:
20:0b:9b:ee:c7:e5:4e:29:98:ac:8f:7b:99:77:f9:6c:b1:b6:
50:a1:cb:eb:46:95:e8:32:62:e0:08:60:0b:93:c9:5a:76:14:
cf:2d:2a:8f:b7:09:71:46:8c:d7:df:28:0d:55:62:fd:d8:15:
62:74:5b:34:d8:3d:84:6f:13:dc:57:c6:12:90:6a:3d:57:49:
df:80:1b:83:c7:e1:7b:9a:86:13:12:71:d0:58:b0:d4:bf:b6:
4d:c1:e6:97:6e:89:9b:01:20:b3:27:93:7a:05:97:b3:d9:ec:
8e:45:65:e9:cb:fb:20:73:db:de:9c:86:83:80:42:7f:63:af:
51:92:97:f3:a0:2a:ce:2a:9c:f2:4d:c2:7f:35:25:ff:4e:99:
01:28:49:51:75:00:c3:2a:bb:20:6b:d1:ab:48:bc:5b:26:99:
11:db:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:13 2024 by rpki-client on console-ams.rpki-client.org