Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/bx1iXzzAAC3MsF2IxPuBeCzF7Hs.roa
File: bx1iXzzAAC3MsF2IxPuBeCzF7Hs.roa (raw, json)
Hash identifier: NQMEGtcM/jeyXyGLwXABksfTPG8WdCg+krqQ17GqtmA=
Subject key identifier: 6F:1D:62:5F:3C:C0:00:2D:CC:B0:5D:88:C4:FB:81:78:2C:C5:EC:7B
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0186067FDB06697B453F8BCF095BE67BC96F
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/bx1iXzzAAC3MsF2IxPuBeCzF7Hs.roa
Signing time: Tue 31 Jan 2023 06:24:47 +0000
ROA not before: Tue 31 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52194
IP address blocks: 212.22.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:7f:db:06:69:7b:45:3f:8b:cf:09:5b:e6:7b:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 31 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f1d625f3cc0002dccb05d88c4fb81782cc5ec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:10:c5:bc:be:ef:11:35:76:3b:7e:52:35:
ff:53:3d:de:1a:28:3d:8b:9b:f5:a4:c6:07:f8:95:
df:c8:7c:d8:81:bd:4c:ec:3d:a8:82:95:d9:3e:9d:
31:09:7e:ae:9d:ea:e6:50:ec:41:6d:cd:13:7b:75:
9b:ad:05:e8:0b:7f:e9:78:6c:19:34:4c:41:85:33:
2b:5a:2d:a2:4e:2d:58:ee:47:27:cd:57:e4:4f:ce:
a8:d0:fd:c9:e5:b5:f8:09:54:bd:94:0d:ac:09:ee:
7a:a3:41:5f:cf:6d:de:0e:1f:82:97:29:35:34:1f:
2e:8d:f4:49:17:7d:b5:67:11:62:99:e5:af:a2:a2:
d5:ab:8a:9b:a2:64:64:54:b1:1e:60:09:cb:8b:13:
b1:6f:7e:54:d8:3c:32:8e:13:36:d1:51:cc:f1:85:
e0:06:26:38:a9:f7:d0:17:b7:fa:e0:c4:83:72:e2:
fc:e2:d7:59:d3:1e:29:d1:0f:07:e1:9b:96:a1:a3:
95:04:9a:67:d5:a9:bd:f2:7a:20:15:09:ce:68:08:
0e:d1:5a:77:27:40:60:69:7f:65:2e:f6:5b:85:88:
43:63:a7:02:5b:01:47:58:c1:64:f1:58:96:b4:7a:
a8:43:7e:12:cd:a9:72:62:a8:4d:9d:31:52:1a:c7:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:62:5F:3C:C0:00:2D:CC:B0:5D:88:C4:FB:81:78:2C:C5:EC:7B
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/bx1iXzzAAC3MsF2IxPuBeCzF7Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.95.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3d:21:b5:fb:04:3d:3d:01:b6:63:fc:83:3d:70:2e:0e:b0:
b6:ad:34:aa:62:2b:9c:a3:4d:61:26:12:36:6e:d8:af:3c:15:
c8:ed:0b:44:88:44:20:6e:92:e6:7f:3b:9c:eb:30:61:8a:3b:
bf:cd:15:7c:0b:1c:64:c4:7f:6f:3c:e4:76:e3:17:61:f8:6f:
cd:b7:60:d1:cb:0c:4e:e9:07:e9:43:e8:27:82:93:52:9a:27:
3f:c3:d5:b5:e6:81:b6:f5:15:33:00:a7:05:15:d1:ad:fc:60:
5f:e6:f4:af:ed:e8:4e:6e:a3:66:88:3d:cd:48:b3:d5:f9:0a:
2a:40:4d:5d:eb:42:bf:48:18:a2:22:a6:7a:a8:b7:0a:27:c5:
ba:bb:4e:a6:b6:6e:62:c1:52:5f:cc:b1:52:a1:cd:2e:18:e3:
62:c9:44:c2:01:04:1f:63:0c:b9:13:36:65:a7:e3:31:f1:f6:
6b:55:2f:a6:d7:be:4b:b0:ef:25:00:63:51:eb:1f:91:e9:ea:
cb:b3:3d:3e:6b:da:1a:93:14:e0:07:26:99:d4:9b:ce:8b:bf:
e2:1c:1c:85:ce:fb:b1:54:27:0c:0a:8c:5c:69:90:48:3b:8c:
7a:43:b8:b5:b1:c8:69:2c:8a:67:d4:a5:be:97:33:ed:9a:f6:
0f:6b:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 08:50:44 2023 by rpki-client on console-ams.rpki-client.org