Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/gB2OXKdVXaqKuw8REVbiesWyD-k.roa
File: gB2OXKdVXaqKuw8REVbiesWyD-k.roa (raw, json)
Hash identifier: 6tHCUPqhVk+OL8dkTbfls/dLNTWVhdkUeblS3C+uTrU=
Subject key identifier: 80:1D:8E:5C:A7:55:5D:AA:8A:BB:0F:11:11:56:E2:7A:C5:B2:0F:E9
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 0186FC53FAA64059086E00A0271047023D7A
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/gB2OXKdVXaqKuw8REVbiesWyD-k.roa
Signing time: Mon 20 Mar 2023 00:03:27 +0000
ROA not before: Mon 20 Mar 2023 00:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209605
IP address blocks: 91.224.92.0/24 maxlen: 24
185.36.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fc:53:fa:a6:40:59:08:6e:00:a0:27:10:47:02:3d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Mar 20 00:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=801d8e5ca7555daa8abb0f111156e27ac5b20fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:85:d7:dd:51:f9:d6:19:78:9b:f9:32:63:
16:29:cb:85:04:33:44:88:25:3c:20:74:1d:38:56:
fe:92:71:58:04:27:fc:06:33:7f:61:24:e3:e0:8f:
28:33:24:ac:19:03:a0:e2:45:3b:88:b5:9f:87:16:
79:42:67:e7:dd:51:16:75:76:b2:1f:7f:dc:38:8b:
45:4e:10:7f:01:12:49:10:c7:09:4f:eb:9a:ff:f2:
90:d5:a0:92:93:d8:8b:d1:e9:59:c2:1e:1c:b6:1a:
12:06:74:cb:50:1a:db:43:54:67:ec:44:dd:85:b3:
05:42:17:90:b9:fb:ed:e8:89:0c:fa:dd:0d:fb:b5:
44:f0:c8:04:6d:b6:52:5c:d6:27:f7:85:cb:b9:59:
e3:6e:ef:8e:19:0e:a8:ae:bf:a4:3f:db:06:41:b7:
6c:c3:6a:e4:9d:65:51:82:c6:42:fb:8a:19:91:6b:
e6:ca:4f:55:db:60:07:8e:8d:f5:b0:c1:a7:31:d6:
c8:9f:20:e9:c8:46:a2:13:23:7f:75:74:9b:c5:60:
15:6b:f3:6d:f3:4b:83:5c:65:32:60:55:39:ce:a1:
74:63:c7:11:b0:5f:6e:23:cc:46:04:e8:b7:7e:65:
e3:4d:89:ce:46:9f:65:79:36:44:50:4a:86:5b:4e:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:8E:5C:A7:55:5D:AA:8A:BB:0F:11:11:56:E2:7A:C5:B2:0F:E9
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/gB2OXKdVXaqKuw8REVbiesWyD-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.92.0/24
185.36.81.0/24
Signature Algorithm: sha256WithRSAEncryption
50:19:4b:61:44:5d:35:a3:e5:f9:94:e3:95:03:99:95:f7:8f:
9c:1c:e7:f6:81:53:e2:00:be:35:44:9b:37:39:c5:94:58:84:
76:9e:6e:a0:f8:63:23:d7:bb:f7:b8:a8:e6:73:39:52:01:2e:
79:6b:ed:3b:ba:4d:cf:a9:c1:e9:f7:84:1a:d9:df:b4:42:71:
d2:27:03:7c:43:4f:76:a9:26:3b:aa:b5:ad:eb:bb:9c:b6:b6:
41:80:8c:64:f5:0d:c5:e5:f4:d2:5c:36:36:24:61:f5:83:18:
62:3f:4c:9e:87:35:e3:31:42:67:53:49:11:34:f6:64:fd:f6:
d0:6f:d6:9b:af:bd:86:e7:34:97:d0:ff:31:5e:67:10:e8:f9:
fc:45:6d:34:b8:81:c3:9f:cc:04:aa:7d:10:c9:00:dc:84:fa:
87:fb:74:ce:b1:ef:3d:80:21:88:74:aa:25:b9:60:4c:fe:d1:
f2:62:d3:70:92:78:c4:63:77:42:c3:01:7a:9a:a4:78:b5:31:
21:02:3f:73:f0:88:06:49:27:10:f8:8a:32:7e:ee:6f:ff:be:
86:9e:68:07:2c:d6:ab:c7:ed:82:b3:c7:1d:64:7c:c9:d2:2d:
ad:4b:51:aa:9b:b4:9e:ff:fc:06:cc:f9:11:ab:5a:5c:41:c4:
41:d7:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org