Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bguzZImZ-sv2ASfBe62L9h_OE7w.roa
File: bguzZImZ-sv2ASfBe62L9h_OE7w.roa (raw, json)
Hash identifier: AbaPniO6bKmZICZrAgNzUx07T36FHwSIEeYJKbmu5JE=
Subject key identifier: 6E:0B:B3:64:89:99:FA:CB:F6:01:27:C1:7B:AD:8B:F6:1F:CE:13:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B9EAE89D4F60011830B0CEA08E2493A9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bguzZImZ-sv2ASfBe62L9h_OE7w.roa
Signing time: Wed 14 Jun 2023 12:39:19 +0000
ROA not before: Wed 14 Jun 2023 12:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.87.250.0/24 maxlen: 24
195.133.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:ea:e8:9d:4f:60:01:18:30:b0:ce:a0:8e:24:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 12:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e0bb3648999facbf60127c17bad8bf61fce13bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:1e:42:7f:63:17:9a:6d:80:8a:72:b3:1f:
b5:e1:75:f8:d3:62:dd:52:1f:bf:e4:d9:90:8d:1e:
ba:72:ac:ea:8a:f7:b3:ce:37:46:4e:4c:fa:bd:b8:
50:c9:7f:eb:90:6d:b1:f0:fa:4d:60:fa:e6:e4:2d:
bd:7b:a9:75:12:1f:10:15:ef:4d:27:e2:44:ed:13:
c8:94:8c:39:9f:c3:0c:ed:d4:92:53:f6:26:1a:9b:
55:c6:c3:87:38:f3:cb:71:68:91:b2:bf:a1:cc:93:
2f:3a:96:18:d8:9a:c7:27:95:63:9f:a8:bc:32:8a:
b9:95:ef:3f:d6:ae:3f:a9:cb:44:5c:ce:16:bd:a5:
98:f0:58:6a:12:6b:d3:a7:44:d4:e4:c0:43:e7:8b:
61:1e:fc:48:76:1b:d6:77:18:84:52:d0:c0:81:94:
aa:56:7c:40:24:b8:3d:0d:a2:78:84:27:19:ef:0c:
45:9e:70:24:39:de:1e:f4:1a:fc:e7:a7:db:77:bc:
45:78:e2:38:3e:b9:81:35:a9:ca:0b:86:eb:79:39:
2a:46:a3:3c:b6:7e:75:83:29:9e:35:bd:87:77:57:
e4:cc:86:ac:56:17:28:57:4f:ed:5f:c7:7d:58:e4:
c7:c7:aa:0e:36:97:8c:a1:6c:68:98:4a:47:55:47:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:B3:64:89:99:FA:CB:F6:01:27:C1:7B:AD:8B:F6:1F:CE:13:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bguzZImZ-sv2ASfBe62L9h_OE7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.250.0/24
195.133.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:dc:23:b3:f6:33:43:ab:89:e6:2a:81:a4:cd:84:1f:e7:88:
47:ca:d3:87:88:34:d3:e0:75:08:5e:e0:eb:dd:7b:cb:2b:b8:
04:c3:a2:41:eb:23:1d:96:6d:e6:53:3f:3f:0a:50:1b:83:2f:
74:0b:c3:38:e9:d0:c8:53:39:dd:db:69:4d:1c:9f:3c:dd:df:
95:94:14:ba:bb:7a:35:84:50:db:56:f4:28:e1:d9:2a:b1:ec:
ec:a6:4b:4b:1a:cc:5f:c1:ce:13:c4:f5:4a:52:e6:f8:5b:7e:
9f:82:b3:74:0f:7f:82:6e:81:5d:59:92:c5:7f:85:b4:e5:90:
e0:65:5b:11:39:67:14:b3:ea:12:c7:9c:83:ba:b8:3e:ca:29:
9d:b2:fe:52:42:33:b3:a9:62:90:5b:e6:e6:5f:84:88:7d:83:
7c:4f:e2:6a:95:28:fd:af:a5:d1:01:ab:72:05:d2:e4:20:fd:
f1:c6:08:b4:93:3d:65:2c:4a:bb:ec:12:36:4a:7d:18:6b:9a:
dc:55:8f:35:d6:e8:e4:c4:dc:ab:29:a5:91:d7:1d:27:e6:fb:
60:84:34:75:4f:93:f5:ad:83:09:1e:fb:47:f3:58:65:de:16:
6c:8e:a3:19:a4:9d:19:a0:5a:16:4d:92:a4:63:fe:60:b6:88:
0e:af:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org