Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/elDBf59G1M16XksTKsbithAI0rk.roa
File: elDBf59G1M16XksTKsbithAI0rk.roa (raw, json)
Hash identifier: ksuTC6Tu5DA4XKfC6pwy+X4mo+vw6Sp+qZCUusp4hW4=
Subject key identifier: 7A:50:C1:7F:9F:46:D4:CD:7A:5E:4B:13:2A:C6:E2:B6:10:08:D2:B9
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0189B24A8D074B5088E7109D48F4145461B3
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/elDBf59G1M16XksTKsbithAI0rk.roa
Signing time: Tue 01 Aug 2023 18:09:37 +0000
ROA not before: Tue 01 Aug 2023 18:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.23.6.0/24 maxlen: 24
45.134.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b2:4a:8d:07:4b:50:88:e7:10:9d:48:f4:14:54:61:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Aug 1 18:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a50c17f9f46d4cd7a5e4b132ac6e2b61008d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:04:e4:97:d4:81:b1:53:c7:ac:86:fb:43:
52:2f:33:e6:aa:90:99:a8:bf:b3:bf:43:91:61:94:
b8:c3:40:4f:71:c6:51:09:26:29:f9:a9:91:ca:17:
6f:b5:bf:fd:c0:b9:a3:a0:7f:07:34:ad:88:2b:12:
57:73:e6:fe:ac:3e:9a:81:ef:4e:32:bf:a6:3d:63:
be:44:28:88:ff:46:98:d4:c6:a1:d0:c6:de:f0:47:
d3:76:73:6b:c3:72:d1:09:5e:ab:36:ba:a2:5c:b6:
18:48:81:9d:f3:c7:ac:1f:52:3e:95:b7:aa:54:58:
28:3a:4f:a9:c3:5c:14:05:22:ee:19:d3:b8:c6:cf:
25:f8:59:23:75:fd:92:e6:54:2f:71:cb:2f:d1:39:
25:6c:37:0e:69:63:65:29:0c:ab:48:05:4d:c5:c8:
71:9c:22:8a:12:c5:69:01:e1:e6:01:20:e9:ab:7c:
69:ae:c4:14:05:2e:82:fb:52:5f:1a:cd:44:13:1a:
bb:c2:26:3a:76:20:78:cd:0d:34:8d:05:49:95:ef:
bc:54:88:22:f9:93:bc:af:2d:52:ff:77:5d:87:e6:
b1:41:7b:13:0e:f4:9b:c7:20:36:b3:51:1b:5d:e6:
0e:73:76:5a:b0:d4:c6:fb:e4:8d:09:4e:93:0f:21:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:50:C1:7F:9F:46:D4:CD:7A:5E:4B:13:2A:C6:E2:B6:10:08:D2:B9
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/elDBf59G1M16XksTKsbithAI0rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.9.0/24
185.23.6.0/24
Signature Algorithm: sha256WithRSAEncryption
41:10:ae:7a:51:e9:7b:4f:70:20:0b:24:be:90:31:e1:7c:01:
2b:9c:07:8a:ea:c6:15:6c:a1:03:b4:7f:60:84:be:f6:ab:cb:
0a:62:c5:5f:e2:fa:7d:b7:69:1f:ee:01:2c:81:cd:e5:05:54:
70:3c:87:a2:fb:a0:18:1e:95:23:17:b3:1a:3a:ab:45:d6:b6:
85:7a:b2:05:04:af:1e:91:3e:7c:9f:fb:96:bb:26:46:e5:38:
b6:d4:e3:5f:a2:99:a7:b3:db:37:e1:42:0b:2b:e7:67:9b:2b:
54:38:ed:41:51:1d:3b:e4:d7:52:53:c5:31:c1:e9:ab:ff:f2:
bf:54:db:c2:2e:e8:d1:df:d1:69:c2:5d:a4:b0:86:b7:b8:99:
3b:cc:32:c5:ba:4a:7d:9a:78:47:c7:85:e7:d0:5a:54:c5:85:
81:b1:8e:e2:7a:f2:ae:a9:79:6c:da:88:fb:24:f8:2f:8b:6f:
6a:cf:47:a0:9e:0c:3c:59:32:f3:0a:49:d5:38:53:71:c2:9b:
61:41:3c:40:3c:85:fb:8a:c4:b3:b4:40:7c:fa:dc:c2:4e:0d:
be:f8:02:1b:f7:89:ac:08:50:5f:0e:55:0d:b4:4c:73:67:29:
6f:6d:c8:42:a2:03:21:d6:c2:1c:c0:f2:c8:9c:47:b5:2a:2f:
c7:0e:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 11:33:34 2023 by rpki-client on console-ams.rpki-client.org