Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/bpsCLC2R6i0zEbMLbJHAkEURUBA.roa
File: bpsCLC2R6i0zEbMLbJHAkEURUBA.roa (raw, json)
Hash identifier: chQnp/SjO2UDAXnzn23xjrZOU6wAOqNuwaC+ydcRLYA=
Subject key identifier: 6E:9B:02:2C:2D:91:EA:2D:33:11:B3:0B:6C:91:C0:90:45:11:50:10
Certificate issuer: /CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Certificate serial: 01857315DBF56D344545A01A210AD31EE568
Authority key identifier: 18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/bpsCLC2R6i0zEbMLbJHAkEURUBA.roa
Signing time: Mon 02 Jan 2023 15:24:50 +0000
ROA not before: Mon 02 Jan 2023 15:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62200
IP address blocks: 82.202.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:db:f5:6d:34:45:45:a0:1a:21:0a:d3:1e:e5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Validity
Not Before: Jan 2 15:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e9b022c2d91ea2d3311b30b6c91c09045115010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:47:59:1a:f5:24:ac:ae:04:19:47:e4:be:
22:e7:0c:8d:d6:00:7c:01:5d:f3:eb:b6:40:90:71:
8a:25:d4:a1:7e:df:00:05:65:f9:bf:8f:a0:89:f5:
c9:43:d8:ab:fd:27:6c:eb:34:c2:ea:70:3d:98:bf:
62:a4:46:1f:37:ff:96:46:bb:7d:9b:76:21:7e:e0:
52:bc:0d:c1:cd:8e:98:6c:06:6b:ab:7e:ec:c7:93:
4e:d8:4d:14:96:9d:6a:7f:2b:72:e1:06:08:05:55:
b1:5d:7d:51:c3:d5:37:36:47:78:bf:49:f1:cf:12:
29:22:5c:9b:5a:93:dd:96:5b:13:d0:ad:af:52:20:
56:76:f8:a7:72:e1:20:e7:99:3e:92:9b:99:6a:5b:
70:9c:ef:51:52:b1:6c:b7:48:de:76:29:56:b2:50:
10:79:e3:85:bb:8e:29:92:9f:6d:c0:56:cc:52:9b:
77:64:26:8d:53:a4:bc:30:c1:3e:b5:c8:fe:2d:e3:
ce:50:78:12:3b:55:4d:2b:39:06:5e:a7:fd:fe:5b:
24:b8:47:95:d9:a8:0b:e8:1a:83:e9:c6:01:bf:55:
24:d5:82:9c:8a:66:ff:55:9e:c8:fd:fc:76:98:f8:
b5:8c:82:3d:46:6d:8e:e1:c9:1a:5b:d0:6d:6f:c5:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9B:02:2C:2D:91:EA:2D:33:11:B3:0B:6C:91:C0:90:45:11:50:10
X509v3 Authority Key Identifier:
keyid:18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/bpsCLC2R6i0zEbMLbJHAkEURUBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.164.0/24
Signature Algorithm: sha256WithRSAEncryption
67:43:08:e7:aa:9a:95:9f:d8:9a:e2:1f:44:95:4f:23:92:1f:
62:86:e6:aa:b4:e9:d7:97:d7:60:5a:0d:8e:0c:24:48:0f:9f:
bf:93:ff:fa:09:6e:da:0d:7e:d8:72:ee:8f:38:a8:f6:93:49:
93:27:6f:61:ed:01:ac:fc:3c:06:68:32:2f:74:aa:2a:11:d7:
41:0f:e6:13:a5:37:51:ba:c1:b3:bb:b1:b9:34:d2:36:13:27:
94:ce:55:bb:0c:57:25:3c:89:54:8c:3c:63:4d:ef:5a:8c:3b:
f6:b8:7d:17:39:3b:e7:89:a4:4b:4b:9a:79:1e:1d:27:93:7e:
eb:e7:e1:ce:fd:18:0e:90:8e:34:29:55:11:75:9d:75:2d:d6:
b4:4c:f8:bc:39:b3:cf:bd:95:d1:6b:a4:e3:cb:7b:1c:64:4a:
34:37:34:00:de:e4:c2:44:7b:32:4a:21:2a:12:82:5c:05:3b:
07:01:91:a2:61:8f:33:94:7d:46:16:4c:c8:df:9b:1a:2f:1b:
96:b4:82:7c:35:86:ed:4d:6c:43:5f:8b:ab:30:11:68:08:a5:
1c:bf:b3:ed:16:62:7b:b9:34:f6:10:0a:e9:fe:07:c2:a3:2f:
b9:38:e1:cc:29:c8:72:e4:b4:91:0f:ea:c2:90:48:66:20:f5:
45:1b:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:15 2024 by rpki-client on console-ams.rpki-client.org