Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/bVndM_6w2LhQvERmaGNCZpnrSjE.roa
File: bVndM_6w2LhQvERmaGNCZpnrSjE.roa (raw, json)
Hash identifier: FjgLolup/yM4oBjveCi+vEoGicyLfLrsdaLuZii5flY=
Subject key identifier: 6D:59:DD:33:FE:B0:D8:B8:50:BC:44:66:68:63:42:66:99:EB:4A:31
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 01856E6FC231F9DCA885AA6B6051E98DA39B
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/bVndM_6w2LhQvERmaGNCZpnrSjE.roa
Signing time: Sun 01 Jan 2023 17:44:56 +0000
ROA not before: Sun 01 Jan 2023 17:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209867
IP address blocks: 86.62.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:c2:31:f9:dc:a8:85:aa:6b:60:51:e9:8d:a3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Jan 1 17:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d59dd33feb0d8b850bc44666863426699eb4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:98:cb:9b:98:74:51:5d:47:b4:6a:7e:cc:
59:45:8a:f7:f2:71:8a:79:85:12:fb:77:ab:ef:bc:
49:38:7d:04:f3:eb:84:93:b1:44:6d:a5:bc:e6:89:
c6:08:dd:5d:7d:e2:1a:57:8c:5f:33:80:aa:4f:ff:
b2:16:e4:41:a6:f4:4f:a4:ac:37:3d:06:4a:9a:76:
c8:6e:62:5e:51:d4:e7:5f:90:81:c0:34:d7:8d:f9:
05:37:13:33:cc:6f:4e:23:ea:ad:5e:48:17:cf:4d:
8a:13:86:12:3a:cf:0a:f4:ed:9e:93:c6:5f:a8:69:
d1:b4:de:52:17:7a:ec:64:1b:c1:1d:79:54:c0:61:
b1:76:dc:fe:67:8b:23:c8:06:df:13:b5:ef:36:28:
ad:ff:2e:80:53:2a:95:4a:67:3c:13:93:16:72:55:
fa:78:f7:62:03:74:9b:b7:87:30:10:d8:ad:6c:1a:
f7:93:e0:e6:44:f0:1c:b3:da:88:d5:68:c0:53:c3:
2d:be:61:f4:66:44:4b:b9:7f:a9:21:62:42:14:6d:
23:3b:51:69:27:37:f1:16:66:22:8b:08:30:92:73:
56:0d:cc:af:9c:3d:96:7c:dd:ff:9b:94:09:d1:19:
7e:10:61:c3:8a:18:20:aa:fd:a6:f5:d8:ec:8a:e6:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:59:DD:33:FE:B0:D8:B8:50:BC:44:66:68:63:42:66:99:EB:4A:31
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/bVndM_6w2LhQvERmaGNCZpnrSjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.7.0/24
Signature Algorithm: sha256WithRSAEncryption
97:88:17:06:36:f7:0d:c6:e0:8c:ab:93:c3:c0:47:20:c7:23:
f5:27:b7:ab:4e:0e:65:f6:3e:a3:e6:71:42:65:27:b3:67:ef:
ed:32:fc:eb:12:da:85:05:0c:89:42:9d:30:bc:e5:8e:b8:6a:
18:56:42:66:f9:e3:1a:cf:05:df:0f:94:da:6c:37:26:67:57:
e6:f0:31:35:70:3f:23:16:69:86:18:eb:de:a6:c2:f0:01:da:
9f:16:9d:8c:f2:db:3f:f2:7a:8b:40:56:6b:2a:50:0b:bb:9e:
d9:15:ec:01:3f:8e:c2:5b:39:20:b5:00:4e:03:be:61:e3:a0:
d4:00:61:d3:32:a4:34:65:cf:09:78:78:cf:63:5c:b9:05:90:
ca:22:29:9e:b1:65:57:eb:37:47:5f:34:10:53:a3:69:95:35:
cf:57:2c:71:af:b2:20:39:e4:77:e0:6c:75:c9:94:db:29:f5:
b3:82:42:93:60:51:c3:f2:72:f0:a3:56:28:98:14:8f:ec:7f:
2c:14:99:4d:3d:ce:f2:92:8f:28:f1:56:5b:13:08:32:7e:84:
6a:51:73:a0:30:2b:de:8d:11:f8:c5:9a:d1:f2:de:89:17:36:
97:6f:2d:f8:1b:67:98:c8:96:0e:5c:55:57:61:15:d4:12:b9:
5a:6c:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:40 2024 by rpki-client on console-fra.rpki-client.org