Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/bSWtpMXUEKGSR16QPbqULCtcKdU.roa
File: bSWtpMXUEKGSR16QPbqULCtcKdU.roa (raw, json)
Hash identifier: kgGwnd3gY3wsar0JzZYkG3+ZmSN6YiSFsd3zCBAvwjc=
Subject key identifier: 6D:25:AD:A4:C5:D4:10:A1:92:47:5E:90:3D:BA:94:2C:2B:5C:29:D5
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01856D38507E38387E9C0DF57C7A64F79BE2
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/bSWtpMXUEKGSR16QPbqULCtcKdU.roa
Signing time: Sun 01 Jan 2023 12:04:45 +0000
ROA not before: Sun 01 Jan 2023 12:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56595
IP address blocks: 192.124.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:50:7e:38:38:7e:9c:0d:f5:7c:7a:64:f7:9b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jan 1 12:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d25ada4c5d410a192475e903dba942c2b5c29d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:fa:e6:bb:06:4b:6d:5b:22:12:62:50:cc:
56:ee:66:3c:d8:bc:34:80:46:4d:05:0d:c7:e6:5f:
5b:8c:3f:15:bb:07:eb:db:a2:07:fd:27:16:9a:24:
9b:bf:b1:3e:d4:a8:4f:1c:d2:14:57:a4:1a:a3:4c:
24:2b:cd:6d:06:04:a8:fa:4b:f5:db:9c:1d:6f:4b:
4f:ac:7a:01:bb:ce:fb:73:4e:fd:ac:66:58:b0:3e:
de:f1:6f:65:ff:5a:aa:06:df:51:c7:06:bf:6d:78:
04:9a:f6:86:8d:2f:86:94:cb:a0:0d:b5:78:c4:01:
cb:45:f0:9f:c3:91:8a:a6:d8:8e:7c:42:bb:51:33:
bd:1b:31:b7:d8:7f:8e:65:00:35:f4:5c:23:e6:b7:
a5:c4:95:ff:b3:ff:f3:00:3c:03:4b:c7:d2:0c:74:
49:54:34:c7:8b:a3:e5:e9:f0:2a:ab:b9:74:0c:e9:
e3:d2:79:38:74:8c:7f:c5:64:df:a8:b4:aa:f5:eb:
73:d0:65:d1:b6:e6:51:88:d2:08:0b:7a:a4:55:86:
ef:1f:91:a9:10:a6:fb:ea:e6:42:95:21:10:6a:d9:
4a:ff:1b:e8:2d:2c:11:2e:c0:c3:a7:a7:25:da:64:
3f:45:4d:7c:b3:f9:a3:21:20:c3:0b:3c:a6:10:6f:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:AD:A4:C5:D4:10:A1:92:47:5E:90:3D:BA:94:2C:2B:5C:29:D5
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/bSWtpMXUEKGSR16QPbqULCtcKdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.201.0/24
Signature Algorithm: sha256WithRSAEncryption
26:92:fc:6c:47:3b:a0:9d:12:1b:90:5a:78:2c:84:1d:f7:2e:
55:dc:d5:b2:cf:25:03:1f:55:cd:72:33:b0:33:3f:a3:09:4f:
3d:e5:69:7f:46:e7:ac:38:45:f6:cb:35:7e:8f:26:a9:c5:55:
bd:10:59:5e:12:03:20:6f:e3:f3:6a:37:e2:a9:43:8e:83:28:
42:44:19:7b:d3:70:60:c1:ce:e9:b9:63:26:e9:f5:9f:44:3c:
d4:db:ba:de:21:9f:f5:c4:f5:21:74:83:47:d8:34:96:86:12:
41:46:aa:89:49:82:e5:5b:e6:09:d0:c2:57:fe:4a:37:b3:85:
d7:0f:bf:e3:9d:6c:c2:37:d1:3b:7f:5e:50:36:f6:5d:c1:4b:
7e:ff:7c:8e:ee:ea:9b:8d:2d:09:25:5b:48:b9:21:e0:1b:46:
1e:dd:6b:9f:0e:86:7c:74:f9:da:18:c9:36:3a:c3:3a:e4:31:
08:e9:30:6c:92:ee:c7:e4:93:cf:e8:c4:71:5a:06:48:87:97:
8a:2b:44:08:c8:6d:d0:49:4e:9e:35:d4:ba:31:b5:3e:c2:aa:
15:55:dd:12:d2:52:d0:fa:ac:48:a8:5d:4c:43:e7:a1:68:36:
da:9f:e0:13:65:20:3b:58:2c:e4:b5:41:5a:f0:d7:f4:11:e7:
b5:83:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:32 2024 by rpki-client on console-ams.rpki-client.org