Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/b5JYWoQms8TwrZQ3Sa1KYpbXWpU.roa
File: b5JYWoQms8TwrZQ3Sa1KYpbXWpU.roa (raw, json)
Hash identifier: cOiKE5WbBwaBOGwA12Swu9yqrmfoN9S9CFSA8nZmNp8=
Subject key identifier: 6F:92:58:5A:84:26:B3:C4:F0:AD:94:37:49:AD:4A:62:96:D7:5A:95
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A6DC5BF61404CB0C61A2723B82DA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/b5JYWoQms8TwrZQ3Sa1KYpbXWpU.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.163.68.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a6:dc:5b:f6:14:04:cb:0c:61:a2:72:3b:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f92585a8426b3c4f0ad943749ad4a6296d75a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:08:cc:10:43:5d:13:6a:af:cd:98:4e:bd:
4a:04:6b:ab:2b:35:8a:f7:d8:23:00:b4:41:12:4b:
46:11:91:89:df:7e:72:fb:16:e4:12:28:d4:5d:90:
e2:fe:13:ef:da:85:a2:93:06:19:aa:0a:fc:6c:5f:
0e:d5:00:78:c2:fd:91:e7:d2:11:03:ab:7a:8c:ff:
c4:8e:2b:a8:fc:df:a8:f3:22:d9:e6:76:ec:bd:6a:
2d:31:c8:45:fe:12:64:4d:38:e5:72:74:1a:65:d3:
7f:1e:b6:3d:5f:1f:8d:d0:01:74:07:31:0f:e6:84:
96:1f:c3:f7:cc:cf:19:43:0e:1a:9a:fd:a0:bc:63:
c1:02:34:04:89:1e:15:8e:86:de:7e:ee:f2:e2:73:
2a:c3:d5:89:4f:19:c7:2a:46:b9:9a:4c:da:b6:d1:
35:3a:4a:40:47:a7:4c:96:13:b3:be:60:19:e0:a1:
a9:fe:f9:97:da:fa:8d:c6:47:c5:31:e1:b4:7b:fb:
81:ba:00:53:01:0e:c4:e9:62:1a:cd:4f:c3:39:47:
3b:17:1e:36:eb:da:24:57:57:e9:ca:69:f3:ad:a7:
d1:d5:c1:b8:c6:91:8d:4f:73:d1:19:b0:71:cd:ac:
01:b8:44:ca:d3:94:8a:7d:44:c5:90:36:56:bf:3a:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:58:5A:84:26:B3:C4:F0:AD:94:37:49:AD:4A:62:96:D7:5A:95
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/b5JYWoQms8TwrZQ3Sa1KYpbXWpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.68.0/24
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
72:05:43:2b:cb:e5:35:26:78:7c:0f:84:48:4f:87:7e:e6:ee:
6b:53:e2:43:8b:be:ba:dd:8e:2d:0b:0b:a1:c0:ab:c1:00:33:
0a:cc:63:4f:27:ec:9d:eb:c5:50:26:41:17:af:db:71:64:c0:
c6:b4:aa:fa:49:15:e2:57:a1:41:05:61:a9:06:e4:74:8a:f8:
95:ab:74:1e:26:42:ba:37:cf:27:66:e2:50:1a:9c:9c:e6:d7:
b4:d6:85:f7:9e:f4:ad:50:83:19:b2:6c:30:c5:7b:27:5c:b7:
67:1b:c1:d8:ed:4f:e2:01:36:10:df:01:07:a9:59:2e:1a:73:
08:ca:b4:dd:89:9f:27:08:0e:a6:e7:25:15:09:0e:40:23:5b:
44:3a:bb:84:da:d3:5b:5a:3d:37:d7:14:72:35:f6:cc:85:ac:
cb:a4:4e:ba:ff:a1:38:cb:8e:5c:0c:80:17:b3:7a:8e:6c:5d:
27:2e:13:64:c2:92:3b:41:02:d5:be:ca:65:52:2f:66:35:77:
74:35:93:a1:68:3a:50:14:e2:8c:0d:82:e4:9d:99:94:f6:e5:
cc:27:f0:56:fd:f6:d3:96:83:69:e5:cb:35:76:8e:cd:a0:be:
41:81:69:02:a9:74:43:c6:12:5c:69:73:dd:13:44:98:03:a6:
b1:41:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org