Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/bkXtG4GkCe3aGTa4S1Xz9gYpvOY.roa
File: bkXtG4GkCe3aGTa4S1Xz9gYpvOY.roa (raw, json)
Hash identifier: aqLK+YuABli1LKmUoo6aVqiLulbOA+87e01mFfUaHdc=
Subject key identifier: 6E:45:ED:1B:81:A4:09:ED:DA:19:36:B8:4B:55:F3:F6:06:29:BC:E6
Certificate issuer: /CN=6ab9de72a8f18862bc48aa00e66449eb1004a159
Certificate serial: 01856F023D302E91260D7DAFFA0FB71F5278
Authority key identifier: 6A:B9:DE:72:A8:F1:88:62:BC:48:AA:00:E6:64:49:EB:10:04:A1:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arnecqjxiGK8SKoA5mRJ6xAEoVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/bkXtG4GkCe3aGTa4S1Xz9gYpvOY.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.235.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3d:30:2e:91:26:0d:7d:af:fa:0f:b7:1f:52:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab9de72a8f18862bc48aa00e66449eb1004a159
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e45ed1b81a409edda1936b84b55f3f60629bce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:f7:12:56:4b:57:e6:64:75:ac:a7:5c:d4:
ce:db:37:90:da:c7:32:57:2e:51:f4:c2:c1:2a:1b:
a6:f3:ba:e4:7e:a0:9f:cb:f9:38:8b:6d:48:e8:bf:
98:44:c5:ab:23:c8:2e:62:fe:46:28:9e:78:df:28:
07:6b:ef:d2:50:4c:71:90:63:87:92:57:35:be:9e:
71:3c:2b:e6:b0:51:87:28:d4:9b:66:20:1b:1f:21:
a6:60:a4:20:12:42:b0:79:81:43:6b:82:23:bf:04:
27:12:a8:f1:25:a5:d4:17:2a:51:87:b2:f3:02:69:
87:9d:e7:a9:4b:9f:1e:b0:a8:de:ae:64:49:6f:b4:
f4:af:ea:66:80:97:c5:77:65:ff:83:91:44:e7:34:
2d:13:98:e5:df:e6:bb:77:70:27:a7:d9:f4:f5:f9:
6b:ff:e0:49:c0:04:f0:30:1b:30:62:02:f5:91:a3:
18:88:97:f1:af:1c:d9:06:01:f6:0a:f9:dc:6e:5e:
84:43:25:19:ce:c7:1d:a8:79:b2:3d:73:95:67:09:
d8:51:16:5d:a8:ff:e6:f9:47:b9:aa:92:29:c9:8b:
69:60:c4:e3:43:79:00:e8:b0:e7:0e:49:4f:75:03:
78:4c:97:55:62:3a:6b:14:b5:8e:eb:2c:70:1c:17:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:ED:1B:81:A4:09:ED:DA:19:36:B8:4B:55:F3:F6:06:29:BC:E6
X509v3 Authority Key Identifier:
keyid:6A:B9:DE:72:A8:F1:88:62:BC:48:AA:00:E6:64:49:EB:10:04:A1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arnecqjxiGK8SKoA5mRJ6xAEoVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/bkXtG4GkCe3aGTa4S1Xz9gYpvOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/arnecqjxiGK8SKoA5mRJ6xAEoVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3c:0f:61:8d:54:d6:f8:82:79:bc:cb:fb:56:dc:60:64:00:
34:f5:01:05:97:e9:48:93:36:2e:86:82:65:6b:d5:6f:df:09:
b4:30:7d:64:ff:0c:4a:10:e7:c6:27:7b:76:65:a5:7c:19:a2:
fb:08:a7:61:30:ad:d7:a8:45:d8:c4:fe:9f:54:1a:57:88:fd:
26:b4:de:19:1d:b0:6f:df:b6:54:90:95:43:77:57:0d:62:6d:
59:a9:49:69:48:71:2e:48:5a:e7:ad:66:58:3c:85:fa:83:c5:
e6:f6:74:11:ef:bd:e6:31:91:c5:8c:1c:78:d2:37:a1:92:50:
eb:0b:0f:8e:c8:12:30:88:32:9e:5e:20:a8:3a:61:69:15:0c:
86:4e:9f:4d:28:ea:d9:05:26:6e:a1:69:ff:22:26:0a:c8:d7:
64:70:d2:18:ba:af:76:ef:ef:58:ca:ec:eb:3a:fb:bf:4c:3c:
5c:9c:44:58:78:53:ae:66:8b:99:15:f5:61:d1:67:8e:09:46:
f9:db:a6:5c:83:bb:41:19:1a:09:c0:ab:57:1f:78:4a:95:bf:
45:cc:fd:06:9a:c3:f1:7f:5a:bc:68:b1:61:de:08:90:fd:ee:
e1:91:67:0d:19:e1:25:82:af:45:3c:00:58:f7:b6:d4:da:04:
43:66:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:00 2023 by rpki-client on console-fra.rpki-client.org