Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/38BXkrhquBpaLviDNbiSoqFjn5k.roa
File: 38BXkrhquBpaLviDNbiSoqFjn5k.roa (raw, json)
Hash identifier: HLAf1ibP2MJLtSwsRy4ga7zyLnG7CQJS0EdWqZYHSr8=
Subject key identifier: DF:C0:57:92:B8:6A:B8:1A:5A:2E:F8:83:35:B8:92:A2:A1:63:9F:99
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0F560B8F59F9B0C047CDA5A348718
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/38BXkrhquBpaLviDNbiSoqFjn5k.roa
Signing time: Sun 01 Jan 2023 05:14:45 +0000
ROA not before: Sun 01 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206766
IP address blocks: 91.194.10.0/24 maxlen: 24
79.143.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f5:60:b8:f5:9f:9b:0c:04:7c:da:5a:34:87:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfc05792b86ab81a5a2ef88335b892a2a1639f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:5d:92:d6:12:96:9b:b6:43:0b:dd:98:74:
5c:b1:44:d6:7f:42:b1:6d:03:26:b7:42:fa:46:b7:
fc:47:f2:d9:8c:a0:3c:09:cc:07:e9:e9:91:e2:1f:
e7:56:31:1b:b4:3f:2b:ca:34:22:79:62:38:7c:cf:
df:fd:6d:d6:67:e2:dd:97:22:d3:b9:80:bc:0d:42:
82:f6:7f:2a:07:19:53:8d:47:3c:f6:ca:37:03:83:
ac:44:ee:ce:c2:e9:99:0a:25:ad:7c:80:9c:d0:fb:
30:8d:43:ee:78:2a:96:dd:ae:c2:ee:fb:b7:10:e4:
cd:10:b2:28:23:75:c7:77:79:20:3a:25:ce:39:01:
93:3b:ed:49:ea:bd:07:82:c9:97:6c:11:68:e8:83:
ee:08:2f:78:2a:bc:d2:a9:62:a1:27:21:81:88:ca:
09:37:54:d4:2b:d3:92:43:7c:f1:d1:e2:d8:6b:43:
b5:86:8c:1d:a9:3e:fc:4f:b0:43:65:6d:78:2e:ac:
38:e0:b1:ae:3f:24:c4:b6:c7:38:67:02:49:ae:eb:
07:04:54:8d:66:b3:11:10:7d:43:72:0b:0f:0a:81:
ad:75:6e:cd:86:f3:25:27:80:0a:31:67:20:79:90:
21:e2:03:d4:98:ae:a3:df:85:8d:cd:a6:bf:f9:c9:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:57:92:B8:6A:B8:1A:5A:2E:F8:83:35:B8:92:A2:A1:63:9F:99
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/38BXkrhquBpaLviDNbiSoqFjn5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.19.0/24
91.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e2:2e:a4:1d:02:fd:5c:62:57:db:54:f7:e7:09:12:1a:cf:
06:01:72:4c:be:60:bd:c6:f9:96:ba:9a:a9:ab:a7:f4:21:b0:
4a:89:57:8f:06:d1:ea:c6:40:88:5e:69:f3:cc:fb:5c:9e:54:
52:71:6f:04:bc:73:28:6b:03:17:ee:59:ac:50:92:6b:b2:9b:
85:d1:05:f6:fd:8a:23:37:fd:e6:9b:06:01:50:4c:52:3e:99:
fc:44:57:bf:1e:6b:40:3a:32:28:85:7f:99:8b:ad:e4:dc:75:
23:b2:73:1f:ff:e8:76:d2:90:e8:5a:e0:d0:f0:1d:90:86:46:
50:94:86:48:58:a3:76:3d:11:46:a1:e6:08:ae:ee:d6:51:af:
0d:bb:e7:cd:ff:0d:2f:e6:51:36:e5:c0:37:61:84:5c:f2:f8:
6a:ff:f5:5a:eb:1c:5d:3e:fc:2d:15:39:3a:c0:fe:5f:d0:d4:
87:9d:63:62:38:4f:fa:9d:0a:64:c0:5e:d8:6c:7b:32:9d:b1:
32:ec:ed:71:9a:ef:8c:7e:1b:c9:67:15:96:2e:f5:9f:a9:31:
88:86:91:65:0d:1a:d7:f0:a2:ca:77:7d:a4:2c:ca:61:67:6f:
38:b4:d9:04:cb:25:39:bd:1a:94:78:5f:2d:16:9b:d9:10:25:
27:b0:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org