Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/BImFubbOVTvdmeAb3S7d230mTEA.roa
File: BImFubbOVTvdmeAb3S7d230mTEA.roa (raw, json)
Hash identifier: FbBMBUrKO0uJ+/3M85X4x0h7a57AV3ekES7nH9E3qqM=
Subject key identifier: 04:89:85:B9:B6:CE:55:3B:DD:99:E0:1B:DD:2E:DD:DB:7D:26:4C:40
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01856BAEC1C6BB49F1FA36436F186D7ECEE2
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/BImFubbOVTvdmeAb3S7d230mTEA.roa
Signing time: Sun 01 Jan 2023 04:54:52 +0000
ROA not before: Sun 01 Jan 2023 04:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60688
IP address blocks: 185.27.196.0/23 maxlen: 23
185.27.198.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c1:c6:bb:49:f1:fa:36:43:6f:18:6d:7e:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jan 1 04:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=048985b9b6ce553bdd99e01bdd2edddb7d264c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:bb:e6:29:35:57:63:2e:c9:07:5e:a0:01:
ba:31:1d:c7:d9:dd:2e:a7:9c:72:4d:b0:08:1f:ea:
30:73:b1:75:11:4a:fb:b6:69:bf:d9:0c:f1:0f:27:
36:0b:87:1d:64:1f:79:41:df:55:5e:c5:03:db:69:
5a:d0:7c:f8:3c:83:b8:37:9c:18:fe:b6:52:dd:64:
51:49:11:a6:db:c1:e2:b8:58:c3:11:2a:31:37:3a:
2e:2e:2c:46:6b:78:5c:46:5d:d9:29:64:c1:f3:6e:
bc:43:2e:75:cc:1f:2e:cc:4a:9a:24:d7:b5:8a:0a:
20:69:37:ec:3c:d5:80:19:4e:b3:fd:3b:e1:38:7a:
81:dc:33:30:11:48:c3:1f:b4:df:8d:fa:af:ee:b7:
01:3a:cc:f4:20:85:ce:08:dd:cb:a3:f1:50:b4:6b:
e6:06:78:0c:a1:f3:4b:c1:5f:df:09:21:bc:51:97:
92:f2:69:85:ec:e9:24:f0:86:82:03:8c:d4:a8:4f:
8c:b9:2f:0a:e7:b5:64:b7:a1:e5:ff:84:30:03:e3:
59:9f:ab:b5:5b:71:e4:4c:42:a1:9f:71:bc:26:c6:
65:5e:ae:95:0e:40:b3:f5:29:24:81:4c:ab:ab:a2:
88:2b:d4:a2:7d:3c:ff:be:34:76:61:0f:be:1e:91:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:85:B9:B6:CE:55:3B:DD:99:E0:1B:DD:2E:DD:DB:7D:26:4C:40
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/BImFubbOVTvdmeAb3S7d230mTEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:09:38:26:a6:45:68:8c:c7:5c:3a:e6:02:9e:9d:f5:0e:81:
18:93:ad:a7:e5:0b:b7:83:72:de:53:46:8d:af:02:b1:3a:6e:
24:71:af:93:13:70:b2:c2:85:84:b0:b4:d4:46:0b:0e:a5:4a:
ba:0d:43:09:ba:af:83:be:b1:62:e7:97:b6:19:61:51:d8:8e:
3c:05:9b:64:18:e1:43:4b:b9:e5:b7:0e:cd:89:0a:61:7e:31:
26:c1:df:8a:d6:eb:e1:11:60:09:64:2d:28:66:e9:7d:50:8b:
a3:9d:54:74:78:8c:0f:70:70:77:91:82:4c:ea:36:6e:72:1d:
3a:7a:28:7c:97:f6:88:3d:64:fc:61:5b:0d:0d:1d:ee:71:80:
e9:5f:7c:2a:1b:b0:b5:5d:46:14:78:37:f9:5d:11:2b:a6:c2:
d5:84:fb:63:0e:63:bb:49:e7:18:71:61:5d:a6:74:5f:f8:29:
9a:4f:65:52:09:d7:31:fe:45:59:ef:c6:97:a7:ce:2f:6e:e7:
71:27:10:39:dc:2a:8f:ed:0a:08:d5:eb:8e:0f:9b:2e:5b:9d:
3c:62:64:e4:bb:16:a4:39:bc:5b:df:d6:1a:ae:70:89:2b:89:
c2:9f:57:c2:37:5f:92:f4:c4:44:71:73:56:8b:d3:66:24:0d:
6e:14:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:33 2024 by rpki-client on console-ams.rpki-client.org