Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/bGjlemydi2kc0P6Ue7JGIJGt_-I.roa
File: bGjlemydi2kc0P6Ue7JGIJGt_-I.roa (raw, json)
Hash identifier: c7GhkyGYkZb2yL9f+7YJCrkI7+/97LqPWsyRUXOr8c4=
Subject key identifier: 6C:68:E5:7A:6C:9D:8B:69:1C:D0:FE:94:7B:B2:46:20:91:AD:FF:E2
Certificate issuer: /CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Certificate serial: 01856FC24CEF43D1957B9455604D93A19B7D
Authority key identifier: D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/bGjlemydi2kc0P6Ue7JGIJGt_-I.roa
Signing time: Sun 01 Jan 2023 23:54:42 +0000
ROA not before: Sun 01 Jan 2023 23:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39566
IP address blocks: 193.93.88.0/22 maxlen: 22
91.211.220.0/22 maxlen: 22
2001:678:63c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:4c:ef:43:d1:95:7b:94:55:60:4d:93:a1:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f19f05ccf2221398469c0be8ddc04ce14e135a
Validity
Not Before: Jan 1 23:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c68e57a6c9d8b691cd0fe947bb2462091adffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:7c:e6:34:81:15:08:b4:90:63:8d:e3:ef:
53:6a:70:2e:55:b2:b6:ae:db:75:2f:82:aa:c0:76:
b9:6a:66:95:a8:87:b9:82:b5:05:e5:08:59:4c:43:
4e:ea:3a:28:9d:e7:7f:16:4d:50:04:16:3d:a9:fc:
83:aa:7a:26:3e:37:4b:e4:9f:9f:a6:59:fb:a5:14:
c8:20:f4:d8:67:4e:f8:ed:5a:bc:d1:2c:b1:45:53:
76:cf:eb:4e:db:ab:ad:88:14:1a:83:b7:ac:a7:e8:
db:bd:5b:70:38:ed:bd:3e:ac:3e:f1:4c:8b:04:9c:
1b:b3:a9:ad:06:eb:7b:33:5e:50:c8:2d:4d:db:ec:
ea:80:88:7c:d0:7d:bd:96:60:ad:37:4f:ca:65:b2:
4a:b5:ed:b0:79:26:8b:6e:b6:71:25:5a:bc:a9:8b:
d3:1c:44:9c:78:5f:a8:2f:07:91:71:98:3c:db:6e:
9a:75:bf:4e:a4:6f:50:0e:32:b1:98:2a:1d:48:2b:
17:18:a2:4a:35:00:ae:3a:d0:16:1d:22:6f:4f:49:
80:f9:71:d9:8a:9a:0c:8c:21:57:d8:cc:af:cf:9c:
5f:d9:3e:cc:28:b0:28:c5:80:1b:83:bd:fd:0d:e5:
4f:43:9e:de:4d:1b:4d:3f:51:bb:3f:4c:a6:92:0f:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:E5:7A:6C:9D:8B:69:1C:D0:FE:94:7B:B2:46:20:91:AD:FF:E2
X509v3 Authority Key Identifier:
keyid:D9:F1:9F:05:CC:F2:22:13:98:46:9C:0B:E8:DD:C0:4C:E1:4E:13:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fGfBczyIhOYRpwL6N3ATOFOE1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/bGjlemydi2kc0P6Ue7JGIJGt_-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6e3246-fba6-4e1d-8089-4ff33338361e/1/2fGfBczyIhOYRpwL6N3ATOFOE1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.220.0/22
193.93.88.0/22
IPv6:
2001:678:63c::/48
Signature Algorithm: sha256WithRSAEncryption
ad:bc:07:57:27:ba:f2:da:4e:7f:ae:75:5f:3f:82:c1:73:dc:
4d:d8:47:bf:72:a2:27:a5:1b:68:20:fc:97:b0:62:7e:6b:a1:
97:0b:f4:3f:e8:15:f8:9f:34:9d:5c:e2:f9:25:7a:3a:dd:26:
74:31:ce:80:56:53:c0:e4:a0:fd:08:9a:9e:b3:c3:89:6b:c9:
db:51:ec:e2:2e:95:66:c0:a3:49:bf:bf:ac:8d:fc:6c:01:8b:
b7:95:26:7a:84:b3:5e:db:52:ba:6e:48:de:fa:fd:e5:97:53:
0d:0d:65:3f:72:c9:71:50:d9:05:ae:08:7e:eb:ac:86:95:b1:
f2:b5:0b:d4:ed:9e:42:5c:27:3b:fb:79:27:54:76:48:af:75:
f3:ef:85:fc:1b:3e:fb:ca:5d:e5:2a:57:f9:6a:ba:bb:b4:62:
4a:56:e8:c2:de:0e:49:60:2d:19:ef:ad:9f:6e:46:43:2a:86:
33:d1:84:09:c3:f0:0f:66:04:be:79:9b:99:9c:30:d2:1f:44:
fc:61:ed:4a:d6:76:2c:51:fd:f3:0b:cc:3d:c0:b4:c9:03:6b:
55:8d:b2:30:95:45:1b:b5:31:ea:ac:3d:7c:4d:35:73:af:6a:
66:56:58:bc:30:06:b8:cc:5e:a1:dd:e0:e6:7b:23:ab:c3:1d:
5e:25:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:12 2024 by rpki-client on console-ams.rpki-client.org