Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/beqP9el-J9WZA_dMNhZooeTz6Yw.roa
File: beqP9el-J9WZA_dMNhZooeTz6Yw.roa (raw, json)
Hash identifier: NYYVC1tFEb070/2eL2L0leX0DmmQp39JzOBsW0yxBvE=
Subject key identifier: 6D:EA:8F:F5:E9:7E:27:D5:99:03:F7:4C:36:16:68:A1:E4:F3:E9:8C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018790572418B2A8997EA6FFDED7E1ED9C41
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/beqP9el-J9WZA_dMNhZooeTz6Yw.roa
Signing time: Mon 17 Apr 2023 17:50:42 +0000
ROA not before: Mon 17 Apr 2023 17:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212897
IP address blocks: 188.255.202.0/24 maxlen: 24
79.175.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:57:24:18:b2:a8:99:7e:a6:ff:de:d7:e1:ed:9c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 17 17:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dea8ff5e97e27d59903f74c361668a1e4f3e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:5c:4d:4c:f6:f7:4d:94:23:c0:1f:18:2a:
c7:08:e0:e4:e4:42:93:38:a2:fb:cb:16:f6:53:3d:
3a:9b:94:67:df:e2:50:1f:a7:a3:5c:1d:b6:c8:a4:
82:91:05:5c:b7:cb:24:82:5c:ad:a9:a6:42:91:73:
37:b4:9b:06:79:7a:20:d6:f0:48:a9:d3:46:20:13:
10:da:36:e6:53:57:6f:54:9c:96:fa:29:39:3e:45:
06:23:65:0b:df:85:16:d3:7c:d2:9b:3b:b2:91:9a:
99:c6:d4:b3:dd:07:e5:3c:61:1f:74:b4:0e:6c:d9:
74:33:91:32:8b:c7:7d:36:25:de:0c:09:ae:94:c0:
9a:ae:09:04:78:58:b6:cd:c4:85:29:0e:69:51:5b:
90:01:04:0a:b8:5d:ae:8e:48:0f:26:eb:71:fc:f6:
9f:d3:24:18:1d:a0:9c:9b:a8:19:86:19:50:72:51:
0a:d4:a1:b7:ff:78:b0:b1:91:9e:83:32:c7:b5:e8:
72:b6:66:36:62:16:fb:1c:0c:c6:4d:cc:54:19:c8:
24:cb:c2:93:54:28:91:71:44:39:bb:71:ac:c4:1e:
48:81:b7:41:f6:b0:20:bc:aa:20:4e:53:0f:b8:22:
0a:24:cc:f0:4d:9a:6c:6f:3b:a4:2a:90:bb:3a:71:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:8F:F5:E9:7E:27:D5:99:03:F7:4C:36:16:68:A1:E4:F3:E9:8C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/beqP9el-J9WZA_dMNhZooeTz6Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.71.0/24
188.255.202.0/24
Signature Algorithm: sha256WithRSAEncryption
84:95:05:f3:ff:85:24:29:14:d0:b3:0b:3e:98:9c:c5:b1:a6:
42:0b:eb:ef:d8:9c:80:41:07:10:63:c3:47:3d:96:3a:c0:93:
eb:62:26:d2:7c:a3:78:25:d6:c2:4f:79:4f:94:dc:15:2f:3b:
9b:5a:5b:4f:23:0a:a5:0e:e2:98:a7:58:06:97:c3:73:28:b0:
e9:09:39:0f:97:3d:b3:70:91:a8:50:75:9b:33:0e:fb:97:f7:
14:04:a7:63:7c:36:2b:77:2e:cf:35:d6:35:43:5f:23:67:1e:
d5:39:cd:35:65:c3:61:d1:f4:f8:05:e1:47:9a:2c:ca:69:4d:
0f:9a:da:96:3c:08:72:06:82:76:db:11:ff:2c:d4:b2:3a:ba:
2b:fb:92:db:f4:9c:f9:15:2b:93:25:86:7e:77:f9:d6:35:08:
06:d2:17:1d:f7:14:38:ed:19:d4:e6:ef:62:61:ce:c7:d4:35:
7b:e0:60:ee:a9:e6:b4:26:ff:6b:0d:bc:0b:4e:da:e6:16:f3:
aa:f0:99:51:c8:e7:79:7d:7b:eb:37:53:9f:c8:9b:6d:52:fd:
b3:33:f0:43:5c:27:1c:02:bf:2d:81:b7:18:3f:8f:98:95:97:
d7:fa:7c:48:83:9f:b5:31:00:d0:c9:ad:18:dc:87:f1:57:a0:
b5:51:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:57 2024 by rpki-client on console-ams.rpki-client.org