Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/vW_tyevmKHQ2N5ecNTAQhKXN08g.roa
File: vW_tyevmKHQ2N5ecNTAQhKXN08g.roa (raw, json)
Hash identifier: nojcu7EXL/JmQrWVwamrLKj0/f1p0XX00AvURvVrZ3g=
Subject key identifier: BD:6F:ED:C9:EB:E6:28:74:36:37:97:9C:35:30:10:84:A5:CD:D3:C8
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 0185701509007C5B9E5A8CBE6A1801E7D936
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/vW_tyevmKHQ2N5ecNTAQhKXN08g.roa
Signing time: Mon 02 Jan 2023 01:25:04 +0000
ROA not before: Mon 02 Jan 2023 01:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48362
IP address blocks: 185.101.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:09:00:7c:5b:9e:5a:8c:be:6a:18:01:e7:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jan 2 01:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd6fedc9ebe628743637979c35301084a5cdd3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:78:aa:90:4e:5d:ae:0d:18:4e:b7:2f:a2:
85:2a:76:6f:c5:4e:88:0d:2c:98:d6:5b:f6:d8:bf:
40:e3:2c:96:c8:3b:ea:05:f4:24:77:ba:47:d0:54:
51:60:7b:5d:cc:2c:33:8a:43:b9:d2:13:42:ea:90:
d5:1a:4e:9a:54:9e:08:24:0f:40:f6:0d:d9:5d:b7:
0e:bb:f8:65:8e:65:d7:47:03:48:4a:b1:6d:25:ad:
20:72:77:fb:a9:17:e8:0b:03:30:a7:86:b0:79:0e:
c7:af:0f:88:f5:76:70:62:86:61:5f:4f:0c:13:3e:
db:f9:00:ba:f8:62:07:09:02:9d:7e:e3:50:a4:75:
31:d4:8a:59:3e:b6:91:d2:b3:4b:da:00:db:3b:02:
72:93:5b:4b:a1:6e:06:33:89:ac:48:1d:bc:22:5a:
09:8d:7b:b3:58:88:b9:d4:09:77:db:43:ce:fc:1f:
48:32:73:13:30:02:4b:80:be:7c:1c:ab:32:a3:3f:
7c:e0:ac:58:f7:3e:67:de:37:1b:16:56:50:e5:fc:
93:e4:70:7b:bb:c0:5b:bd:c0:74:3f:3c:db:3b:a5:
04:97:ac:e4:38:e9:5d:5b:95:e0:9f:0d:0e:d1:6f:
b9:82:d8:95:f4:b2:84:14:b8:09:07:fd:fd:34:64:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:ED:C9:EB:E6:28:74:36:37:97:9C:35:30:10:84:A5:CD:D3:C8
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/vW_tyevmKHQ2N5ecNTAQhKXN08g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:b0:d5:ff:94:88:28:bb:a8:5e:25:ca:fb:9b:d4:3a:43:8f:
38:c4:e7:96:73:d4:d4:32:bf:0d:8a:5e:10:72:ac:c8:93:4c:
48:e8:dc:31:ec:31:d6:86:19:b6:c2:9b:37:60:3b:76:ca:10:
1d:aa:23:27:2f:28:84:e9:32:db:06:a3:f9:53:c9:64:44:8a:
2c:07:5e:2b:de:c9:73:4e:21:6b:35:2c:d0:e3:51:40:28:95:
b5:08:d9:54:15:08:34:bd:8d:5c:61:e9:bb:50:19:73:2c:9e:
26:78:00:af:89:e9:ad:ce:a4:26:f0:72:ad:f8:29:8e:82:5f:
03:39:6a:0d:4c:5c:70:bf:a0:8e:6f:11:86:08:c5:42:e7:da:
5c:94:df:28:c9:33:8b:0c:34:2c:99:95:93:72:a4:60:b6:b3:
4e:17:a9:55:97:26:9b:7a:e8:b0:d9:a3:6d:51:e5:0e:98:4a:
d3:42:f5:6d:18:c8:c5:6b:99:cc:f9:ce:9d:5d:d1:61:4e:2d:
a2:33:67:d3:de:f1:bd:54:36:ed:b3:7d:c4:5a:51:7a:f7:d1:
b7:ef:65:88:84:34:d9:3e:8a:f3:f4:26:45:57:60:5e:ca:07:
99:bf:b8:b3:6a:57:b0:45:27:70:c8:29:3a:c5:47:8e:3d:dd:
70:b8:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:40 2024 by rpki-client on console-ams.rpki-client.org