Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/u3CrVvuZt3zw_BnVbJv1Pkv9sdE.roa
File: u3CrVvuZt3zw_BnVbJv1Pkv9sdE.roa (raw, json)
Hash identifier: 2P2NgsQneQYwRpGcg1cZqyiy2J8/O90VvzFOXbm/DgU=
Subject key identifier: BB:70:AB:56:FB:99:B7:7C:F0:FC:19:D5:6C:9B:F5:3E:4B:FD:B1:D1
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 0187993C09619A2AF7C915DD71D6136FA1E7
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/u3CrVvuZt3zw_BnVbJv1Pkv9sdE.roa
Signing time: Wed 19 Apr 2023 11:17:41 +0000
ROA not before: Wed 19 Apr 2023 11:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.193.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:3c:09:61:9a:2a:f7:c9:15:dd:71:d6:13:6f:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Apr 19 11:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb70ab56fb99b77cf0fc19d56c9bf53e4bfdb1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:7b:99:6c:05:d3:06:db:42:16:eb:a7:50:
6f:d6:41:4d:d7:57:cb:50:cf:3b:cc:b9:bf:d8:1a:
2b:7a:17:1e:e0:0b:43:31:e6:b7:3d:58:b3:25:6e:
82:a4:a8:4f:1c:c3:25:2a:52:4b:34:26:c9:52:98:
6f:d9:a0:ed:62:62:4f:23:8f:cc:d0:45:cf:b2:ee:
cd:41:f9:d2:3f:fa:64:75:0d:53:33:89:92:6d:79:
c4:4c:f0:80:9f:37:98:f6:1b:fc:d3:8b:27:1a:77:
a4:2e:cd:c0:25:09:52:57:cf:63:84:8c:1a:2a:16:
2a:65:04:04:bf:86:80:0d:51:1b:f0:85:81:76:ad:
0d:1d:c3:86:06:b9:8b:12:45:48:a8:3a:47:ee:31:
5b:1a:a0:f1:6c:c2:50:a4:70:82:d1:f1:24:d4:46:
57:b9:0a:b3:62:e0:59:45:6a:73:e1:8d:59:d6:4a:
02:55:13:89:7d:ed:59:1b:49:e3:de:f6:6c:cf:66:
06:73:b4:75:b1:a5:84:8d:06:5d:92:f8:6f:38:c0:
a9:f2:f2:c0:5a:9f:f0:fe:02:62:0c:1f:8c:a6:fc:
34:a9:2e:08:7a:46:66:3a:bb:f3:33:5b:87:ae:b4:
18:d1:1b:50:22:63:44:14:b1:6c:53:12:fd:d9:c1:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:AB:56:FB:99:B7:7C:F0:FC:19:D5:6C:9B:F5:3E:4B:FD:B1:D1
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/u3CrVvuZt3zw_BnVbJv1Pkv9sdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:2e:e2:6d:e7:43:96:1e:70:21:bb:1b:49:12:fa:a1:3d:03:
86:40:ea:2d:90:49:c2:1a:21:30:ef:0d:d1:ec:86:bd:26:45:
2f:74:40:ae:b2:f0:88:f7:30:96:05:c7:1d:25:c8:57:f7:e4:
2f:e5:ac:fa:54:6d:73:d5:bd:68:2b:12:35:6d:b1:3a:c4:21:
4a:d1:d6:41:ed:3f:cd:13:04:07:60:3f:77:14:be:55:03:c1:
3b:c9:74:c5:81:45:f0:4e:c2:2a:1e:6c:d9:da:db:ba:a7:24:
2a:6f:df:7b:6d:8a:30:75:a3:86:33:ea:fc:7c:37:96:f3:de:
43:47:12:4c:e8:60:ff:d9:c0:8b:52:73:d1:9a:b3:f3:95:54:
8f:46:e9:f9:0b:2b:4f:38:4b:d9:e5:92:9e:98:29:ca:10:a5:
7a:a3:38:dc:8d:70:a8:09:0c:83:0b:f0:16:42:e6:ee:c1:fd:
d4:58:2d:3f:9b:e8:41:a9:fd:d5:66:a9:d0:b4:59:8a:33:7d:
ff:72:94:5c:08:59:d0:db:63:4b:16:71:de:6a:a6:a3:36:2d:
92:92:a0:71:fa:a0:81:cb:e1:c3:3f:ab:aa:0a:a1:fb:ca:11:
e0:a0:06:02:f5:c2:4a:07:7b:0e:73:42:05:f9:57:db:91:ef:
b2:80:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:36 2023 by rpki-client on console-ams.rpki-client.org