Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/bdnVRwxdCGC1VuTRyNVAH4Ei0No.roa
File: bdnVRwxdCGC1VuTRyNVAH4Ei0No.roa (raw, json)
Hash identifier: Dv38dx7gJWMdURHXf9zmvo3x8XWTV+aptqOtscRqbSg=
Subject key identifier: 6D:D9:D5:47:0C:5D:08:60:B5:56:E4:D1:C8:D5:40:1F:81:22:D0:DA
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 01856D9405126D6F465B1015B15652ABA399
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/bdnVRwxdCGC1VuTRyNVAH4Ei0No.roa
Signing time: Sun 01 Jan 2023 13:44:55 +0000
ROA not before: Sun 01 Jan 2023 13:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209031
IP address blocks: 194.113.62.0/23 maxlen: 24
194.113.68.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:05:12:6d:6f:46:5b:10:15:b1:56:52:ab:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: Jan 1 13:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dd9d5470c5d0860b556e4d1c8d5401f8122d0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:cc:3c:a1:cb:c2:1b:f0:af:9b:42:73:b6:
28:a5:14:1e:ad:d8:79:d2:95:e0:a9:d9:f3:9d:92:
bd:a9:ee:d3:cd:d7:6c:68:de:a0:36:c3:5d:2f:2b:
58:23:64:1c:2d:4a:6d:a0:73:7f:fc:82:c2:b2:0f:
6b:e7:5f:1d:77:81:8b:3d:53:19:f6:2e:c3:2c:86:
d0:77:7c:ff:a3:e5:03:16:97:2e:97:0c:f4:d2:fb:
21:9b:6f:dd:fa:81:21:49:7f:04:b6:d1:70:2a:6d:
1c:d3:2d:9b:08:64:72:d3:55:a3:ac:1a:47:a3:ff:
8e:2b:53:de:cb:b6:9e:44:32:89:39:be:93:49:64:
b9:5e:66:ee:aa:fe:f4:78:bc:e8:8f:96:fd:b1:c2:
b1:db:f8:9e:54:54:fa:18:e8:c0:52:0d:71:38:19:
08:3a:5f:cb:99:30:a2:2c:9f:4b:82:46:89:2f:0b:
c7:88:8d:ba:aa:e1:47:90:65:ee:7a:48:48:53:73:
ee:c9:02:a4:3e:f7:b2:ec:20:8a:fd:92:61:0a:61:
0a:ff:32:1a:82:96:7b:56:c9:6e:5d:65:33:e2:6c:
0e:5d:a7:b8:a0:4a:48:2d:ae:53:45:f5:37:b9:e4:
bc:e1:6c:aa:c0:51:1b:c2:54:72:7e:c1:c8:7e:71:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:D5:47:0C:5D:08:60:B5:56:E4:D1:C8:D5:40:1F:81:22:D0:DA
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/bdnVRwxdCGC1VuTRyNVAH4Ei0No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.62.0/23
194.113.68.0/23
Signature Algorithm: sha256WithRSAEncryption
88:ba:c2:4f:c6:3f:1a:76:8b:49:86:2c:76:5b:9d:6a:b0:1c:
38:fc:e6:c4:b4:13:8a:e7:ad:00:b2:61:54:a8:f8:de:35:a8:
dc:c5:8b:2b:f1:63:7f:a5:1c:7a:49:20:68:c0:58:3c:99:a8:
60:34:5f:fc:2a:5e:4c:c3:94:75:bc:13:07:1b:2a:88:e9:25:
64:59:55:77:54:ad:2a:cf:9c:d5:e5:60:03:68:7a:4d:18:95:
e8:c1:5d:cf:4e:a6:a8:72:51:7f:f8:5f:6b:b3:cc:fb:15:e0:
13:19:57:48:47:b0:b6:ca:e8:44:0d:86:0f:01:7a:92:f2:67:
99:d0:5b:b2:04:16:b2:16:00:55:97:e8:1f:0e:2c:f5:20:70:
93:5a:32:ee:bf:97:90:e1:93:96:5f:aa:8b:7e:8f:5a:26:f8:
ed:ba:25:0b:2b:e3:68:38:c1:64:f9:c1:97:86:f9:7d:43:68:
68:46:a1:0d:33:1d:0c:57:d2:0a:25:17:fb:4d:bb:49:7a:84:
84:1d:1b:da:1e:67:0c:2d:ff:98:d8:27:d1:75:ff:6b:e7:90:
d5:f2:0f:a0:0f:af:7e:7d:b0:89:7a:44:45:85:60:f1:4a:0b:
f3:71:0a:ab:f4:bb:8d:db:2f:b6:d8:a6:ba:2c:76:81:d7:bb:
cb:a1:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:42 2024 by rpki-client on console-ams.rpki-client.org