Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vDhMOdJs5uJ5vnq7Ju0lbESorn8.roa
File: vDhMOdJs5uJ5vnq7Ju0lbESorn8.roa (raw, json)
Hash identifier: wbfkoB52QRwq1O/s8pqkZt6hKx7wr2jrR6iA9p+JWhE=
Subject key identifier: BC:38:4C:39:D2:6C:E6:E2:79:BE:7A:BB:26:ED:25:6C:44:A8:AE:7F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0186268054AFF182C2F847FCEE3E76076442
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vDhMOdJs5uJ5vnq7Ju0lbESorn8.roa
Signing time: Mon 06 Feb 2023 11:33:09 +0000
ROA not before: Mon 06 Feb 2023 11:33:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 64.137.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:80:54:af:f1:82:c2:f8:47:fc:ee:3e:76:07:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 6 11:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc384c39d26ce6e279be7abb26ed256c44a8ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:92:5e:b7:51:c2:af:dc:a7:9f:28:38:6c:
fd:4c:b9:77:c7:52:ec:fe:15:a6:1a:e4:5b:32:ac:
98:43:6b:58:12:ea:0b:fd:57:14:be:df:a7:62:73:
4f:4f:ef:53:d6:7c:90:12:c3:44:1b:78:a6:6b:99:
81:c9:02:55:65:1f:51:5c:96:a5:3b:26:b8:4f:bb:
ca:0d:c3:9f:3f:34:bc:3e:fe:c6:50:82:d5:01:b9:
fd:4b:fe:5e:e6:28:c7:cb:e7:0e:9c:d7:2c:e2:c8:
42:ef:d8:7c:ec:b5:5b:de:05:42:95:60:7e:cc:0e:
67:37:b8:fa:cf:5b:62:48:a8:62:8f:c0:20:06:b6:
c7:8c:eb:97:e3:38:12:d4:f0:ab:a8:ee:c5:fc:bd:
63:3a:6c:b1:18:8a:57:58:d6:22:ee:4c:58:a3:14:
3f:6c:b8:79:9e:f3:a5:c4:9d:d9:5f:bb:16:65:07:
33:86:95:f6:d8:78:8d:3e:31:11:f5:a0:d5:62:95:
f9:84:a6:a6:d5:8d:3b:32:f7:97:61:a6:2e:35:c6:
66:6b:75:42:21:11:95:bb:4a:35:77:59:5a:08:33:
13:98:87:1e:a2:5e:12:06:b7:4a:3d:5e:03:f4:dc:
4e:ae:c8:18:f9:c2:0c:e5:09:ac:63:63:c3:1a:64:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:4C:39:D2:6C:E6:E2:79:BE:7A:BB:26:ED:25:6C:44:A8:AE:7F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vDhMOdJs5uJ5vnq7Ju0lbESorn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.32.0/24
Signature Algorithm: sha256WithRSAEncryption
06:61:00:07:28:ef:83:f5:c4:27:a6:d5:27:f5:7e:26:cb:f3:
b7:19:f5:c3:61:86:63:a1:55:3a:31:ae:cf:1d:d4:d4:bc:1e:
1f:a7:e3:3e:5b:ca:49:ab:cc:55:2c:95:06:f9:19:e7:bf:27:
8f:20:b4:ae:02:d7:48:05:cb:70:f5:7f:7e:4c:d9:c5:31:3a:
3f:85:d9:03:52:c3:ae:68:eb:b8:b0:09:45:61:1c:71:c1:5a:
c2:5a:f2:08:f8:17:04:88:0a:80:82:6c:2b:e7:f0:3a:61:7f:
66:8f:41:ad:ba:0e:57:49:f7:bc:2c:8f:16:cc:f6:c6:9d:69:
69:a9:47:c8:36:61:b8:f0:4c:fd:64:c2:82:fb:3b:4f:59:ff:
c4:d6:4a:25:43:3d:62:e5:ed:b5:d3:46:70:07:0f:14:b7:a7:
94:13:b0:31:b9:b4:ba:2e:56:ae:74:87:4a:b6:bf:80:e7:d2:
5d:59:23:5e:61:e4:8b:eb:ee:71:0c:c1:35:05:f0:2d:19:7a:
c8:7c:15:85:85:4a:8d:14:53:af:6e:ad:2e:92:4b:10:a0:26:
64:70:64:bb:86:39:2f:fc:2e:7d:84:c3:a7:11:25:29:4f:73:
06:c0:a1:ba:c0:42:45:37:8c:0a:aa:38:9d:84:19:e3:15:78:
17:3a:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org