Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/bLWXomgsncSdT_lpyqWvb2SdLQQ.roa
File: bLWXomgsncSdT_lpyqWvb2SdLQQ.roa (raw, json)
Hash identifier: R96ZA462D7Gy2cSlqYdmzk5ifKrK9p9jRMUfvHGksGA=
Subject key identifier: 6C:B5:97:A2:68:2C:9D:C4:9D:4F:F9:69:CA:A5:AF:6F:64:9D:2D:04
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 0187907E7D1EE0CD754A026C2C379F8E21A3
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/bLWXomgsncSdT_lpyqWvb2SdLQQ.roa
Signing time: Mon 17 Apr 2023 18:33:41 +0000
ROA not before: Mon 17 Apr 2023 18:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15774
IP address blocks: 188.244.128.0/17 maxlen: 32
188.168.0.0/16 maxlen: 32
2a02:618::/32 maxlen: 96
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:7e:7d:1e:e0:cd:75:4a:02:6c:2c:37:9f:8e:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Apr 17 18:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb597a2682c9dc49d4ff969caa5af6f649d2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:8f:c3:99:a4:52:ff:de:09:5f:3d:99:57:
53:1b:3e:3d:dd:21:3d:7e:76:c2:0c:4c:82:31:65:
b1:4d:13:07:5f:10:3d:e9:b4:35:73:dc:55:ad:25:
e2:43:79:97:31:7d:95:83:07:70:97:c1:71:bb:f2:
6c:69:9f:0e:00:c9:67:b2:c7:8f:8c:4f:53:5d:6f:
e7:14:e2:6c:db:fb:08:e3:f6:a7:07:92:c9:d8:2f:
d7:69:d2:6b:3d:33:94:64:02:5b:5e:0f:c4:43:fa:
90:af:0c:d4:76:17:86:9a:ac:dd:29:a9:78:c5:5c:
f8:57:3b:92:99:33:80:0e:fb:aa:10:62:bb:3f:a5:
4b:7f:f0:88:30:c6:19:49:9e:3f:b8:2f:8a:93:d5:
7e:c7:d6:0d:c8:6f:1f:f7:53:a0:99:9c:b0:fd:de:
d6:0e:81:9c:9b:2a:ee:2d:10:06:6c:b2:ad:e2:4d:
01:19:09:21:fa:9c:63:61:85:81:e1:0b:19:ca:23:
5d:6b:79:fa:e8:f7:fd:bd:2e:63:39:c7:0a:9a:05:
b4:61:54:4a:47:fa:83:d7:32:58:32:af:47:31:85:
cf:e1:e7:d8:e4:38:94:69:56:b0:dd:cc:9e:7a:5a:
9c:ec:0a:da:7c:79:75:2c:ef:75:8f:dc:c2:70:30:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B5:97:A2:68:2C:9D:C4:9D:4F:F9:69:CA:A5:AF:6F:64:9D:2D:04
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/bLWXomgsncSdT_lpyqWvb2SdLQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.168.0.0/16
188.244.128.0/17
IPv6:
2a02:618::/32
Signature Algorithm: sha256WithRSAEncryption
7e:ea:96:8d:73:bf:7e:6c:a5:8e:d7:0d:e7:cf:c5:8c:5a:56:
15:71:b7:94:1b:af:45:32:de:fa:51:e4:ef:0f:bf:b5:9a:80:
5b:f6:91:be:82:76:07:a3:90:a2:8f:b3:0d:08:db:d8:c8:a1:
63:bb:10:5d:cc:49:f1:ad:30:44:e7:43:3d:f6:01:3e:29:f6:
cc:18:6f:e7:96:4c:ad:1d:fd:d7:b5:dc:8b:67:4c:42:46:87:
b6:9a:0b:52:d0:7b:47:38:7a:7e:b7:e7:7c:6c:4f:24:b6:7d:
61:16:77:07:55:9d:ee:ee:f4:a2:d9:59:a7:a9:0c:dd:b2:11:
f9:a1:14:7b:45:ff:bc:ba:d8:40:fe:97:8c:3f:ac:b8:23:e5:
44:e2:31:e3:ca:9c:43:8e:bc:a0:89:ed:26:e6:66:1a:24:d8:
98:2c:fb:34:d8:2c:95:3d:66:a8:e0:41:a5:3e:1f:24:4a:2b:
68:8d:a2:ce:84:50:2d:b0:0d:49:55:35:e4:0d:ae:89:20:87:
fd:4c:78:a2:ae:c7:f1:c9:b1:42:e2:88:cb:3c:25:b0:cf:62:
a0:90:43:0b:0b:b6:14:d1:35:d8:9b:00:90:1c:3e:91:67:0e:
a8:19:48:69:82:6b:c0:a3:45:05:3a:77:75:8f:16:c1:28:c6:
c4:ee:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 13:05:03 2023 by rpki-client on console-ams.rpki-client.org