Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bnh0VN9bj8_fx_ioWZyNQWn_zWA.roa
File: Bnh0VN9bj8_fx_ioWZyNQWn_zWA.roa (raw, json)
Hash identifier: Jvt4Q0f/dcshDEqQCHHWW/VCOoo6FzTcgMrtfsifgX8=
Subject key identifier: 06:78:74:54:DF:5B:8F:CF:DF:C7:F8:A8:59:9C:8D:41:69:FF:CD:60
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018998ED79F0EABF2D2814B0E6C97E0DE2DD
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bnh0VN9bj8_fx_ioWZyNQWn_zWA.roa
Signing time: Thu 27 Jul 2023 19:57:27 +0000
ROA not before: Thu 27 Jul 2023 19:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:ed:79:f0:ea:bf:2d:28:14:b0:e6:c9:7e:0d:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jul 27 19:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06787454df5b8fcfdfc7f8a8599c8d4169ffcd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:d0:c4:d0:7b:2a:5c:8b:3b:35:52:fc:5b:
17:65:32:2b:d5:e1:9a:ff:b6:5d:e4:d9:52:90:b0:
09:c1:19:27:7d:10:d1:81:d2:1b:2a:a1:af:35:97:
39:06:55:b8:e0:e1:52:09:ae:42:67:bc:c3:eb:17:
a8:e7:0e:ce:45:aa:4a:7a:ae:5c:90:ba:2d:8e:43:
29:df:47:8f:cf:0c:c6:c3:74:9b:1d:a0:50:37:b2:
9a:05:bb:fb:14:5a:ac:1c:d7:88:34:2e:05:e5:5e:
e3:5b:11:e2:7e:ad:c4:ce:34:7c:84:a0:a5:32:43:
75:54:9f:d5:11:3d:47:26:1a:04:76:13:6f:8f:6c:
b0:de:15:09:7f:6a:fa:ae:0d:4b:4e:9f:61:24:ca:
67:af:2a:63:67:52:c5:5c:37:80:cc:a3:00:78:6c:
58:14:dd:90:a5:e4:91:cc:b7:de:36:66:da:58:3d:
d0:d8:ae:e5:b0:8c:19:b8:a9:04:f9:76:22:a0:57:
b0:29:a6:91:6b:20:38:4c:d6:5a:1e:07:b9:6f:dd:
48:50:a8:08:13:bd:66:97:56:8c:a6:4c:94:33:8b:
2d:5e:06:14:c7:7f:3f:49:c6:24:0b:54:95:6d:a9:
86:95:24:0f:ea:c1:e2:be:d8:bb:5d:69:c5:fe:04:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:74:54:DF:5B:8F:CF:DF:C7:F8:A8:59:9C:8D:41:69:FF:CD:60
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/Bnh0VN9bj8_fx_ioWZyNQWn_zWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:75:89:47:0d:85:49:46:7f:0d:4d:f8:bd:99:1b:f7:e3:2f:
bf:41:85:b7:d4:40:ad:b2:d9:b1:37:a7:bb:db:f5:0e:fc:0a:
d9:10:c9:3e:d2:0d:26:96:4c:4f:dd:2b:06:07:c2:03:fe:99:
bb:81:dd:c6:7f:ef:ee:36:04:6d:f0:43:46:1b:e5:71:24:f7:
a4:c1:fc:24:bc:20:6a:b0:91:eb:6f:c4:4a:7e:90:7f:ee:5f:
96:d6:f0:1c:9d:a1:ab:f0:c4:49:cb:7a:f6:ce:29:9d:64:29:
74:8c:bf:34:ce:13:09:53:48:ae:4f:be:73:28:c6:f2:95:ac:
eb:1d:c5:ab:9a:8a:61:0f:a3:05:06:28:f9:2f:cd:c7:15:1b:
f0:d9:47:bd:1e:cb:3d:e4:27:e7:3a:5b:df:09:c3:a7:84:35:
0d:9b:47:b1:16:2f:f6:77:8d:33:cc:63:44:57:fb:30:bb:0b:
94:cc:c9:b7:ad:0b:b5:74:ce:51:0a:2b:cb:e1:5a:7c:ae:e3:
f8:9b:7b:ba:1e:28:52:42:3c:53:40:bb:af:70:ac:1b:79:9c:
8e:13:d5:79:3f:a6:fb:ff:b1:e7:e0:fa:c6:e3:03:3c:2d:f5:
eb:15:5f:99:45:a6:58:0e:15:64:e9:c9:29:81:49:70:58:db:
95:b6:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 09:37:12 2023 by rpki-client on console-ams.rpki-client.org