Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BAbnxkbK160w-1F_grlAWZxWIhI.roa
File: BAbnxkbK160w-1F_grlAWZxWIhI.roa (raw, json)
Hash identifier: gS41icuBqAfy4FA79JmPqbXWkPW6UYVFCnl4i1a+Rmo=
Subject key identifier: 04:06:E7:C6:46:CA:D7:AD:30:FB:51:7F:82:B9:40:59:9C:56:22:12
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C7F2C3B3C6F76576E06FE9077622
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BAbnxkbK160w-1F_grlAWZxWIhI.roa
Signing time: Mon 02 Jan 2023 05:25:05 +0000
ROA not before: Mon 02 Jan 2023 05:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206948
IP address blocks: 195.136.92.0/22 maxlen: 22
195.136.147.0/24 maxlen: 24
195.136.152.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c7:f2:c3:b3:c6:f7:65:76:e0:6f:e9:07:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0406e7c646cad7ad30fb517f82b940599c562212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:e3:17:a6:5d:7c:eb:df:00:e3:b3:f0:fb:
5a:b6:f6:45:a3:7b:98:c9:8a:68:d9:33:70:b8:11:
68:05:58:a1:4f:c2:cb:a1:d1:2b:57:93:9a:ac:05:
a6:a7:7c:92:ed:a7:ec:0a:5c:d2:d9:cc:60:e1:c9:
da:f0:c7:17:f3:9f:e1:5a:1f:04:6a:8f:f7:c5:33:
54:75:5f:6c:a8:72:dc:81:50:d7:03:bd:7c:13:5d:
85:33:91:3e:0d:61:e0:61:7e:8e:f9:fc:bd:ce:a8:
87:9d:52:0f:6f:26:64:19:17:a5:ef:45:64:18:d1:
0e:76:54:d3:2d:cf:59:ce:91:37:4f:b1:45:ff:b3:
70:eb:0f:dc:ea:c1:4e:80:0f:4e:0c:c9:e1:5f:fa:
8a:56:a9:86:1f:91:b7:7b:cb:d6:da:3d:a7:49:42:
32:d9:d6:95:02:47:aa:57:29:8c:0a:82:91:05:93:
fa:f9:91:2d:47:cf:78:61:8c:9d:7f:40:93:35:9b:
01:5f:c2:f1:ba:5d:6e:59:0e:c3:dd:57:80:1d:8c:
a4:46:bc:1c:69:f0:89:69:a7:ee:8d:eb:db:8d:e0:
99:5f:f7:c8:6a:5b:01:8b:db:f7:6c:d3:72:cf:e9:
d0:3a:f3:a3:51:91:51:b7:ea:55:17:a5:9e:91:a7:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:E7:C6:46:CA:D7:AD:30:FB:51:7F:82:B9:40:59:9C:56:22:12
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BAbnxkbK160w-1F_grlAWZxWIhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.92.0/22
195.136.147.0/24
195.136.152.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:c2:25:27:8a:c5:d7:55:3a:80:dd:45:32:46:2e:7b:96:c4:
df:53:60:cc:1f:f3:93:30:17:ee:52:15:79:45:64:71:8a:47:
4b:34:c4:6c:66:b0:43:f4:cb:4e:b0:49:ce:b7:f8:2d:ac:fe:
b8:e7:d5:0a:74:11:a8:d8:da:0a:de:a3:56:bd:74:4d:a6:60:
87:71:0e:ee:94:eb:c9:fb:55:66:55:59:58:a4:20:71:76:bb:
ed:18:2a:27:31:fb:9a:d0:9d:2f:72:60:44:7d:c2:a7:0b:df:
c8:fc:37:ec:09:cb:f1:59:4f:f4:d8:09:1b:42:64:f7:68:00:
b4:20:65:e2:25:c4:97:43:aa:8f:65:02:63:de:5e:43:d1:71:
13:8f:3d:6e:b9:61:67:86:01:00:c4:90:c5:1e:ad:5b:ce:03:
c7:ae:01:63:d6:c4:d5:1f:60:4d:22:dd:42:99:58:9a:a4:1b:
00:65:85:0a:44:e2:f7:71:31:72:a1:76:5b:60:ec:52:1d:9d:
68:1d:9f:3e:e6:3c:7f:8e:f5:4e:60:11:0b:9b:41:32:8e:0a:
ce:fe:2d:14:46:a7:4a:99:88:bb:fb:99:dd:ad:5b:2b:98:14:
79:b8:62:9d:30:67:da:0f:e7:be:76:d5:11:69:3e:27:c1:b4:
e1:be:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org