Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/vOkc0Nwx_vAyAucwGEhQNERrA7U.roa
File: vOkc0Nwx_vAyAucwGEhQNERrA7U.roa (raw, json)
Hash identifier: 4X41JNdlSjcQgcitFtqQMUY6AFivU7EnjOt6iDbVDSc=
Subject key identifier: BC:E9:1C:D0:DC:31:FE:F0:32:02:E7:30:18:48:50:34:44:6B:03:B5
Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial: 0189E3F7CB10FC855434AD5601286019D841
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/vOkc0Nwx_vAyAucwGEhQNERrA7U.roa
Signing time: Fri 11 Aug 2023 09:40:14 +0000
ROA not before: Fri 11 Aug 2023 09:40:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203495
IP address blocks: 185.133.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:f7:cb:10:fc:85:54:34:ad:56:01:28:60:19:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Validity
Not Before: Aug 11 09:40:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bce91cd0dc31fef03202e73018485034446b03b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:a4:3f:c3:65:b6:8e:a8:8a:4f:03:83:12:
ae:81:89:67:2e:f0:39:1b:1b:b7:75:e5:22:21:4d:
0c:99:e9:09:94:3f:3e:e8:ce:ff:62:14:d5:bb:66:
12:7b:07:d6:58:0f:81:91:50:9f:ca:83:f5:ec:4e:
20:40:7b:d5:4a:92:19:7e:ab:a7:f1:87:ea:10:a4:
77:25:c6:6d:8f:0f:ab:65:d5:72:82:5b:d1:ee:ad:
8a:8a:d9:a5:18:fd:44:c0:fa:9b:d4:80:ed:aa:f0:
ad:49:c9:38:a6:de:a2:01:3d:e3:61:7a:40:01:f0:
b0:cd:c5:3e:e0:b7:5d:19:a7:90:26:8a:55:36:86:
f0:68:d6:b6:4c:94:99:31:c9:c4:6a:d5:51:9c:30:
77:61:2f:2b:b2:0e:1b:b3:f3:fc:c6:2c:05:7f:95:
ce:9c:a5:ef:f6:1d:13:ed:26:a6:92:7b:d0:b1:4a:
80:bf:ff:5e:34:d0:8e:c7:b1:50:5c:87:ff:b1:dd:
2e:02:54:b7:a8:c7:b5:41:a7:1d:6a:38:33:5f:fb:
aa:1d:6e:b5:21:2a:db:61:7b:72:c3:0e:c4:6e:9c:
43:8e:19:17:32:05:b6:a2:1d:f3:cb:09:ca:30:88:
00:2b:b9:fe:41:a9:00:5d:73:15:cb:c1:55:2b:b7:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:1C:D0:DC:31:FE:F0:32:02:E7:30:18:48:50:34:44:6B:03:B5
X509v3 Authority Key Identifier:
keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/vOkc0Nwx_vAyAucwGEhQNERrA7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.52.0/22
Signature Algorithm: sha256WithRSAEncryption
29:72:3a:a9:be:9e:dd:2e:5c:be:fb:56:94:18:31:f6:4a:d8:
13:84:2f:d4:e9:c2:7a:bd:6c:0e:86:f5:e1:fb:20:60:b2:81:
1b:e7:58:53:56:fd:15:3a:67:3d:d4:26:af:2c:62:1d:4e:5b:
6b:f7:30:94:3f:95:0f:53:ac:24:49:d6:72:bc:a5:44:a7:ef:
70:a2:00:e0:3e:b1:94:36:87:7f:21:58:a5:fc:6e:58:50:2a:
14:97:d1:37:b1:58:38:c8:05:f2:bb:6d:22:7c:aa:93:ea:60:
1f:90:04:02:31:29:c0:cb:43:d6:da:c8:24:cd:29:1f:09:24:
63:db:eb:ab:84:47:45:3c:bb:80:be:0a:59:bb:4f:12:30:d7:
9f:b5:31:5b:d3:50:1c:e8:e9:e5:34:ea:92:db:2c:7e:65:ee:
0f:27:f2:08:2e:dd:32:53:4c:93:e1:d1:aa:f9:78:47:fd:f9:
00:9a:6c:73:96:cc:4c:61:1c:bd:08:1f:58:36:44:00:82:dc:
31:6f:b5:ea:18:69:f6:6a:9f:3d:cc:f5:7b:e9:a9:11:ec:3a:
73:b5:db:f2:85:e9:7c:a3:e3:93:d7:08:d3:48:4c:38:5b:cc:
d7:a6:b8:e0:9a:22:eb:ff:62:51:25:15:e5:e3:20:75:0b:a1:
52:9a:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:47 2024 by rpki-client on console-fra.rpki-client.org