Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vBoTjVZJW0oEFaoO1a0fZbnTHKY.roa
File: vBoTjVZJW0oEFaoO1a0fZbnTHKY.roa (raw, json)
Hash identifier: YrotAwtDd2eRTuquUctFTVw1bKFHpLI+30J93VoS9H8=
Subject key identifier: BC:1A:13:8D:56:49:5B:4A:04:15:AA:0E:D5:AD:1F:65:B9:D3:1C:A6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5295D255819EF97E8EA8CC071E643
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vBoTjVZJW0oEFaoO1a0fZbnTHKY.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50275
IP address blocks: 188.211.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:29:5d:25:58:19:ef:97:e8:ea:8c:c0:71:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc1a138d56495b4a0415aa0ed5ad1f65b9d31ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:43:a7:33:8e:ce:0e:80:31:db:4d:1f:16:
de:e0:9b:bf:9b:ec:56:31:73:f7:b0:7a:b3:f0:30:
f3:c0:91:2d:ca:f1:4b:0d:56:6e:eb:f9:b5:db:be:
a5:bf:1b:a1:59:92:f4:6d:16:72:ed:0b:c2:10:3b:
6b:ae:90:01:b0:e1:48:2f:ff:85:1e:1d:24:52:e4:
fd:f7:c1:ad:24:c4:e4:b6:6d:bd:d1:ae:84:30:b2:
95:ad:3e:9b:9b:4e:c2:3e:28:1b:52:ee:fe:55:f9:
a6:a5:5d:6c:66:e8:b8:0a:bc:6d:f1:49:34:49:07:
80:24:20:b8:11:f6:5d:16:13:7c:48:57:1d:26:cc:
2a:43:b7:c0:b5:3f:6c:c4:11:ea:12:62:d5:a0:56:
f3:b2:27:d9:63:87:ce:e9:cc:b8:c2:bf:0c:8c:de:
7d:50:9e:1e:11:27:0a:91:b1:a5:d7:5a:68:2c:e9:
c0:67:1f:47:0c:39:9c:b3:5f:cf:f9:ef:60:ed:98:
06:51:e1:15:e5:1a:e5:88:1f:8a:8b:18:e1:b2:f5:
33:30:0c:a1:70:2d:e8:7b:14:48:9c:aa:03:78:65:
84:1b:b6:4e:eb:d5:50:83:f7:34:31:09:e3:de:a5:
f2:1b:7b:8a:57:85:bf:a5:15:34:b6:2b:1c:ad:cc:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:13:8D:56:49:5B:4A:04:15:AA:0E:D5:AD:1F:65:B9:D3:1C:A6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vBoTjVZJW0oEFaoO1a0fZbnTHKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:61:69:2d:39:94:54:99:c6:b6:7e:2b:6c:eb:a7:10:b1:3e:
2e:4a:1a:f6:37:7f:35:a3:32:63:a3:db:b3:8d:b7:96:35:39:
48:14:00:e9:3a:26:88:cd:41:94:b8:f9:fb:35:c6:57:54:07:
7b:24:dc:0b:28:e1:4b:ef:b8:eb:d7:6a:78:54:e8:db:56:a0:
c4:67:ce:98:e4:87:3c:17:35:bf:d3:2f:60:1f:a0:69:ad:6e:
18:ab:35:6b:d5:bd:25:b1:ab:63:4b:43:5a:44:22:2e:6b:eb:
df:88:b3:f2:40:e6:76:d9:40:d2:9b:2b:0d:72:b7:06:20:25:
b7:8e:40:7a:ab:6c:bc:60:bd:52:b7:cf:bd:e4:d7:e6:d8:58:
66:4e:71:bf:dd:86:26:c9:e9:02:af:97:dd:22:9f:3b:92:fa:
3f:6e:d0:66:f1:09:51:43:9f:c1:13:4e:7e:1b:cd:67:fa:10:
49:26:f2:73:d6:c1:03:9f:dd:79:f1:8c:a3:e0:06:41:02:31:
04:53:87:71:a8:4b:bf:db:9e:a7:48:61:42:58:35:74:f8:04:
04:62:d3:03:55:34:d0:d7:fe:2c:e0:5c:6a:12:e8:85:e0:61:
f4:50:a1:a9:45:86:dd:f4:0a:63:4b:ec:97:68:94:19:e2:1f:
d4:97:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org