Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/bvGCPNJemL5Xl--i7QUlw2CvorU.roa
File: bvGCPNJemL5Xl--i7QUlw2CvorU.roa (raw, json)
Hash identifier: 66Fw/CyeShuHiP3IKMjqmvj/EdnM9+jGA4z97XRq8Z8=
Subject key identifier: 6E:F1:82:3C:D2:5E:98:BE:57:97:EF:A2:ED:05:25:C3:60:AF:A2:B5
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018954EFD712CF68F55BC1366CFD8F801126
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/bvGCPNJemL5Xl--i7QUlw2CvorU.roa
Signing time: Fri 14 Jul 2023 15:05:51 +0000
ROA not before: Fri 14 Jul 2023 15:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 91.193.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:ef:d7:12:cf:68:f5:5b:c1:36:6c:fd:8f:80:11:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 14 15:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ef1823cd25e98be5797efa2ed0525c360afa2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:a4:46:2f:be:ec:7d:8d:4b:36:b8:ef:09:
79:36:48:11:98:24:93:c6:75:b5:1e:35:6f:16:98:
c4:5f:45:97:e7:fc:61:78:78:32:c5:c8:b4:74:bc:
57:9c:7e:0f:70:58:85:bb:02:ed:3c:ac:c9:3e:37:
4f:56:d3:b7:e6:f1:c4:f0:35:8a:d0:68:fc:8d:e3:
17:73:fd:f1:82:ab:ce:4c:92:63:ba:96:91:b5:bd:
bf:4c:dd:7b:95:70:a1:5e:29:62:f0:9c:96:57:c6:
36:54:4c:ce:93:c7:38:34:4c:6d:ba:5a:31:e9:e9:
69:3b:70:d7:53:5a:90:21:f9:57:fb:98:6d:73:00:
4c:fa:c0:24:4c:fb:86:00:23:bd:c3:99:05:50:51:
f0:46:21:0c:b1:13:b7:0b:b6:82:e3:ac:d8:a3:c4:
ce:e3:80:be:f3:ad:b6:f3:54:10:9c:e8:d6:f8:a0:
0f:4a:a7:fe:0f:72:c1:64:90:4b:bb:bc:f4:50:83:
91:a3:e8:4d:37:2b:23:03:6d:57:ed:bb:28:63:7e:
2f:8a:47:c4:3c:08:6d:eb:4d:d6:17:5b:2a:a9:d0:
1d:80:79:1f:50:db:b1:60:f4:4c:21:a4:e3:66:04:
2d:40:de:49:33:07:95:c9:1e:4f:26:59:cc:d1:5b:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:82:3C:D2:5E:98:BE:57:97:EF:A2:ED:05:25:C3:60:AF:A2:B5
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/bvGCPNJemL5Xl--i7QUlw2CvorU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bc:d9:c1:64:3c:06:5b:55:9f:bb:e4:75:bd:2c:b1:a3:d9:
42:3a:df:f0:3d:71:ed:f1:7b:f9:59:fb:cf:00:14:4c:39:10:
be:98:09:21:a1:f2:6c:52:18:6c:e7:cc:bf:c6:51:ea:47:70:
dd:70:f0:06:70:59:d8:6b:b3:7b:ca:f9:25:7e:74:92:ed:18:
30:a9:d2:c1:00:06:7d:ca:77:80:8f:21:4e:06:ce:7d:c8:f3:
89:ca:3a:74:26:51:e0:82:96:a1:5e:f4:5d:d8:d6:5c:a7:36:
5d:5d:c8:37:0e:b9:a2:53:65:41:f4:63:ff:b6:08:f7:56:42:
ce:c8:9b:74:7f:8e:02:fc:ff:14:79:8e:f4:15:d4:15:b6:77:
9f:cb:13:27:83:5d:ce:4f:a8:59:5c:a7:ee:12:8e:55:2a:ee:
00:35:d4:ef:96:a0:71:f8:97:f9:5e:6a:d9:8b:28:29:47:a4:
88:fd:ef:62:ed:4b:32:38:a2:79:92:5d:67:73:f2:be:2f:25:
78:f5:f0:65:37:fd:9f:a8:15:de:73:dc:2f:7d:ae:d8:57:a0:
15:55:9d:07:6d:a8:e3:3d:e4:37:4f:9a:3e:8b:ed:fa:0d:bb:
28:ca:7c:c7:9f:93:3b:be:22:87:68:c5:16:c5:86:00:fc:c3:
2a:e5:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org