Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/bfvD8rNVTatFP_Nryu7Xf1cd0kQ.roa
File: bfvD8rNVTatFP_Nryu7Xf1cd0kQ.roa (raw, json)
Hash identifier: 3gSOUdtzLSwBFAMHI9drS7jS9TSRuK++surmWQIA1rs=
Subject key identifier: 6D:FB:C3:F2:B3:55:4D:AB:45:3F:F3:6B:CA:EE:D7:7F:57:1D:D2:44
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018936B21EFC9C02613F035F283F36F6BF4E
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/bfvD8rNVTatFP_Nryu7Xf1cd0kQ.roa
Signing time: Sat 08 Jul 2023 18:09:50 +0000
ROA not before: Sat 08 Jul 2023 18:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 202.164.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:b2:1e:fc:9c:02:61:3f:03:5f:28:3f:36:f6:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jul 8 18:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dfbc3f2b3554dab453ff36bcaeed77f571dd244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:cb:81:1d:bc:14:3e:67:d0:dc:6a:bf:e2:
21:12:5c:46:93:1b:4a:34:07:86:8e:ce:04:49:79:
0e:e1:e3:95:18:63:91:7a:b1:94:4e:8d:e1:31:f9:
9c:9f:e6:91:6d:8c:b4:d8:fa:bf:ae:91:6e:57:ca:
6c:eb:ad:33:f2:3a:7c:75:49:a3:b5:e4:cd:79:52:
b6:dd:fe:cc:ef:51:b7:ea:fa:27:44:19:0e:90:99:
8f:b1:73:f8:1c:f7:60:80:87:60:11:a4:c1:be:be:
14:e8:18:70:01:07:46:e6:38:65:1a:0e:2b:cb:82:
b7:4d:3f:9c:ba:09:16:e4:87:7e:74:f1:df:9f:94:
a0:15:72:3d:ee:d7:6b:0a:ab:e0:ae:db:30:c6:4e:
4e:c4:d6:3e:e9:c1:b5:40:d0:74:01:20:16:8f:68:
44:15:04:f0:05:37:5e:36:d6:4b:75:8a:28:1c:c1:
f3:9c:56:64:cc:ec:20:e4:99:f0:5d:6d:de:83:c4:
e6:c1:f6:60:19:0f:b2:08:78:6b:bd:16:a2:3f:8d:
47:2e:7f:d9:8a:41:82:16:91:d5:42:96:fc:e7:63:
cc:52:1a:44:7a:e8:89:1a:a1:ee:2d:bd:12:1a:c9:
cb:ad:a4:6a:40:f2:fb:25:6e:2a:72:1f:61:00:62:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:C3:F2:B3:55:4D:AB:45:3F:F3:6B:CA:EE:D7:7F:57:1D:D2:44
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/bfvD8rNVTatFP_Nryu7Xf1cd0kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b8:99:d3:47:79:41:4b:5c:8b:0c:25:10:d5:8c:95:4e:5c:
37:dd:d3:66:a6:4b:12:d0:61:2e:44:57:94:56:37:0f:87:1f:
26:ce:e6:f4:92:50:80:4d:fe:9f:17:44:a5:f6:8d:53:38:05:
0c:26:a4:8f:ae:e9:f8:25:4e:c7:06:4a:b2:0a:e0:88:45:36:
95:b4:57:b6:2b:78:08:32:96:0b:6c:6e:19:3b:ec:24:a2:e8:
30:a8:14:09:ac:f3:29:4c:c2:75:66:80:98:f8:c6:d7:9c:84:
b1:df:77:07:22:38:d8:e8:13:c6:04:9c:19:24:80:1b:0a:2f:
f0:8e:c3:a5:6d:f7:1c:a2:ef:e8:15:29:e4:96:c4:9d:e4:9d:
eb:c5:2f:1d:bc:80:e3:a2:54:fa:ad:b5:38:f3:1e:77:30:77:
b4:03:01:69:a3:e0:85:a8:ac:c6:fb:27:e4:c8:5c:4a:3b:83:
ee:4b:8d:9c:42:59:f8:e8:6d:40:38:75:c2:d4:cd:20:31:d5:
3f:61:42:07:0a:c9:9a:67:07:41:88:58:87:9b:c9:e8:7c:1d:
3d:78:bd:19:3e:8a:a2:7a:be:96:ba:9d:61:79:fd:e0:86:7e:
a5:4d:c6:f6:bc:d6:7c:d3:b6:84:14:12:b7:05:15:89:5e:d0:
b7:87:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org