Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/afUqRiBDVz6KLiputk9ti1RYXY4.roa
File: afUqRiBDVz6KLiputk9ti1RYXY4.roa (raw, json)
Hash identifier: 2236UTbjAJohceB2gkxEy51FnMlF+O9mt14/midDIHQ=
Subject key identifier: 69:F5:2A:46:20:43:57:3E:8A:2E:2A:6E:B6:4F:6D:8B:54:58:5D:8E
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 018571BA042265DB8A9EB56F402443DE8595
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/afUqRiBDVz6KLiputk9ti1RYXY4.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 85.209.206.0/23 maxlen: 23
85.209.204.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:04:22:65:db:8a:9e:b5:6f:40:24:43:de:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69f52a462043573e8a2e2a6eb64f6d8b54585d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:91:ae:6b:07:dd:7d:8c:8b:4f:5f:e1:fd:
92:0c:b2:8c:02:0b:02:17:a2:da:5e:cd:a6:e9:24:
d7:b7:07:ba:6d:60:95:dc:a1:58:0b:e8:a1:6a:3c:
af:bb:a6:9d:71:46:cb:4d:57:f2:72:96:e8:46:ad:
1c:88:88:cf:7f:b3:07:85:29:c6:ca:3d:2d:48:ca:
10:e5:69:e8:65:c7:b5:89:e1:7b:00:4f:08:54:20:
b3:1e:b0:80:02:08:9d:7a:4e:3a:ec:d3:22:8c:4e:
77:1a:8e:24:2c:19:91:1c:d5:37:72:2d:7d:8c:7f:
ec:c6:e1:d9:97:a3:da:44:d6:68:2d:68:95:06:47:
0d:31:23:10:79:3e:e8:be:58:b7:84:76:f1:ce:8a:
e1:ab:3b:fe:42:2a:29:ff:11:da:5b:15:a9:1c:11:
96:cb:57:17:cd:3e:74:55:71:e4:92:46:49:43:f4:
73:fc:b9:01:6d:03:60:29:ad:90:b0:63:0e:90:ec:
dc:e7:f9:5c:5b:d9:ef:9e:d0:24:11:67:9d:43:d7:
1f:0e:39:d9:31:7b:71:85:2d:c9:48:27:cc:27:1b:
b4:a5:e1:2b:86:77:0b:d8:f5:ac:2c:8b:eb:d9:aa:
3e:09:bd:05:ae:d4:b9:47:89:06:20:2f:35:d6:9f:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:2A:46:20:43:57:3E:8A:2E:2A:6E:B6:4F:6D:8B:54:58:5D:8E
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/afUqRiBDVz6KLiputk9ti1RYXY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.204.0/22
Signature Algorithm: sha256WithRSAEncryption
82:8b:a9:1e:62:44:9c:c3:34:7b:e8:2b:84:33:ee:f6:1d:80:
1e:b6:e3:ac:e0:95:63:8b:f1:3e:ae:ff:ff:09:a3:4f:73:40:
8c:9f:9e:86:8c:77:dd:97:76:64:ff:7c:b4:bb:2b:1d:30:a5:
cd:dd:11:19:85:c7:08:01:8b:23:65:1d:ff:5f:1a:17:70:58:
1c:41:1f:3d:ed:2d:88:3d:b3:b5:86:54:a7:9d:5d:c9:a3:d6:
09:86:1b:bb:f1:5a:af:d5:dd:f0:eb:a9:00:92:aa:ed:1f:f5:
2e:0f:d3:8c:0f:9c:08:a3:6f:63:2f:4c:f1:93:ad:0e:18:5a:
63:01:27:1f:74:ac:be:4b:ab:07:c4:f9:0d:aa:f8:67:8b:3d:
fb:92:a5:85:e6:b5:5a:d3:0d:b2:f3:f2:31:88:53:0d:31:89:
e8:93:62:86:9e:d1:cc:5c:0e:1b:74:8c:86:bd:96:ae:ac:4d:
03:bd:b7:11:b8:4c:5f:0f:ae:8b:af:8c:1f:ba:2d:7a:d3:1d:
41:a2:b7:59:67:f5:21:cd:41:3a:be:09:29:dc:7e:78:11:bc:
02:65:66:2c:b4:1c:a9:e4:d6:21:af:da:a3:46:39:c6:1b:d1:
b5:08:bf:20:b0:c9:02:88:18:80:10:72:46:94:6f:1f:3d:1b:
0d:6c:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org