Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/up5mPCf4F4Dn0eiPu67INl_5zmI.roa
File: up5mPCf4F4Dn0eiPu67INl_5zmI.roa (raw, json)
Hash identifier: eevOl6eTLm7dFflwcVIvqbUVf5uMCbYoZtAvk6/D0vI=
Subject key identifier: BA:9E:66:3C:27:F8:17:80:E7:D1:E8:8F:BB:AE:C8:36:5F:F9:CE:62
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 01856C13910FCA19301FDAB46C620E1A6008
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/up5mPCf4F4Dn0eiPu67INl_5zmI.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211270
IP address blocks: 194.61.34.0/23 maxlen: 23
194.61.34.0/24 maxlen: 24
194.61.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:91:0f:ca:19:30:1f:da:b4:6c:62:0e:1a:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba9e663c27f81780e7d1e88fbbaec8365ff9ce62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:ee:af:31:1c:dd:28:ae:ad:f0:02:8e:f8:
bd:bd:7c:cd:fa:e3:e3:ed:06:9d:fb:4f:28:c5:c0:
bb:5f:d6:8c:02:5f:03:fd:45:67:c3:80:a5:bb:5d:
d8:99:8d:09:7b:cd:57:c6:3f:9d:57:20:8f:08:e9:
d9:e7:f0:c7:d3:29:37:a3:8d:05:83:a2:8d:29:5d:
4e:9e:0d:b1:31:11:70:c8:26:3c:4d:e5:60:be:cd:
84:7c:70:6a:44:78:fc:59:80:f8:85:08:c5:41:bd:
c4:23:d7:59:08:f0:83:83:69:6d:1a:b9:d3:53:d9:
0b:34:59:da:83:e9:6f:e9:e6:3c:f1:b9:45:95:ca:
fb:ea:21:8b:41:a0:dc:cd:75:5e:f8:49:a7:c5:aa:
2c:4b:f8:4c:f9:04:c2:8e:c9:1b:6a:8a:5f:c4:03:
4e:c1:46:a6:0d:75:ca:bc:6e:85:62:0f:de:8a:f2:
d5:e4:f5:0f:5d:4d:80:fe:fb:13:da:72:e8:c1:64:
4b:b1:be:ec:59:da:95:d5:aa:0b:78:5a:ae:df:6d:
30:9d:56:ce:b2:ad:7e:5e:ac:db:f3:e6:ab:40:02:
1e:6e:74:fd:76:11:f9:c1:a9:de:83:0d:1e:8f:c7:
37:3b:bb:7d:9a:3e:f9:81:fc:30:98:ef:a5:cd:8d:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:66:3C:27:F8:17:80:E7:D1:E8:8F:BB:AE:C8:36:5F:F9:CE:62
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/up5mPCf4F4Dn0eiPu67INl_5zmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.34.0/23
Signature Algorithm: sha256WithRSAEncryption
22:a3:c9:e3:81:fd:6b:51:7d:6c:fd:71:99:72:7e:15:ea:2d:
f3:5e:1a:62:2b:26:8b:fa:b7:54:dd:3e:c4:3a:b7:83:71:65:
4f:64:bc:68:b7:b9:eb:12:cf:73:5a:55:e0:a0:b4:ca:40:8e:
6d:07:3f:25:ce:49:a1:84:70:23:8d:f1:31:10:67:fd:34:79:
ca:9d:a3:2e:c6:d7:5f:0a:e4:b0:7c:b6:03:75:ff:6c:ca:61:
a6:56:ac:2b:cb:30:7b:ce:f5:2f:35:21:1c:43:4e:8a:33:36:
c1:70:3d:74:80:ab:4e:9c:c6:12:10:9b:03:a4:93:91:96:19:
9b:a6:39:fd:f1:21:0e:13:68:c4:61:cd:7a:27:52:86:7e:d1:
e2:1d:79:c1:d5:78:da:0f:37:5f:fa:05:13:37:a6:0c:4d:0c:
55:80:32:8f:e4:93:73:6e:88:70:86:5d:10:cb:1a:83:fd:10:
54:84:57:d5:db:12:e2:13:22:2c:0f:57:14:3f:d1:71:f6:28:
14:8e:60:c3:e1:59:3f:51:e6:dd:29:4f:97:f5:46:e7:a6:fe:
3a:92:95:95:28:a2:ee:87:56:25:6e:8f:02:c1:db:6d:90:62:
e8:cc:2b:62:68:f5:05:72:0e:0f:f8:1d:26:05:76:9f:93:51:
b9:9f:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:52 2024 by rpki-client on console-fra.rpki-client.org