Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/b68fGpxazTe3adQmp2LmpW_MJXI.roa
File: b68fGpxazTe3adQmp2LmpW_MJXI.roa (raw, json)
Hash identifier: 1ptNqevwH7WP8uWazt1FVT9gynUlzrGe7eXi53sJAgs=
Subject key identifier: 6F:AF:1F:1A:9C:5A:CD:37:B7:69:D4:26:A7:62:E6:A5:6F:CC:25:72
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 0187248DF7F6275952431C87204EF3FED48E
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/b68fGpxazTe3adQmp2LmpW_MJXI.roa
Signing time: Mon 27 Mar 2023 19:31:36 +0000
ROA not before: Mon 27 Mar 2023 19:31:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 185.13.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:8d:f7:f6:27:59:52:43:1c:87:20:4e:f3:fe:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Mar 27 19:31:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6faf1f1a9c5acd37b769d426a762e6a56fcc2572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:b6:75:98:a3:24:6d:2d:35:54:40:66:23:
05:6e:9a:81:cd:2d:fd:93:db:45:90:26:41:2d:7f:
f1:c3:d8:30:ff:92:77:9c:4a:0a:6b:d7:42:2b:91:
4e:9d:8c:2a:09:c4:b4:ca:64:08:35:30:d3:1d:d2:
87:96:b9:d1:77:64:8c:9e:39:5c:c7:de:b3:45:1a:
49:fa:06:ce:77:3c:ea:f3:3a:8a:92:da:91:9b:85:
b9:45:9d:93:ea:4d:55:bd:7a:c5:cc:5a:3f:8b:99:
45:78:25:e7:17:38:f1:3e:ca:12:3b:2e:3c:05:67:
57:a8:14:d4:37:fd:9b:6d:b1:87:e2:62:b8:9b:ab:
74:38:70:af:84:e1:f4:fc:80:13:f7:60:bb:ef:a1:
15:26:92:6d:64:2c:85:08:8a:ce:db:60:d6:39:05:
e6:a7:f6:1c:86:b3:c8:48:30:7d:ae:cf:ae:ed:eb:
5a:f6:4a:c9:d6:9e:79:9d:57:51:87:32:0e:1d:a2:
84:b4:ec:ee:79:ac:e6:d8:ab:7c:4e:60:fd:3f:f0:
74:85:24:ff:e9:97:ed:f7:8c:37:86:ba:5e:69:2d:
6f:4c:73:ea:95:56:f0:86:be:da:6f:7d:6c:36:66:
57:90:0b:2e:d7:47:53:4e:c3:58:e1:85:e9:78:fb:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:1F:1A:9C:5A:CD:37:B7:69:D4:26:A7:62:E6:A5:6F:CC:25:72
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/b68fGpxazTe3adQmp2LmpW_MJXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.224.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fa:bd:ea:3a:49:d7:ee:c7:49:7c:7a:ef:1c:a4:f9:1b:0e:
77:0a:8b:a6:5a:d9:4b:de:b5:1f:e6:bb:0c:e2:b2:59:fc:b5:
89:26:cf:73:16:d9:89:80:ca:4c:42:86:a8:c7:66:65:3e:b4:
c9:20:6b:72:fe:b8:fb:37:d1:f6:be:54:f7:3f:c5:1c:6d:8e:
57:a9:7f:74:59:9e:d4:07:d4:08:f8:b7:5c:20:8f:c4:e0:0c:
e5:ed:54:1e:c2:1d:67:f8:d4:3c:10:75:08:c8:89:29:54:3f:
a4:54:43:d5:d8:0e:44:c7:21:b5:8d:3e:9b:ca:d3:7e:c8:e1:
44:05:20:18:6d:fc:ad:f9:48:73:62:18:01:4f:ed:46:ed:55:
8b:4c:7c:64:0c:31:45:37:ef:72:1b:47:fe:17:be:80:94:b1:
0f:df:d1:41:b9:ea:81:20:10:c3:f4:b8:e9:4b:ea:db:5e:fe:
20:ee:71:b9:33:2d:e9:52:94:a1:fe:21:8b:e3:43:b7:d9:6c:
d2:d3:bc:23:93:76:fc:c0:aa:31:42:b4:ae:c2:27:8a:eb:7a:
d5:cc:12:02:e4:54:cc:e9:93:49:3f:f2:17:7c:67:a9:ed:03:
a6:b6:da:42:ec:34:3a:d1:d9:a7:eb:ef:a4:5b:88:30:d3:0d:
5c:7e:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:44 2024 by rpki-client on console-ams.rpki-client.org