Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/bxd2EV52Ehhz2dtKvMFnNINGO4k.roa
File: bxd2EV52Ehhz2dtKvMFnNINGO4k.roa (raw, json)
Hash identifier: lAdXrscSQyLQG33ZdXwAiwcvKmBPqdnMXJKond5RAsY=
Subject key identifier: 6F:17:76:11:5E:76:12:18:73:D9:DB:4A:BC:C1:67:34:83:46:3B:89
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 01856F38FD1D3BE7A75C1F6BFC31C0FF6C24
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/bxd2EV52Ehhz2dtKvMFnNINGO4k.roa
Signing time: Sun 01 Jan 2023 21:24:43 +0000
ROA not before: Sun 01 Jan 2023 21:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62013
IP address blocks: 185.162.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:fd:1d:3b:e7:a7:5c:1f:6b:fc:31:c0:ff:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jan 1 21:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f1776115e76121873d9db4abcc1673483463b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:3f:49:87:18:fe:1b:e9:e1:73:03:db:1e:
79:a1:df:a7:2a:35:23:fa:b7:18:5c:83:1b:de:37:
0c:d9:d6:e7:fb:e3:d8:d5:cc:eb:90:90:f9:38:7f:
35:06:b5:ae:99:e5:d5:6b:e7:02:db:bc:b8:b1:33:
64:01:df:19:02:60:0d:b2:c8:9c:13:25:9b:c0:6a:
05:9c:b4:96:6e:45:78:04:c2:7b:d9:ff:bc:29:ca:
64:5f:30:8a:d0:60:c9:b2:96:2a:f6:b7:4c:fb:b3:
42:2c:de:a5:e9:87:d6:32:4d:83:73:c7:c3:db:02:
e2:b3:1a:85:3c:3f:d4:b4:8b:81:84:53:a4:c0:60:
06:2a:26:20:28:ee:d1:ea:7a:e4:1a:03:b5:59:6d:
f2:2b:95:95:e7:64:16:f8:df:de:f7:30:18:4c:fe:
be:17:bf:4b:6f:4f:58:7c:af:1f:59:0a:90:ab:87:
3c:8d:42:f5:3e:07:df:4e:eb:d4:0d:ae:63:7b:90:
c0:59:ef:7a:8d:84:34:a9:60:3c:aa:82:12:2d:ba:
0a:8c:17:e6:83:c5:ad:bc:06:60:1c:43:5d:86:c8:
53:9e:21:ba:6c:cc:51:23:63:d7:ad:a2:14:85:ca:
f9:80:54:08:dc:8d:30:e4:07:bb:01:46:ac:41:1c:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:17:76:11:5E:76:12:18:73:D9:DB:4A:BC:C1:67:34:83:46:3B:89
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/bxd2EV52Ehhz2dtKvMFnNINGO4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.140.0/22
Signature Algorithm: sha256WithRSAEncryption
77:6a:5e:75:92:1c:ef:99:d0:9d:9a:14:54:15:1d:b5:19:d5:
78:fa:4d:ab:b0:62:c1:db:2c:fc:68:9e:94:3a:4a:93:ca:49:
a2:a8:00:58:fa:66:4e:68:6f:a5:6b:b1:ca:2b:34:d3:82:d6:
1a:63:77:e0:25:52:1f:9a:ba:86:28:71:d8:d6:79:b8:cb:49:
fe:41:24:19:a3:d7:48:9e:99:f1:16:62:9e:4e:c0:12:8d:fb:
2f:04:9e:ec:cc:31:47:1e:5f:88:e7:f6:46:dc:e5:eb:ed:12:
01:b6:29:3f:c3:b2:1e:56:12:1a:2f:15:f6:b0:7e:34:d1:a4:
96:b3:33:40:45:54:1d:86:02:9f:1f:92:99:84:32:fc:c5:3c:
a9:ba:a2:a1:a1:c6:cb:72:a2:13:51:ca:c0:c9:bf:eb:14:c0:
77:54:17:38:a8:21:88:42:c0:37:68:0d:96:02:8c:78:1f:7f:
ae:cb:17:5e:5c:f7:fe:ac:c8:0c:6c:c6:e1:da:d8:bf:81:95:
d9:97:3a:0a:3b:a2:de:57:53:ca:3f:ad:a1:fe:a1:53:5e:c5:
d8:52:f9:7e:30:f5:25:7b:49:7e:24:41:c3:01:8b:e9:b7:8e:
e3:8d:e4:1d:1e:c0:3b:7b:e9:9c:bb:b0:ee:af:0b:ef:73:c8:
51:14:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:13 2024 by rpki-client on console-ams.rpki-client.org