Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/bVzhyK235dSD-rhBO6-CktZMGj4.roa
File: bVzhyK235dSD-rhBO6-CktZMGj4.roa (raw, json)
Hash identifier: /sPxeQIUZ1MZA3WsWF0T5oBqZXLlAjKDSiotr6zIecA=
Subject key identifier: 6D:5C:E1:C8:AD:B7:E5:D4:83:FA:B8:41:3B:AF:82:92:D6:4C:1A:3E
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0186500CF9E0E73F9BA2F51B81CA9915FCDF
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/bVzhyK235dSD-rhBO6-CktZMGj4.roa
Signing time: Tue 14 Feb 2023 13:11:13 +0000
ROA not before: Tue 14 Feb 2023 13:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.74.130.0/23 maxlen: 23
188.119.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:0c:f9:e0:e7:3f:9b:a2:f5:1b:81:ca:99:15:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Feb 14 13:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d5ce1c8adb7e5d483fab8413baf8292d64c1a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:a2:f6:76:47:46:78:e9:d8:a2:46:78:a0:
ca:66:a2:2f:0a:68:1f:bf:9f:f8:40:f5:47:11:99:
ad:56:6d:aa:4d:80:1a:66:8b:d2:01:15:95:61:92:
60:af:c2:5a:cf:cc:25:b4:1b:1a:94:11:ae:99:2f:
75:70:31:5a:ae:cf:12:43:23:8c:71:d3:a8:7e:ef:
e3:ed:ca:6d:b4:5e:e7:af:da:3b:3c:bb:01:ed:15:
3e:19:72:50:bb:52:a5:86:17:27:9a:f7:59:7d:40:
f4:29:03:f5:57:35:8a:7b:d7:31:69:43:44:6e:dc:
f4:90:73:03:ce:2f:26:09:15:9c:11:d8:92:f7:58:
ee:b3:2d:22:2d:f7:76:08:07:b2:31:5c:08:57:7e:
fa:57:43:41:3b:28:f9:9f:71:43:13:a9:cb:72:dc:
ed:7b:78:50:9b:08:73:5b:90:f0:a9:9d:5c:8f:9f:
39:4c:90:85:f2:b2:fb:f8:0c:0c:31:67:d1:5c:c8:
9e:77:92:d9:a8:1e:e4:1c:1f:56:6e:1e:e8:c4:6e:
3f:53:03:88:0c:6d:80:41:6b:a2:c5:02:7f:20:6a:
af:2b:23:be:19:9e:31:83:e4:8f:aa:05:d9:2b:b3:
3e:b7:f7:3f:aa:e5:41:55:5d:87:cb:6d:85:07:60:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:E1:C8:AD:B7:E5:D4:83:FA:B8:41:3B:AF:82:92:D6:4C:1A:3E
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/bVzhyK235dSD-rhBO6-CktZMGj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.130.0/23
188.119.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:04:2e:53:31:5e:86:cb:5e:de:da:d8:ee:fc:2e:2a:70:12:
4c:2d:cf:c5:11:20:08:52:7d:ca:a8:2a:16:59:9a:76:05:09:
5e:01:c7:bc:e1:17:20:5f:5e:9a:28:c8:28:45:e2:d1:19:77:
0f:47:5a:68:9a:85:0f:7f:a8:d4:57:54:a4:fd:9c:f7:b4:3e:
ad:58:92:db:6a:48:8e:6a:03:75:b5:7b:9f:26:82:65:94:23:
d7:33:b1:82:1b:5d:71:34:2e:82:6b:5e:38:15:96:b1:2e:d0:
fd:07:a6:46:a5:82:4f:6a:fd:3a:11:91:30:fb:e2:10:28:68:
43:8d:4a:da:29:8f:9c:ba:97:b1:6a:64:2d:2d:d3:29:12:29:
d2:02:4f:f6:72:72:77:f0:2c:b3:2f:40:f0:a5:f7:6e:0d:76:
5c:dc:c8:47:b8:69:e1:7f:96:64:6f:17:be:76:c9:1a:1f:c7:
f0:20:06:5c:fb:a4:b1:4f:9f:26:61:a3:77:7e:fd:88:6c:08:
b9:2b:b6:61:bb:72:c6:6a:25:e3:3b:69:96:ce:4a:a9:b2:92:
7b:e4:65:9e:1f:4e:64:9a:e0:10:b9:38:af:ba:fd:ae:05:c0:
3e:1d:d5:3c:20:d5:5e:5b:cc:cf:55:7f:56:5a:6d:20:a7:6b:
0f:15:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:25 2023 by rpki-client on console-fra.rpki-client.org