Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/_BPQUDxUJuiuP7S6hRZU4K8A4bg.roa
File: _BPQUDxUJuiuP7S6hRZU4K8A4bg.roa (raw, json)
Hash identifier: 7dY9IAgK8yhh0ldVUUa9a1JgbV8WLVX6l2tToM54ruQ=
Subject key identifier: FC:13:D0:50:3C:54:26:E8:AE:3F:B4:BA:85:16:54:E0:AF:00:E1:B8
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 01856F5DA7E593991C6BA9A9D1EC80C1D48C
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/_BPQUDxUJuiuP7S6hRZU4K8A4bg.roa
Signing time: Sun 01 Jan 2023 22:04:46 +0000
ROA not before: Sun 01 Jan 2023 22:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204680
IP address blocks: 192.67.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a7:e5:93:99:1c:6b:a9:a9:d1:ec:80:c1:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 1 22:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc13d0503c5426e8ae3fb4ba851654e0af00e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:65:a8:2a:15:d1:4a:58:7a:05:96:6a:b6:
86:d9:02:36:db:0d:25:78:28:3e:ee:f8:a2:00:f9:
8b:f0:5d:fe:cf:7d:93:c6:68:2d:df:9c:25:8d:81:
7c:10:09:1b:f8:36:28:0f:c5:69:00:03:ed:5b:e9:
fa:04:8e:fd:70:73:19:87:4e:44:6e:cd:a3:b3:69:
6f:bd:c0:15:cb:6a:e5:19:4f:24:24:0c:b7:26:2b:
eb:6e:42:af:40:f3:a0:0e:12:fe:e7:b3:ba:8b:9f:
45:bc:bc:16:f2:d0:1b:79:8b:f4:01:50:60:aa:6d:
10:0e:6b:20:2b:6c:be:59:d6:1e:92:4e:1b:12:e0:
60:3f:35:1d:1b:27:0b:de:db:de:91:bd:74:52:35:
62:d5:84:af:ae:51:70:2a:e6:78:6c:a9:18:0b:35:
97:c5:26:1c:a3:75:dc:ba:7f:c8:fd:28:8d:11:17:
c1:1f:8a:8d:93:b6:ac:93:eb:66:39:54:22:bd:bf:
d2:ef:f3:38:ed:b1:0e:68:9d:c9:ac:2b:b1:40:ba:
85:7b:5b:d1:72:e4:b0:c7:f4:91:22:8e:fc:15:92:
57:42:cd:cd:b5:3c:20:f4:cc:d3:92:f7:2d:57:c9:
d4:44:29:b4:b1:75:18:94:1e:30:23:cc:d3:f1:72:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:D0:50:3C:54:26:E8:AE:3F:B4:BA:85:16:54:E0:AF:00:E1:B8
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/_BPQUDxUJuiuP7S6hRZU4K8A4bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.189.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f6:0b:be:f5:f0:fb:93:f5:12:eb:99:c7:20:65:e5:3c:39:
59:c3:17:ed:89:b3:86:87:b9:8d:85:a0:6f:62:2e:a0:66:6f:
aa:dd:2f:88:fe:21:73:88:7c:14:93:3e:d8:e1:f1:59:2f:af:
d7:7c:6d:6f:5f:30:ad:48:22:64:9c:ff:19:f6:63:30:c9:22:
dd:fa:3b:75:e8:2e:76:62:99:be:83:e6:ea:ff:eb:2d:7e:3f:
0c:81:b9:02:67:88:92:2f:72:e7:af:30:c2:04:7b:fa:67:df:
23:33:d5:7e:bc:3a:55:25:52:5f:bd:c3:a3:69:1b:88:86:b7:
fd:f6:f4:82:0d:7f:26:84:96:51:35:0a:ea:4f:a1:4d:36:c5:
8e:f2:8d:1f:98:c5:e9:ff:4f:40:16:3e:26:59:61:b6:35:78:
76:92:3f:29:ec:3c:f3:aa:9c:06:e3:5a:81:13:37:80:3c:51:
3c:4b:9d:5c:df:a1:5f:e3:c1:a4:94:e6:e2:cd:10:b2:ec:86:
75:44:65:0e:e1:a6:26:b2:ef:ad:6d:ab:08:b6:6f:8c:8f:f2:
a5:81:45:21:ea:87:5b:84:06:16:78:2e:84:20:7f:6c:43:fe:
74:c7:0e:3c:d8:7a:ca:cc:d8:bb:73:67:2f:1b:e5:c5:e9:1e:
21:d3:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:49 2024 by rpki-client on console-ams.rpki-client.org