Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vS-RkIbKKLBr27MGFssvqJAZ8hA.roa
File: vS-RkIbKKLBr27MGFssvqJAZ8hA.roa (raw, json)
Hash identifier: /Q5Mf/560YIf4Qd4kuQTMmnFeb1EcUh0eDkxyHiQyIQ=
Subject key identifier: BD:2F:91:90:86:CA:28:B0:6B:DB:B3:06:16:CB:2F:A8:90:19:F2:10
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 0189B60C2C16A8F401E2CDC6667132B53FE4
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vS-RkIbKKLBr27MGFssvqJAZ8hA.roa
Signing time: Wed 02 Aug 2023 11:39:58 +0000
ROA not before: Wed 02 Aug 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262287
IP address blocks: 185.192.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:0c:2c:16:a8:f4:01:e2:cd:c6:66:71:32:b5:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Aug 2 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd2f919086ca28b06bdbb30616cb2fa89019f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:6d:89:25:01:47:1e:e7:e7:b7:62:f2:52:
a1:07:73:f4:60:35:e7:6e:70:a2:d3:57:f9:c5:7f:
00:23:1e:23:b9:c4:1e:43:1a:e3:d1:a1:c8:20:be:
79:eb:81:33:9e:d9:64:3d:bc:9b:cd:34:c1:a0:e0:
5a:c1:8f:68:f5:76:ad:a0:86:4e:8c:a7:86:fc:5d:
d0:57:7c:34:77:93:b4:bd:48:aa:0a:fb:17:cc:13:
22:24:fd:61:61:c7:d3:17:21:7a:46:88:ac:03:d7:
47:e5:64:2e:53:ae:c0:6e:2d:a7:aa:b0:9c:7b:de:
ae:de:75:0d:ef:9b:aa:ff:7c:36:e1:3f:f3:4c:3b:
a4:05:09:3a:7c:90:16:3a:92:6e:7c:d8:52:0e:5c:
ff:80:0e:f6:68:09:5a:32:9b:32:23:75:3e:98:14:
0d:47:10:6e:b8:f6:f8:9d:47:7f:21:39:60:a8:05:
3f:2b:2a:21:e3:87:c3:cf:b3:c4:c8:04:4b:95:5c:
ed:b6:d7:11:c7:b1:e0:a0:dc:5e:ba:fc:bc:08:2e:
67:a9:44:73:50:78:0c:77:aa:f0:4e:f5:93:6c:ae:
ca:d1:67:0c:64:9f:79:c8:da:cf:02:8e:7b:b2:bd:
37:82:fb:5e:84:ce:69:85:65:79:69:f3:1b:ea:71:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:91:90:86:CA:28:B0:6B:DB:B3:06:16:CB:2F:A8:90:19:F2:10
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vS-RkIbKKLBr27MGFssvqJAZ8hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d4:8a:f5:88:40:b2:38:d3:d4:72:a0:d1:35:cb:d3:fd:1c:
01:f0:77:52:c3:7a:22:3b:6e:d6:a9:a9:74:06:30:d5:fe:f1:
ca:7a:4b:41:a8:bc:48:83:b2:75:86:ae:79:b5:7a:72:15:8b:
74:ea:cd:47:21:bc:e5:d2:58:6e:83:9e:8a:41:da:1a:10:cd:
c7:4d:56:68:92:5f:46:1a:e9:d8:63:c5:59:e7:96:c8:05:63:
76:ac:a9:08:74:1c:a6:3f:5b:c0:ec:6e:e3:0e:1c:29:4c:cd:
2b:4a:40:4d:cb:cf:f6:33:b5:f3:37:8a:05:eb:4c:05:a0:ed:
0f:e6:8c:88:a1:ba:d3:b7:1c:7a:84:a2:2d:14:77:2e:e2:02:
60:ba:fa:db:bb:16:09:6d:86:d1:3d:db:f2:b4:ef:fe:f0:e6:
62:f1:56:07:0a:1f:56:cb:9d:4d:a3:55:d7:82:6c:8b:31:51:
d8:ac:89:2e:c5:1e:4d:92:fc:42:64:a1:ae:de:1b:a7:2c:d8:
23:4c:85:07:68:5a:1c:cb:ec:0f:82:38:b6:02:e9:eb:45:28:
cb:fa:ae:f3:18:a7:c4:1b:63:66:59:89:86:4f:52:3e:d4:bd:
ac:f9:5e:b1:ee:9a:39:c4:94:78:8e:bb:a1:72:69:60:61:4b:
d7:08:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:34 2024 by rpki-client on console-ams.rpki-client.org