Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/bA23cACK4_DimBStm9ff_2YGATM.roa
File: bA23cACK4_DimBStm9ff_2YGATM.roa (raw, json)
Hash identifier: yTWT1NlKmv2eDZ3f4GIDYBhFPY7K/sKv5xxdjI8QTak=
Subject key identifier: 6C:0D:B7:70:00:8A:E3:F0:E2:98:14:AD:9B:D7:DF:FF:66:06:01:33
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A13561BD00E043FC2E064D700E4C90B76
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/bA23cACK4_DimBStm9ff_2YGATM.roa
Signing time: Sun 20 Aug 2023 14:25:24 +0000
ROA not before: Sun 20 Aug 2023 14:25:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 91.186.208.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:56:1b:d0:0e:04:3f:c2:e0:64:d7:00:e4:c9:0b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 20 14:25:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c0db770008ae3f0e29814ad9bd7dfff66060133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:03:75:47:ac:2f:21:0f:7b:21:64:44:fa:
8e:d6:a1:7b:de:dc:b6:52:b2:06:db:c0:44:2e:47:
8d:02:aa:b2:9b:91:eb:89:5c:bc:08:ec:c8:30:c7:
79:97:59:47:f4:02:04:04:4b:35:40:f6:ef:a4:92:
3d:b4:71:ab:22:4f:7a:86:9d:54:8c:35:14:76:40:
b1:b3:1f:f7:43:a0:37:c3:62:c6:03:a2:fa:f0:39:
1a:ce:c1:b0:98:0b:1a:c2:24:99:aa:a1:14:37:c3:
fa:9e:19:86:08:14:86:eb:a3:ca:6e:c1:1f:a8:9f:
54:77:d2:fb:7f:e4:50:c7:db:50:10:d2:14:69:bd:
fe:60:39:87:41:72:1b:8a:01:d7:dd:53:b0:b7:6d:
95:42:b5:73:2e:28:4b:9f:d9:f2:88:b2:bf:ed:9e:
c1:32:a6:1b:00:cb:df:01:81:27:b5:30:60:eb:c7:
6a:d3:52:25:e1:79:cb:b3:7c:75:0d:7e:6f:d7:31:
72:c3:a9:92:07:e1:7e:f0:2b:21:f3:98:8f:98:52:
3c:b9:25:ad:82:a6:0c:16:fc:30:8d:6b:5b:72:3b:
b4:be:1f:f0:ec:de:e9:6f:7a:63:27:79:3a:07:f2:
c8:56:26:02:cf:df:1f:c1:ad:2d:f6:73:01:42:36:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:B7:70:00:8A:E3:F0:E2:98:14:AD:9B:D7:DF:FF:66:06:01:33
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/bA23cACK4_DimBStm9ff_2YGATM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
91.186.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:4a:bc:d4:aa:5e:a0:70:00:2f:5e:15:0c:61:56:8d:14:c8:
71:7f:77:32:2a:67:01:da:3a:b1:58:d1:e8:41:15:cd:ff:85:
dc:43:09:13:cd:7d:c9:fa:75:b7:de:0e:98:ab:5f:f2:23:a1:
3f:4c:38:2d:96:1c:8a:0e:ae:d3:49:cb:81:b2:a4:99:34:2f:
7c:76:46:65:16:d9:ff:69:9b:36:ac:b0:c8:6f:20:ce:34:b0:
a4:7b:74:6f:04:15:39:39:7c:db:e4:42:4a:ef:86:19:77:c1:
81:c3:cb:77:29:44:70:f1:90:b7:84:a4:0e:17:37:9b:72:37:
0f:87:0f:71:f8:e3:c6:3d:ee:58:26:5d:b6:df:94:d2:05:4f:
13:43:99:92:2c:5a:74:d6:81:89:b2:59:d4:f7:82:5a:6a:52:
55:10:51:b3:05:72:ba:50:98:6d:38:a2:ee:b9:6c:54:2b:cc:
b7:dd:0c:7e:36:02:c3:a3:3a:61:7b:53:68:92:7f:d9:3e:f5:
a5:59:df:56:92:b0:3f:30:fd:cb:71:f6:ef:73:fb:96:ef:40:
51:02:e3:ef:33:eb:3d:db:2d:26:5a:0d:17:05:65:12:3a:e6:
b3:2e:62:de:3b:f7:54:aa:cb:93:40:42:bc:5b:0d:b6:e2:6f:
fe:0f:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 20:38:58 2023 by rpki-client on console-ams.rpki-client.org