Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bcAWis8RRHpoEqsoDq2nTEorJyA.roa
File: bcAWis8RRHpoEqsoDq2nTEorJyA.roa (raw, json)
Hash identifier: UV7KYvDBv9pRpMGzQrZYPIvcak0A2mYJbfqoXZP0dGE=
Subject key identifier: 6D:C0:16:8A:CF:11:44:7A:68:12:AB:28:0E:AD:A7:4C:4A:2B:27:20
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018AB658086E0976AAADFF409799EE567967
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bcAWis8RRHpoEqsoDq2nTEorJyA.roa
Signing time: Thu 21 Sep 2023 06:05:37 +0000
ROA not before: Thu 21 Sep 2023 06:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 185.110.63.0/24 maxlen: 24
123.253.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:58:08:6e:09:76:aa:ad:ff:40:97:99:ee:56:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 21 06:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc0168acf11447a6812ab280eada74c4a2b2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:cb:d5:e8:d0:ab:af:d3:46:8d:d7:67:d9:
7d:64:44:77:4c:df:99:ec:0a:54:0d:d8:ec:6f:9d:
08:71:df:39:ce:52:ff:9c:b5:d0:03:40:94:9f:dc:
7b:d9:46:e7:38:0f:73:5e:b7:14:ef:34:b9:66:a0:
81:d4:86:fc:f7:55:3d:a9:d4:46:cf:b7:a4:a2:c9:
d6:f5:41:2c:dc:aa:31:e6:1f:d7:77:01:de:c8:a5:
9b:1b:2a:b1:81:e3:84:44:be:09:d6:36:8d:0f:c2:
13:5d:b5:0b:77:0d:63:9a:1d:de:99:1b:c9:01:1f:
35:08:d5:f4:1a:08:e1:02:ba:8e:5f:16:24:64:bd:
18:39:bc:eb:6f:eb:bb:23:30:c2:6a:a6:ab:f2:4b:
d5:cd:f0:76:26:82:fe:79:bf:e4:44:a4:d8:cd:53:
3f:9a:06:8b:cb:4e:78:5d:c9:e4:47:1d:fc:ce:8c:
19:5d:94:d6:51:38:ab:d6:c3:2a:fc:1d:65:d6:92:
86:9f:d4:21:2d:fb:e5:e5:af:ba:b4:a7:b7:b5:ed:
08:35:20:c6:4d:5a:85:7c:34:f4:f4:d9:82:f2:84:
fc:7e:65:75:fc:c2:5e:d0:a6:66:61:2a:c6:8b:92:
0e:ba:50:ee:50:6a:be:a5:c5:d7:b3:d3:aa:58:46:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:16:8A:CF:11:44:7A:68:12:AB:28:0E:AD:A7:4C:4A:2B:27:20
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bcAWis8RRHpoEqsoDq2nTEorJyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.213.0/24
185.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:90:9d:c3:27:50:f5:24:64:8b:f8:39:62:b8:5d:7d:85:49:
be:95:ec:87:05:f8:57:30:45:b2:42:94:e1:29:68:4b:b7:ac:
85:d6:48:dd:64:6a:9c:7d:cf:54:3e:7d:cc:84:ae:53:e4:9c:
c0:f5:4a:e3:71:6a:31:81:a1:30:16:72:e2:0d:48:eb:4d:94:
7a:79:45:b4:3a:7b:a5:05:cf:8e:1d:fe:1b:c3:6b:38:32:ae:
00:ef:ec:55:e7:1d:36:ec:7c:3f:b8:3e:e1:ab:3e:5c:0c:8a:
23:80:d1:5e:c7:e2:71:96:cc:2e:ce:af:f0:2e:c7:68:6e:0a:
68:e5:2f:63:f4:d2:71:a9:84:c7:e8:79:91:87:92:b2:8b:58:
9f:f5:fc:03:ab:56:f3:54:3b:2b:50:37:31:a4:2b:69:a5:d8:
ab:71:b9:a3:6e:ea:f2:e7:e9:5b:cd:9a:a3:3f:3e:67:40:11:
24:fb:5c:51:0c:1a:83:22:96:e2:1f:21:e3:81:72:00:ef:80:
d5:a1:1b:8b:6a:41:f6:65:aa:85:c1:3b:fc:8d:3e:c5:eb:cb:
8b:22:2c:72:00:aa:c1:21:d1:e1:3e:26:99:59:9f:88:c9:ff:
47:fa:7b:f1:91:d2:c9:41:d6:b1:34:6d:67:0a:f4:2e:6e:b0:
55:7c:06:e5
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 29 06:23:33 2023 by rpki-client on console-fra.rpki-client.org