Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/b82Gu0JX8R-skD9tBDVIxVsRxaU.roa
File: b82Gu0JX8R-skD9tBDVIxVsRxaU.roa (raw, json)
Hash identifier: PBkHMZ+NQOmZKemR5DLdyS7XQB/9O8SOnT1s2wHJI+w=
Subject key identifier: 6F:CD:86:BB:42:57:F1:1F:AC:90:3F:6D:04:35:48:C5:5B:11:C5:A5
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018926ABF57992E80F595FE58A433E66BE1B
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/b82Gu0JX8R-skD9tBDVIxVsRxaU.roa
Signing time: Wed 05 Jul 2023 15:29:10 +0000
ROA not before: Wed 05 Jul 2023 15:29:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198441
IP address blocks: 185.86.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:ab:f5:79:92:e8:0f:59:5f:e5:8a:43:3e:66:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jul 5 15:29:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fcd86bb4257f11fac903f6d043548c55b11c5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:49:d8:2a:f6:b1:25:20:b4:97:54:f1:71:
5a:e2:33:ee:39:b3:96:13:06:2f:6e:bd:42:9d:c8:
d4:f4:0e:05:13:b2:43:62:82:0a:9d:d7:53:cf:e4:
a0:c8:ee:d5:aa:62:b0:fa:21:b1:77:b0:ef:d1:8f:
cc:b7:75:92:8e:94:d5:e1:eb:64:72:ee:61:d7:2e:
7f:77:1d:a8:1a:fe:cb:3f:61:08:e9:2d:23:91:96:
e1:64:31:a7:33:68:30:87:b9:4d:bc:ad:01:72:47:
79:dd:3a:f7:a1:1d:33:95:70:1e:42:3b:f2:76:0f:
99:4c:83:56:9e:17:27:fe:43:ba:d6:58:d7:3f:9a:
0d:ae:e8:f5:5f:a6:fa:6d:57:db:48:36:51:3f:79:
ac:bb:11:53:f6:5e:16:4f:5a:62:20:ae:93:6c:5c:
90:0c:e3:d8:a2:56:9a:a2:9b:08:9a:19:a2:af:93:
c6:a6:37:37:6b:39:55:f0:97:ec:62:52:0b:21:75:
b7:43:da:dc:1a:5e:b6:c2:f7:1d:ec:7d:df:02:a0:
18:00:bb:3f:c5:2b:e5:a9:15:3a:14:ab:be:b9:f3:
0d:e7:7d:84:0c:a3:cc:6b:ee:b1:8c:29:07:05:3e:
1b:db:b4:6d:a9:99:b0:40:b2:54:56:62:1b:e9:76:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:86:BB:42:57:F1:1F:AC:90:3F:6D:04:35:48:C5:5B:11:C5:A5
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/b82Gu0JX8R-skD9tBDVIxVsRxaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:26:92:d0:aa:86:27:e1:f3:d2:4c:e4:62:78:03:9c:f2:b6:
e0:ac:84:b4:45:da:7e:23:5c:9e:a0:db:dd:5f:10:83:d2:9d:
e4:ad:34:9c:05:bb:58:a0:84:b6:15:04:32:f5:03:51:9e:87:
4e:a4:29:50:e5:87:03:e7:82:aa:0a:56:a0:d1:22:eb:9a:1b:
6c:43:2d:15:3c:dd:c9:3c:18:bd:b7:a8:88:9d:0b:ad:88:10:
0c:db:70:f2:5e:e2:bf:c4:e9:aa:b2:95:18:3c:6c:99:d7:aa:
d9:3a:07:84:be:fe:1e:97:97:82:19:bd:60:2b:c0:7e:a5:f6:
45:50:ba:93:8c:8c:52:20:10:f2:b1:b4:6f:96:67:6d:bb:58:
10:3f:bd:86:b2:a9:17:74:33:4e:22:14:34:b3:a5:fb:37:42:
1f:72:04:7c:f7:cc:2d:d2:c7:e8:68:a9:20:6b:4c:8f:5c:37:
2b:ee:1c:65:bf:f4:d8:63:da:fc:58:b8:b2:f4:f6:5c:b9:cb:
64:6d:7b:5b:b5:cd:b7:23:a9:5b:6a:3a:08:58:4c:ec:7e:f2:
65:88:15:33:d4:20:97:ac:01:25:63:67:b6:d3:2a:0c:93:ba:
56:5d:dd:c0:9c:47:ed:f3:ea:03:60:78:15:99:26:a1:cc:3b:
a0:fb:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:11 2024 by rpki-client on console-ams.rpki-client.org