Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/__Bv8Gs42m5Zvf7QfaYbkvyYUM0.roa
File: __Bv8Gs42m5Zvf7QfaYbkvyYUM0.roa (raw, json)
Hash identifier: BzmRSkxGRpPTZ9lJEOf3eK9Y6nkGTMXOi2UaxCJbU3s=
Subject key identifier: FF:F0:6F:F0:6B:38:DA:6E:59:BD:FE:D0:7D:A6:1B:92:FC:98:50:CD
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 018571B0CEB14C7358798EFBA8F500F945B5
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/__Bv8Gs42m5Zvf7QfaYbkvyYUM0.roa
Signing time: Mon 02 Jan 2023 08:54:50 +0000
ROA not before: Mon 02 Jan 2023 08:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47543
IP address blocks: 194.26.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ce:b1:4c:73:58:79:8e:fb:a8:f5:00:f9:45:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Jan 2 08:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff06ff06b38da6e59bdfed07da61b92fc9850cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:0b:3a:3f:ed:d9:cb:90:ce:c4:62:21:b7:
23:49:a6:8a:42:2e:ea:01:76:46:e4:97:f6:5e:9f:
c9:48:8a:87:23:03:9e:8a:ef:2f:f1:8d:50:7e:b8:
02:b1:22:a2:0c:59:f2:63:17:f7:f6:f9:2f:48:ed:
c1:14:6e:95:cb:68:cc:9e:84:51:25:d3:fe:9b:15:
82:d0:9b:01:3f:98:88:77:85:ef:8f:d4:5e:1f:8b:
c5:17:8a:6e:c7:55:7c:6d:33:3e:a0:da:cd:c2:3d:
a3:ae:99:d0:10:be:50:dc:65:23:65:eb:b6:80:e9:
40:78:01:a2:3d:26:26:80:8c:9c:45:5c:c5:20:92:
d1:4a:2a:16:a8:7f:42:3b:d6:06:69:a7:57:89:2b:
4e:d0:35:0b:0e:d2:cf:6c:e1:4a:eb:d8:8c:88:8f:
bb:85:ad:54:74:c3:ff:60:37:93:fa:5a:52:7c:36:
7a:df:51:bd:7f:d0:5a:9e:4f:e0:f2:98:5e:2e:2e:
1d:ac:e1:df:cb:88:93:9d:7f:e2:63:c0:47:49:2e:
05:59:fe:58:b9:0c:c3:4d:57:58:08:77:a9:76:b2:
6a:13:dd:8a:22:06:4f:cf:23:6e:a3:48:57:01:3d:
b1:fc:13:92:e4:49:7b:54:00:a9:76:55:e0:5c:3b:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:6F:F0:6B:38:DA:6E:59:BD:FE:D0:7D:A6:1B:92:FC:98:50:CD
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/__Bv8Gs42m5Zvf7QfaYbkvyYUM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.148.0/24
Signature Algorithm: sha256WithRSAEncryption
20:75:a3:4b:b4:f1:4b:2f:66:d9:22:b7:8f:61:bb:b8:30:1c:
1f:dd:ac:8e:7c:3f:63:07:25:65:a0:62:76:eb:2b:a8:53:47:
77:c8:8a:f1:28:2e:09:b7:f4:f2:96:5d:8c:3c:74:11:c0:67:
fb:61:43:69:c1:e6:a5:90:6b:9e:6e:18:5d:70:bc:8a:e0:ae:
73:2d:95:43:12:c7:b9:2f:cb:0c:f1:2c:20:3b:32:d7:67:8e:
c9:c3:12:92:da:77:1d:b5:11:0e:18:95:45:3e:bc:79:87:ec:
aa:47:9a:95:44:fe:e1:e4:d8:05:bf:f2:16:9c:58:85:b0:a3:
9e:ad:a0:8c:48:fb:3a:a3:56:63:aa:8a:ab:95:bf:a8:12:61:
a9:77:10:04:7e:8b:36:fe:44:91:6d:96:6f:ae:35:1b:ce:78:
36:2c:db:3b:11:d5:93:7c:3d:c9:4e:70:b1:0a:be:e0:49:d0:
ba:87:ba:b2:0a:05:09:b7:77:f6:c3:12:c9:68:a0:70:03:3f:
74:ca:fa:4b:e1:4c:00:92:11:63:fd:9d:99:c8:84:4a:ea:49:
44:28:73:ec:77:26:d7:02:a1:7d:47:ca:01:a1:d2:dd:75:ad:
42:f5:01:bb:72:3c:d7:c0:8e:49:c6:e0:46:af:8b:c8:75:2f:
24:11:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:00 2024 by rpki-client on console-ams.rpki-client.org