Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/2BiQ8rpWY9Pwm346uOSdhFkxkWA.roa
File: 2BiQ8rpWY9Pwm346uOSdhFkxkWA.roa (raw, json)
Hash identifier: BRKquRjOYcX/3cvIiVLbb8RTGwFaxxONEdEyXb1vY30=
Subject key identifier: D8:18:90:F2:BA:56:63:D3:F0:9B:7E:3A:B8:E4:9D:84:59:31:91:60
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 0187E69D29AC19B9BDE6B256FB7B99567542
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/2BiQ8rpWY9Pwm346uOSdhFkxkWA.roa
Signing time: Thu 04 May 2023 11:54:32 +0000
ROA not before: Thu 04 May 2023 11:54:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.204.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:9d:29:ac:19:b9:bd:e6:b2:56:fb:7b:99:56:75:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: May 4 11:54:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d81890f2ba5663d3f09b7e3ab8e49d8459319160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:d2:6b:68:d2:1b:45:4c:02:e4:2a:25:a9:
0a:08:e8:80:66:8b:53:24:af:56:5e:19:05:e7:93:
bd:b9:b9:3a:29:72:aa:b4:22:80:4c:6c:dd:d7:6c:
32:57:ff:7c:c3:43:be:b2:54:8a:ab:f0:f1:4a:8b:
4a:1d:2c:7b:56:d8:75:ac:0b:90:68:e8:41:7f:0d:
94:bf:cb:31:fd:eb:e4:cc:48:83:5a:cb:08:3b:c6:
75:6f:85:8b:13:3d:00:63:75:85:82:a4:5c:e6:6a:
5e:2b:ab:fe:d7:01:6f:54:f6:0a:76:b1:c9:07:cc:
27:8f:22:fc:7a:84:c2:ce:fd:e9:34:9b:77:5e:01:
12:e0:61:cd:af:fb:ad:2c:84:4b:1b:82:6d:2b:88:
fe:99:d9:84:d3:07:5f:a3:37:99:82:a4:d3:ea:01:
74:52:98:6c:90:59:6f:28:21:f2:2f:35:e4:8e:ae:
f0:12:67:f8:b1:19:69:56:e1:7e:bc:13:4f:01:99:
a9:7f:e2:94:39:6c:98:25:7e:df:4c:f7:68:81:80:
e8:a0:76:0a:ce:7c:8e:02:19:6b:44:f7:91:f7:3f:
02:d9:0d:a1:07:3e:fb:fe:8e:c5:7f:b1:a4:b0:f4:
ba:5f:d6:65:33:50:3f:20:d8:37:20:16:d4:0e:a7:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:90:F2:BA:56:63:D3:F0:9B:7E:3A:B8:E4:9D:84:59:31:91:60
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/2BiQ8rpWY9Pwm346uOSdhFkxkWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4f:b0:c7:54:a2:c1:7f:10:e8:7e:6b:be:61:87:ce:6c:16:
e9:0d:c6:c7:88:1c:da:88:18:a6:89:83:26:ef:08:81:a3:08:
31:ce:15:7d:e2:3b:a5:7d:6e:01:62:73:6e:34:c0:f7:7f:44:
10:3c:ca:e5:5c:51:53:a3:e2:f1:ff:b2:da:9a:b5:3d:49:93:
3e:0a:82:ef:15:41:52:19:81:e9:a2:76:cb:85:59:b5:af:7f:
7b:94:20:97:b5:4d:dd:c8:56:df:63:eb:2c:8c:fc:6a:24:1c:
97:6f:97:9d:17:fd:85:6b:84:4c:30:86:4b:44:b1:66:cd:7d:
34:aa:c6:91:14:e4:b6:88:22:8d:df:bd:7e:c1:ea:f4:a0:6f:
b0:a6:25:31:0a:0c:66:aa:93:b5:fc:e3:79:b0:b3:ba:ca:ab:
99:e4:d4:1d:b9:07:ae:83:0a:0e:d6:89:8b:59:84:d9:1e:18:
70:df:04:46:89:6b:66:a9:cc:fa:ce:55:52:c4:75:7d:65:82:
99:18:14:ae:3a:c4:38:88:ae:69:7f:32:e3:c4:7d:e9:45:7c:
5d:bc:b2:2d:0b:ae:69:cf:c5:0f:a9:86:8e:e1:f6:21:7c:38:
ab:9c:a7:f6:aa:93:50:e2:9d:fc:80:57:33:f5:78:e6:88:e8:
04:85:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-ams.rpki-client.org