Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/bt2YOQjSjbasnXoRLMRxkxcSOWY.roa
File: bt2YOQjSjbasnXoRLMRxkxcSOWY.roa (raw, json)
Hash identifier: wGjzAGAOVqBu0c+lONvKusS23sS9zMkFj4TsxHGO+Bs=
Subject key identifier: 6E:DD:98:39:08:D2:8D:B6:AC:9D:7A:11:2C:C4:71:93:17:12:39:66
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 01856BD38D4DCCD3B4A902FA35754801D657
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/bt2YOQjSjbasnXoRLMRxkxcSOWY.roa
Signing time: Sun 01 Jan 2023 05:35:04 +0000
ROA not before: Sun 01 Jan 2023 05:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41207
IP address blocks: 89.191.160.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:8d:4d:cc:d3:b4:a9:02:fa:35:75:48:01:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 05:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6edd983908d28db6ac9d7a112cc4719317123966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:cc:02:fe:4b:7c:8c:01:c4:ff:c1:56:00:
a2:71:8d:2a:b2:ca:3b:f7:33:c7:14:1d:b7:c9:f9:
cd:36:d9:4c:6a:21:e9:7b:a0:d9:b8:03:ef:44:d6:
94:6e:2f:41:3e:7a:bc:24:73:21:4e:6e:f6:78:31:
0a:02:5d:38:95:fe:85:ad:18:4a:9e:23:c1:f2:2f:
a0:b0:e7:28:1c:0c:90:d5:7a:a9:6e:aa:5d:85:3f:
09:1e:e5:4e:ed:01:d7:13:c6:77:cf:a6:f2:84:e8:
90:39:c7:58:c8:1c:6c:ac:f2:0f:ad:9f:de:9c:43:
51:bd:32:38:d2:1e:78:be:ab:3c:3f:f3:5f:21:ec:
6c:96:40:47:2c:6e:99:b1:4b:50:9b:ee:51:7d:9a:
c4:8d:ee:9e:aa:36:83:62:02:01:3a:78:fc:2f:75:
92:15:34:a8:3b:cb:73:08:d4:a8:61:76:81:bb:25:
13:a5:eb:e8:81:9c:63:ef:1f:a6:8e:dd:69:79:73:
11:ef:0e:1c:67:c8:11:2f:bb:be:de:aa:87:a6:8f:
33:5f:d5:b8:2d:44:c9:58:f3:56:a5:d2:ca:36:c9:
da:01:cc:e9:0c:32:c0:9a:09:2a:9d:69:35:fa:3b:
3c:1d:31:21:af:3f:87:6b:2c:68:4a:f2:0e:17:a2:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:98:39:08:D2:8D:B6:AC:9D:7A:11:2C:C4:71:93:17:12:39:66
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/bt2YOQjSjbasnXoRLMRxkxcSOWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.160.0/20
Signature Algorithm: sha256WithRSAEncryption
70:61:03:77:2f:55:64:74:a2:34:57:e2:80:23:fa:44:9f:20:
f9:f6:2b:4f:ee:49:31:05:c6:f0:f4:4f:9b:0a:47:e1:4a:bb:
ad:26:ad:97:ef:7a:85:2e:b9:97:a5:a0:c7:0c:26:f4:4e:1f:
62:13:99:9c:75:e4:f4:c7:ae:54:04:af:64:93:ad:93:a1:08:
4f:17:e4:9e:41:54:eb:c6:12:99:c3:72:2f:90:01:29:72:6b:
59:ba:ab:f4:5c:ef:3b:51:1a:bd:52:85:f2:c6:07:e6:b4:60:
3d:2e:21:43:c7:3c:2c:b4:de:03:4b:d3:19:29:72:45:f1:88:
02:33:96:b6:d8:33:6d:d9:1f:c2:f3:46:d4:0d:9f:13:c2:3c:
c6:0e:e4:cf:0d:de:77:e8:21:08:89:85:b2:df:e1:52:19:cb:
ff:dc:86:48:8a:af:ef:0b:0c:40:14:39:02:f1:a1:6d:2d:3d:
53:ee:c8:a1:c0:60:b3:06:55:2f:1b:bd:c2:01:b0:34:99:5a:
9c:c9:7c:13:04:bb:42:a1:af:7c:5e:d4:4f:c8:53:a2:62:bf:
94:bf:e7:b9:f4:0b:db:c3:02:68:00:22:00:6a:f3:b3:79:e0:
52:6f:57:2e:a3:00:d0:83:8a:e4:27:44:56:ca:6e:07:39:3e:
74:ff:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:53 2024 by rpki-client on console-ams.rpki-client.org