Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/bBjE3SYXR4MQOoLxeCn2wYfi7Q4.roa
File: bBjE3SYXR4MQOoLxeCn2wYfi7Q4.roa (raw, json)
Hash identifier: pXP6i4nZvVLA7JToOIVowUXIy6QJP5TEAsO3mF168JA=
Subject key identifier: 6C:18:C4:DD:26:17:47:83:10:3A:82:F1:78:29:F6:C1:87:E2:ED:0E
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 018CB620E50CC5368E2FE48150C3E90AFFC3
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/bBjE3SYXR4MQOoLxeCn2wYfi7Q4.roa
Signing time: Fri 29 Dec 2023 15:10:58 +0000
ROA not before: Fri 29 Dec 2023 15:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39738
IP address blocks: 82.86.32.0/19 maxlen: 19
82.86.0.0/19 maxlen: 19
82.86.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:20:e5:0c:c5:36:8e:2f:e4:81:50:c3:e9:0a:ff:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Dec 29 15:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c18c4dd26174783103a82f17829f6c187e2ed0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:27:52:96:fb:06:7f:fe:3e:d4:d8:49:62:
0f:6e:5c:1a:78:8a:7a:90:7b:28:1d:fd:94:b8:f2:
17:80:f3:10:8d:e5:3b:35:50:75:41:64:22:49:14:
75:51:1f:8e:29:93:8d:d3:71:2d:a4:a4:7f:51:07:
d7:c7:76:53:8d:3a:92:62:18:61:f8:62:b6:65:fd:
fe:e5:de:e5:2c:b9:51:34:3a:7e:bb:4d:b5:1b:f2:
50:1d:2b:a4:f9:40:1f:d7:46:a7:cc:90:25:e1:54:
d6:67:92:01:8b:22:17:72:ce:e3:59:26:29:31:13:
1d:ce:06:fa:0f:45:9b:f5:27:55:95:f0:cb:89:88:
1e:6b:11:f0:4c:75:4d:2a:b2:0e:e5:77:66:55:5e:
4f:e0:c2:ad:ff:17:4f:4f:75:0f:de:4b:89:04:b5:
15:27:c4:44:16:5c:d0:53:fd:e2:4d:6e:3c:26:7d:
1b:ce:85:9f:ec:ac:19:b5:b4:75:73:44:b0:76:26:
cd:97:18:b0:1e:e7:d9:54:e0:32:ef:48:fb:de:b3:
a4:bb:e8:af:f0:69:b5:b4:e1:23:1f:a7:17:e3:a0:
28:b1:68:85:26:24:b9:f3:9d:02:57:67:5c:d8:28:
d7:95:c5:1c:19:e0:2f:01:1b:4b:02:01:97:f9:8a:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:C4:DD:26:17:47:83:10:3A:82:F1:78:29:F6:C1:87:E2:ED:0E
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/bBjE3SYXR4MQOoLxeCn2wYfi7Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:b7:3d:31:d0:02:50:7d:18:df:65:f0:6c:39:7e:c5:b6:d4:
7e:43:6e:b8:21:3e:2a:b1:70:ee:8e:b1:d1:2b:67:56:ac:1e:
2a:9b:4f:0e:98:5c:2c:c4:4d:3b:1f:40:e1:8c:5c:93:75:c1:
2e:fc:92:f2:aa:6f:45:ad:35:56:0e:da:5a:94:8b:36:0a:70:
b6:0a:2c:08:3f:e8:13:a6:f7:5a:e6:75:08:95:10:5a:66:03:
65:d0:0a:c5:4e:07:69:80:34:be:32:1e:2c:3c:ef:65:21:e8:
96:7e:e6:10:28:1f:dd:68:65:7d:42:73:f7:58:14:5f:3b:04:
5d:a5:58:bf:c8:c3:ea:93:a4:4f:d4:63:4f:e4:04:fc:28:1b:
91:2c:3b:09:c7:f7:27:ce:a0:3b:d3:09:fc:84:67:63:bc:f0:
68:d1:82:70:8e:41:e0:d3:24:5f:12:db:13:0a:42:15:9b:fc:
bc:1f:89:6b:11:2a:4b:b2:bf:45:f1:41:f6:d1:10:55:1e:22:
58:dc:8f:68:c3:68:05:a7:ea:f2:2d:54:1a:16:1f:b6:88:a0:
c2:44:ba:eb:82:4b:1f:0d:3b:60:28:ed:61:ee:7a:17:40:28:
fd:b2:97:73:d3:b7:6b:a8:b9:1e:3f:dd:70:a0:76:e3:bd:67:
48:23:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:33 2024 by rpki-client on console-ams.rpki-client.org