Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/bUh2R-7zk5lmBxFI9qR65dedqbw.roa
File: bUh2R-7zk5lmBxFI9qR65dedqbw.roa (raw, json)
Hash identifier: UQBUL8SNoyfkk69SzwfIbm9IPpycxLf/7+/kwzmpJig=
Subject key identifier: 6D:48:76:47:EE:F3:93:99:66:07:11:48:F6:A4:7A:E5:D7:9D:A9:BC
Certificate issuer: /CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Certificate serial: 01856E5D5562FDF97F5D860D2F7D708DD559
Authority key identifier: 92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/bUh2R-7zk5lmBxFI9qR65dedqbw.roa
Signing time: Sun 01 Jan 2023 17:24:48 +0000
ROA not before: Sun 01 Jan 2023 17:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.9.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:55:62:fd:f9:7f:5d:86:0d:2f:7d:70:8d:d5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Validity
Not Before: Jan 1 17:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d487647eef3939966071148f6a47ae5d79da9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:c1:f4:b5:07:1c:a5:19:77:49:29:be:ee:
e8:a7:06:93:20:56:a7:61:f4:d9:20:13:73:9c:b8:
be:c5:e7:dd:8f:d1:2b:3e:70:75:76:96:45:bb:07:
e6:3c:53:7f:33:4a:c3:02:31:24:70:c8:42:c5:25:
b8:a2:7c:55:c5:99:b1:6e:6f:bf:f9:6d:69:56:53:
f2:75:c3:a7:77:4a:c1:ff:2a:1a:68:10:ff:76:f9:
5c:07:9d:23:d1:0e:db:27:02:ec:15:b9:0f:36:23:
9b:0c:fd:cc:67:98:17:d3:56:f5:62:99:3e:69:3f:
df:e2:d9:a5:47:28:7a:91:ca:c4:4f:90:ca:61:b7:
ba:cf:f1:c1:ee:69:f4:0f:71:85:32:d7:e4:6b:03:
2e:5d:ab:14:54:ff:5c:bc:3a:f7:35:3d:f5:7a:be:
25:f8:73:aa:f4:7c:9e:25:74:6c:8f:be:fe:5d:c3:
c1:42:01:d1:af:a1:a0:8f:e7:13:ca:ec:a6:8a:a3:
24:c1:3c:fe:6b:c5:04:87:7a:8c:cb:ef:73:70:b5:
47:3a:42:5c:7b:79:13:83:70:e1:47:f5:cb:99:6d:
8c:27:1d:82:83:18:eb:25:67:e7:ad:2b:e2:c2:ab:
ff:9e:e0:50:a6:57:c6:9f:50:05:33:fc:db:ed:be:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:76:47:EE:F3:93:99:66:07:11:48:F6:A4:7A:E5:D7:9D:A9:BC
X509v3 Authority Key Identifier:
keyid:92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/bUh2R-7zk5lmBxFI9qR65dedqbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:30:f5:b6:cf:b1:74:7c:e1:ff:6d:e0:25:a5:12:38:82:6d:
4c:0c:a3:92:72:ce:c8:ed:40:8d:d8:18:d5:b4:32:4d:9e:b1:
75:42:dc:20:78:7b:c8:34:ff:e2:11:87:b4:d0:fa:06:ab:0e:
e0:26:4e:c8:c0:69:42:8a:f2:ca:cb:20:15:1b:1f:fe:dd:60:
45:4f:b1:23:19:01:0e:9b:cb:e6:f1:05:d8:ac:58:61:be:ab:
20:11:42:e3:cf:ea:3c:dd:03:0f:f4:e1:8d:c4:71:e8:8b:14:
b7:da:63:a9:78:7f:80:0a:5a:98:fb:67:cd:aa:81:ae:03:ce:
22:d9:06:34:0c:43:73:0b:c4:b6:f5:f4:d7:d3:d1:95:f1:ca:
77:ce:1c:27:55:d2:cf:97:86:d1:00:1f:e0:32:22:8d:49:ab:
cc:95:90:3d:be:75:09:93:3b:9c:89:f6:9f:ba:4a:e9:3e:31:
50:f3:b0:aa:48:ea:88:54:0d:09:34:ce:4c:dd:6f:0b:3c:41:
48:ac:45:07:26:9e:18:c5:ab:61:98:68:fd:e1:77:59:ff:82:
3f:e4:db:fd:c8:b2:91:53:bb:68:7e:ea:ae:41:ab:df:bf:a9:
6c:07:66:de:56:10:41:c8:75:f8:e5:e3:b2:c0:16:82:fb:2a:
ff:a4:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org