Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/G9S2eH292YTv6YRqMbEzTUjBNd8.roa
File: G9S2eH292YTv6YRqMbEzTUjBNd8.roa (raw, json)
Hash identifier: HFwnfdSH2t6aHk2tA6IJsVKFfdJwnfP0nxn5U1bOF2c=
Subject key identifier: 1B:D4:B6:78:7D:BD:D9:84:EF:E9:84:6A:31:B1:33:4D:48:C1:35:DF
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 01856E78EECA16F05BCD2E80ED39F837D3BA
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/G9S2eH292YTv6YRqMbEzTUjBNd8.roa
Signing time: Sun 01 Jan 2023 17:54:57 +0000
ROA not before: Sun 01 Jan 2023 17:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 194.50.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:ee:ca:16:f0:5b:cd:2e:80:ed:39:f8:37:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Jan 1 17:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd4b6787dbdd984efe9846a31b1334d48c135df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:e4:31:4c:be:2f:8a:cc:75:be:fb:54:22:
d3:63:0d:cb:32:89:93:24:be:d8:e5:49:56:99:29:
c8:28:32:8c:b5:eb:ac:69:37:6a:05:3e:45:e8:01:
5a:de:02:2d:cf:51:2d:f0:5b:f3:f1:25:25:0a:c8:
90:ef:df:56:0b:51:16:7e:74:18:a5:19:f2:b5:47:
25:89:5b:03:61:c6:df:57:6a:d2:40:1a:9a:92:1b:
38:df:9c:55:dc:a2:ef:3b:4b:74:4b:ea:79:06:e7:
1a:9b:65:29:ae:ce:aa:0c:78:ca:da:da:b7:b8:57:
45:ba:f6:94:d3:48:47:be:c1:5d:5f:08:b6:a7:c8:
5a:5d:3b:47:70:f7:86:72:8b:58:23:4f:c5:65:cd:
5f:5d:29:04:1f:0d:cb:e0:9d:2f:f4:72:85:1b:99:
c1:41:98:f3:a6:58:06:df:0d:86:92:43:a5:e7:59:
e1:2a:ad:37:ed:ab:7c:26:07:32:51:99:d9:fd:c9:
1c:05:1c:08:89:d6:9a:5e:1c:cb:b8:1e:0c:10:b4:
cb:e3:5e:5e:a5:e4:cf:42:60:3f:d4:3f:a6:7e:3c:
65:12:6c:9a:f5:08:21:7e:ae:45:89:a1:31:1d:b3:
d5:e3:aa:a8:b0:da:d4:b2:f4:02:d0:07:9f:7f:2e:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:B6:78:7D:BD:D9:84:EF:E9:84:6A:31:B1:33:4D:48:C1:35:DF
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/G9S2eH292YTv6YRqMbEzTUjBNd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.26.0/23
Signature Algorithm: sha256WithRSAEncryption
84:63:c6:58:42:71:b1:3b:43:11:0a:d6:d2:54:04:99:74:54:
ef:ca:92:26:f6:2f:05:82:8b:22:f7:68:c4:18:49:33:12:9a:
51:2e:5b:b5:5c:fe:37:95:e0:96:19:f4:28:ea:ad:88:01:e2:
00:6f:88:fd:76:42:21:99:e6:3c:e2:cb:94:f7:88:9d:7e:e0:
48:fb:f4:28:11:40:28:bf:20:68:a5:c5:57:13:fb:48:84:4c:
7c:3d:a2:9f:a9:76:e8:1b:ff:10:c3:4c:2d:bb:ef:c5:e9:e3:
76:1a:4a:c6:cd:2f:5a:fe:97:54:7a:eb:27:25:d1:36:47:ea:
4f:63:3e:b4:70:fb:ef:73:6a:7c:59:e9:fe:c1:26:77:89:99:
68:6c:9f:6b:d4:18:a0:2a:1c:16:83:c1:2d:38:13:65:dd:55:
00:09:87:8d:23:22:9c:fc:a7:62:ea:f4:bf:b4:6d:87:7d:1e:
d9:8f:e1:6e:7d:8b:23:a6:cf:f4:b3:00:c0:56:a0:91:72:20:
8f:a2:4a:85:76:b2:fb:6b:0e:a0:ef:b5:ab:c6:9d:20:e9:d6:
03:70:1b:b7:95:29:82:0e:1a:bc:5c:bb:39:ef:ef:ae:bb:a2:
70:11:ad:8e:82:b3:16:1d:e0:53:d0:74:42:33:0d:5b:4b:f6:
9a:11:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:13 2024 by rpki-client on console-ams.rpki-client.org