Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/a92M7AVwjD-TJ8_kQt1XtljqCVE.roa
File: a92M7AVwjD-TJ8_kQt1XtljqCVE.roa (raw, json)
Hash identifier: hhewJlNKxqYSi8iOhIL+daN6srcsEAcVFt1iIj9tSsM=
Subject key identifier: 6B:DD:8C:EC:05:70:8C:3F:93:27:CF:E4:42:DD:57:B6:58:EA:09:51
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01856FCBAD3668EC7F0EF7D85A4D3965D47E
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/a92M7AVwjD-TJ8_kQt1XtljqCVE.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202984
IP address blocks: 185.231.244.0/24 maxlen: 24
185.231.246.0/23 maxlen: 23
185.231.245.0/24 maxlen: 24
194.147.114.0/24 maxlen: 24
2a0c:9300::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ad:36:68:ec:7f:0e:f7:d8:5a:4d:39:65:d4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bdd8cec05708c3f9327cfe442dd57b658ea0951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:2f:fe:ee:a4:7f:45:47:2a:16:23:86:49:
97:97:4c:1f:f8:c6:65:68:58:82:8b:65:65:13:b8:
8f:6f:a4:db:76:ee:5f:41:9c:91:9f:d6:89:36:87:
bc:7e:b4:99:bf:8d:16:3d:47:19:25:93:fa:3b:86:
aa:c3:cc:24:5f:cc:d2:16:e1:0b:09:41:5c:ee:23:
fb:56:6c:9c:3e:6f:f5:52:78:d8:70:6b:cf:5c:69:
83:57:34:27:9c:11:02:89:bb:5b:aa:f4:f3:c0:52:
c2:1b:b7:69:e4:e0:b0:dc:87:3b:df:d7:d8:9b:ba:
dd:38:5e:31:53:9d:b1:6c:6f:65:7c:aa:bf:4a:37:
a6:25:76:a0:aa:3a:0c:78:08:cb:7d:e7:d9:9d:e8:
bc:b6:f2:1c:81:36:e3:8e:0e:77:16:3e:d4:ac:fe:
70:15:24:d5:ac:06:d2:1d:a7:29:cd:9e:c2:5a:3a:
df:9a:ea:6b:70:f1:8a:b3:4f:d1:18:6e:27:b0:61:
8f:18:0d:77:0e:31:f4:d8:7a:5e:a6:e0:6a:a2:3b:
b4:59:21:46:50:f9:86:62:ef:10:e3:c1:e8:d4:f2:
55:9d:35:81:31:c8:f2:a0:02:a8:5d:d2:92:c3:2d:
78:25:ff:e7:9c:64:86:9e:bc:e2:b3:39:ce:fb:d6:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:8C:EC:05:70:8C:3F:93:27:CF:E4:42:DD:57:B6:58:EA:09:51
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/a92M7AVwjD-TJ8_kQt1XtljqCVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/24
IPv6:
2a0c:9300::/29
Signature Algorithm: sha256WithRSAEncryption
27:a1:f5:f1:f1:f8:e9:04:2a:52:54:f3:33:35:98:60:80:88:
5f:6c:08:03:82:25:3a:c1:9c:47:ac:4d:33:76:22:bc:4f:5a:
87:74:83:41:f6:c6:f5:fd:35:97:39:3c:d5:2a:88:d3:91:73:
70:f2:90:bd:d7:33:74:f2:62:e3:bc:a3:68:c6:83:f5:d0:e8:
de:8f:61:f4:3e:24:33:00:38:d8:de:f6:32:61:cb:5d:53:9a:
f6:42:2f:d0:34:d1:fc:30:36:57:43:e5:4d:3f:9a:a1:78:0d:
47:0d:64:37:9e:e8:91:f8:f4:b7:ee:74:4a:65:86:f7:60:f1:
f0:23:86:2d:2d:56:b8:72:7c:4a:90:16:54:fe:09:70:dd:63:
8c:63:08:6b:3e:61:e9:a0:3d:7c:af:cf:46:df:98:c0:6f:76:
1d:ae:b9:18:1d:eb:da:30:cb:73:07:cd:c5:c3:95:37:57:e6:
3e:8b:4c:44:c1:83:66:0e:89:8e:28:78:2b:2f:31:6a:8b:0e:
b3:ea:aa:72:2b:b4:fa:81:e2:e3:2e:75:6d:54:cb:61:2d:86:
65:80:d0:f6:82:b8:d7:4e:fa:b0:1b:0d:e7:2d:0b:9d:cb:35:
97:cb:ce:63:c2:a1:18:e6:53:38:2c:18:ef:4c:96:66:bd:3e:
a7:05:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:34 2024 by rpki-client on console-fra.rpki-client.org