Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/xkJhIvhT2z2kUMXd_DmdpeUQ33E.roa
File: xkJhIvhT2z2kUMXd_DmdpeUQ33E.roa (raw, json)
Hash identifier: RJyZtGYFtUEtXk9TAPDPk+72pQYSY9GPSmfLArHuBJw=
Subject key identifier: C6:42:61:22:F8:53:DB:3D:A4:50:C5:DD:FC:39:9D:A5:E5:10:DF:71
Certificate issuer: /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial: 01856C9390F00CB65692F2761C143F0F54F7
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/xkJhIvhT2z2kUMXd_DmdpeUQ33E.roa
Signing time: Sun 01 Jan 2023 09:04:48 +0000
ROA not before: Sun 01 Jan 2023 09:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203200
IP address blocks: 185.122.76.0/22 maxlen: 22
2a10:d340:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:90:f0:0c:b6:56:92:f2:76:1c:14:3f:0f:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Validity
Not Before: Jan 1 09:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6426122f853db3da450c5ddfc399da5e510df71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:a4:89:a8:64:6b:3c:f5:ec:87:7a:fc:56:
48:a0:f8:1c:e8:6a:89:d6:5d:0e:c2:a6:34:df:41:
cf:65:1b:c9:31:20:86:e8:e1:c8:28:90:8a:d0:71:
4f:98:26:1d:25:2e:f6:18:36:a2:e1:c5:e7:e5:89:
78:48:13:db:59:2d:29:30:49:47:5e:82:94:96:bf:
83:38:b9:dc:d6:dc:31:ab:a0:a9:b5:f2:4d:97:62:
38:00:10:3d:56:d9:5e:2d:a8:ec:ce:48:a5:50:bf:
33:76:a0:ba:df:e5:79:4f:a5:4f:ce:8f:04:b2:13:
88:19:9e:e2:24:41:e8:f2:f9:a7:fd:f1:e9:0a:d4:
b7:6f:4e:08:06:15:d3:fa:94:b4:5b:62:8c:d7:98:
65:22:0d:46:ad:f0:ab:ac:46:6d:ec:3a:c2:2b:d8:
c5:34:2f:b2:53:11:35:68:ac:d1:a5:8a:06:41:b1:
d5:71:8d:af:6e:32:0a:37:7c:6c:0f:3c:e7:49:7b:
ca:ad:5b:a7:04:63:62:0f:11:c2:99:e7:6e:11:19:
fa:f3:31:72:0d:61:cc:af:5b:92:92:c3:c6:cd:66:
38:df:a4:9d:55:d5:69:e5:84:66:de:61:75:1d:87:
e1:a9:24:6d:85:96:c4:7e:af:58:11:95:48:90:f8:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:42:61:22:F8:53:DB:3D:A4:50:C5:DD:FC:39:9D:A5:E5:10:DF:71
X509v3 Authority Key Identifier:
keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/xkJhIvhT2z2kUMXd_DmdpeUQ33E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.76.0/22
IPv6:
2a10:d340:1::/48
Signature Algorithm: sha256WithRSAEncryption
70:f9:fc:1a:08:c9:6e:24:9e:bf:da:19:a6:0a:a8:15:8f:7b:
15:6d:38:95:30:56:20:00:b8:d6:8d:bc:e6:6b:64:95:98:a0:
96:86:b1:fd:cc:7c:e7:6f:38:92:5d:4d:a0:07:87:45:5e:c6:
fb:97:cb:06:e8:aa:c7:15:f2:3f:29:e8:f3:aa:b9:e5:ae:c6:
bd:ee:8a:03:45:90:63:da:2d:46:19:6c:8a:dd:07:e7:9e:b5:
be:ed:7f:b4:55:02:de:52:44:5b:ba:d3:6c:36:81:92:82:6b:
96:ce:13:65:88:ec:73:97:0d:76:13:d2:72:e3:c1:da:2e:07:
45:81:6e:66:30:a1:01:97:37:64:f5:11:2d:bf:01:47:ab:7f:
69:96:c4:6b:29:29:09:25:a0:7e:2c:9c:40:47:7d:2f:33:7f:
b0:39:db:ef:a5:02:b0:68:52:86:8b:30:11:b1:ef:64:cb:3d:
55:9e:0f:5e:51:07:05:4a:b8:15:bf:e0:91:02:bd:5c:7c:e7:
0a:d7:4e:e2:bc:3b:d6:24:20:7d:29:51:eb:4a:5b:8c:68:ef:
0a:ce:49:f1:f0:14:ff:82:cc:bb:6c:c4:db:64:5a:b0:b3:cf:
fc:54:d6:d1:94:cb:2c:09:17:82:33:ee:58:3a:7a:b4:e8:4e:
9c:9c:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:00 2024 by rpki-client on console-ams.rpki-client.org