Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/z6ALw8PfaGs5EBI7_U_Ujpsao7o.roa
File: z6ALw8PfaGs5EBI7_U_Ujpsao7o.roa (raw, json)
Hash identifier: EPC+L0kSdMduCBJektttn3WLqf5zHs45SCmGcKFY5Vo=
Subject key identifier: CF:A0:0B:C3:C3:DF:68:6B:39:10:12:3B:FD:4F:D4:8E:9B:1A:A3:BA
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CBF30D761BC3C32C8FCB46EB53D28BCD0
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/z6ALw8PfaGs5EBI7_U_Ujpsao7o.roa
Signing time: Sun 31 Dec 2023 09:24:58 +0000
ROA not before: Sun 31 Dec 2023 09:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:30:d7:61:bc:3c:32:c8:fc:b4:6e:b5:3d:28:bc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Dec 31 09:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa00bc3c3df686b3910123bfd4fd48e9b1aa3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:28:19:ad:6a:d7:f2:a7:86:52:d9:00:36:
1c:10:79:4d:26:96:4f:32:63:76:3c:4b:75:6f:08:
38:16:95:49:95:23:93:0d:1b:b3:b2:de:2c:d1:15:
c0:e7:73:b1:1a:5a:5f:bc:86:ef:df:71:c1:76:50:
06:56:86:a6:33:3c:dd:6b:a3:17:05:59:7b:b6:32:
ee:9e:c2:00:4f:3e:de:6d:15:e6:8a:b8:9f:92:d2:
18:88:d4:e3:74:d0:7c:fb:a6:13:c7:77:cb:19:f5:
8f:1c:be:6c:6a:90:06:b6:48:2e:b6:c8:c7:42:0c:
0b:70:83:f5:fd:bb:b8:3b:c4:4d:b2:79:b8:29:be:
c6:3a:7e:02:a1:d9:b3:49:eb:c3:cc:a9:c8:d6:2e:
75:76:e9:ef:dd:b1:4c:99:54:66:a8:c9:01:fd:12:
f9:10:60:6f:4e:d6:70:c4:ae:73:08:5e:81:ec:91:
b3:ff:3b:ce:7d:f8:ba:0c:15:5a:3c:f1:7e:c2:5f:
2f:41:c4:fa:18:83:06:3d:cf:91:54:a8:95:14:f6:
02:24:56:45:a1:71:65:5c:ce:91:c8:84:69:94:c1:
04:63:a3:87:5d:d0:87:72:d0:bf:9e:b5:13:93:67:
ab:57:c6:d1:52:24:ff:1f:20:81:fe:6b:5f:35:b3:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:0B:C3:C3:DF:68:6B:39:10:12:3B:FD:4F:D4:8E:9B:1A:A3:BA
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/z6ALw8PfaGs5EBI7_U_Ujpsao7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
78:04:e0:c7:86:90:ad:6f:cd:a9:31:6b:86:6d:ca:91:03:21:
98:8d:20:80:46:a8:b2:4b:38:bb:d7:49:94:01:0f:d9:1a:89:
27:0c:95:11:2d:a2:62:36:a1:fc:c6:ef:38:4d:b6:95:22:00:
98:08:93:6e:22:1a:1a:2c:6b:b3:ba:e5:4e:4e:ed:3d:d6:c3:
8e:18:1b:4f:df:72:27:3d:57:45:f6:18:f5:87:19:53:ef:96:
69:6f:03:f4:29:82:48:90:cb:40:33:a0:fd:d5:67:91:62:e2:
95:0b:b6:5f:1e:5f:54:3e:46:fc:dc:a0:6a:ae:4f:50:ef:c6:
b4:6f:89:3b:0e:26:ad:14:5e:4c:9e:35:1e:e8:66:42:b8:55:
5c:37:93:62:7c:2d:16:ee:c6:d4:cf:34:29:57:d7:6f:d7:65:
ab:c9:86:7a:d5:51:0b:e0:e6:16:13:a1:7a:95:af:d3:a2:81:
2b:a3:4e:0f:5d:1e:5e:2a:e4:dc:cd:97:4a:4a:1f:f2:cc:10:
cf:28:71:2f:6e:c3:2f:58:ba:fb:d4:3f:a3:62:ed:cd:d3:ab:
93:40:a4:50:35:c5:97:9e:5f:4c:af:ab:32:aa:e1:ab:23:9a:
64:e7:d1:bd:58:de:7c:bd:85:28:80:50:09:e4:b6:04:d7:4a:
cc:2e:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:22 2024 by rpki-client on console-ams.rpki-client.org