Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Cc6ALaYebQBfxvSX17DOAwXKg2s.roa
File: Cc6ALaYebQBfxvSX17DOAwXKg2s.roa (raw, json)
Hash identifier: aWJ6hVuNHwhs8JZlHqQwHeOsr42kMRv/D2ZCk1uaI8M=
Subject key identifier: 09:CE:80:2D:A6:1E:6D:00:5F:C6:F4:97:D7:B0:CE:03:05:CA:83:6B
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 018570B98F34FC0C0C668D52A93B6AD12E6B
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Cc6ALaYebQBfxvSX17DOAwXKg2s.roa
Signing time: Mon 02 Jan 2023 04:24:46 +0000
ROA not before: Mon 02 Jan 2023 04:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29585
IP address blocks: 185.102.2.0/24 maxlen: 24
185.102.3.0/24 maxlen: 24
185.102.0.0/24 maxlen: 24
185.102.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:8f:34:fc:0c:0c:66:8d:52:a9:3b:6a:d1:2e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Jan 2 04:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ce802da61e6d005fc6f497d7b0ce0305ca836b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:65:a8:14:86:c5:83:e7:95:93:53:e4:21:
e8:eb:3c:d9:0e:36:3b:c8:df:72:bd:f9:a3:c6:db:
e5:df:54:63:93:d7:29:15:ba:97:08:16:54:c4:fc:
cb:54:99:d5:4f:9e:12:b1:60:72:12:67:6a:80:2a:
99:29:ff:66:c3:f7:b6:32:f4:6b:dc:74:f6:a6:c3:
ae:f1:cb:02:81:95:e3:bb:3b:96:e4:15:d1:09:e2:
4a:a9:82:c6:1e:08:63:a8:a1:9b:bf:d8:6b:fc:a5:
bb:90:d6:90:99:71:17:7c:6d:0f:1c:bd:5b:43:a9:
22:e9:b7:35:6c:88:f9:1d:48:70:ea:51:54:a7:36:
fc:c5:6c:29:91:d9:63:6a:6d:36:ce:6d:3b:11:1c:
bd:d9:c5:1e:ae:19:99:ba:fd:82:fc:92:0b:c3:6e:
7b:0c:35:a5:71:11:d7:86:d4:10:7c:a6:25:8f:5e:
f5:db:ec:32:63:51:3e:e7:8d:b3:e8:27:c7:0d:b6:
ec:d2:15:96:83:dc:7f:1b:bb:1c:24:85:d3:97:f6:
fc:47:6c:7c:45:56:72:6c:52:12:6c:17:c5:1a:0c:
f2:fd:94:3b:f8:c3:d1:26:da:a9:39:e8:f3:4c:95:
a6:b4:09:ee:da:1e:0a:2e:8f:6c:0d:f7:67:6c:22:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:80:2D:A6:1E:6D:00:5F:C6:F4:97:D7:B0:CE:03:05:CA:83:6B
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Cc6ALaYebQBfxvSX17DOAwXKg2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.0.0/22
Signature Algorithm: sha256WithRSAEncryption
06:94:b8:ce:f1:69:07:a6:b8:16:7d:d0:95:35:06:b1:23:f2:
96:7b:97:61:82:d5:8e:87:62:62:ac:30:84:e9:ed:7a:31:9d:
ec:cb:45:20:ff:b2:83:9f:10:f6:ee:41:c3:20:0a:c5:8d:7e:
35:a5:87:df:5d:c5:51:9b:49:05:ba:e9:90:78:89:9d:df:bf:
8f:15:ea:a0:ea:3f:a1:64:8f:62:06:56:50:e8:5d:f1:34:5c:
6a:24:62:06:4b:0b:1e:57:68:e6:be:ef:54:84:3f:d8:a1:a5:
fd:05:b5:96:92:98:b2:5a:1e:52:11:84:2d:f2:de:c3:fd:82:
b8:5b:bc:e7:f4:6c:bb:92:72:7b:40:b1:f5:96:ff:95:56:2e:
30:d9:e2:58:e4:d0:4a:f5:1f:64:45:30:9a:f7:84:02:08:81:
d9:b9:36:be:a0:c8:26:18:2d:7d:2d:3c:6d:18:5f:dc:53:37:
87:51:6b:19:7a:87:8e:d1:93:63:fb:27:12:f6:37:38:17:90:
0a:ba:e2:b1:05:59:30:ed:76:d0:be:f8:3a:60:b2:fb:d1:05:
ee:96:be:e9:d5:50:54:81:8e:11:7e:39:52:b9:e5:6f:2f:10:
d3:1c:cc:ec:7f:05:f5:24:90:ae:59:4b:5f:79:b0:2c:1d:49:
bb:e7:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:51 2024 by rpki-client on console-fra.rpki-client.org