Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/X6MqtsdF34EBDK_8RkZShQLGp0U.roa
File: X6MqtsdF34EBDK_8RkZShQLGp0U.roa (raw, json)
Hash identifier: 0nu+cy+IAIgvrtpyZcDQXyVBEMQHDN5b3l1ceqfJwd0=
Subject key identifier: 5F:A3:2A:B6:C7:45:DF:81:01:0C:AF:FC:46:46:52:85:02:C6:A7:45
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 01856F66EEF59FC638EA00D8570467CD049A
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/X6MqtsdF34EBDK_8RkZShQLGp0U.roa
Signing time: Sun 01 Jan 2023 22:14:54 +0000
ROA not before: Sun 01 Jan 2023 22:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56322
IP address blocks: 185.163.204.0/24 maxlen: 24
91.219.236.0/24 maxlen: 24
91.219.237.0/24 maxlen: 24
91.219.238.0/24 maxlen: 24
91.219.236.0/22 maxlen: 22
91.219.239.0/24 maxlen: 24
2a10:c800:1::/48 maxlen: 48
2a10:c800::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ee:f5:9f:c6:38:ea:00:d8:57:04:67:cd:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Jan 1 22:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa32ab6c745df81010caffc4646528502c6a745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:d1:c5:96:6f:e0:d2:eb:5b:e3:48:43:2b:
e0:19:b5:35:53:3b:cb:ba:fd:9e:e3:60:92:e2:e5:
15:f3:53:49:c4:85:82:95:2a:ec:39:06:f0:ac:80:
45:40:0d:d3:a6:86:d8:10:d6:05:b6:2a:8c:39:7b:
8b:20:e1:ec:62:9f:a0:56:6d:fa:2c:7f:d2:ed:97:
06:4f:cd:5d:0a:40:1b:48:15:f7:88:06:5f:32:77:
6c:50:20:bb:df:46:6f:13:aa:0b:c5:1c:36:3d:a8:
58:89:4c:85:be:96:38:a2:de:1f:8f:72:b7:4e:16:
21:22:e6:9d:8d:09:1d:79:e3:ff:be:bf:4a:91:91:
cb:7e:51:99:d0:f8:d0:3e:0a:56:9c:c8:d3:4d:2f:
08:17:be:26:c1:d7:78:e5:94:1a:71:8b:8b:3d:55:
e5:12:a0:d5:95:24:68:cc:6e:fa:23:52:08:c9:c4:
49:66:c2:1f:49:ec:c0:3f:c3:4e:2d:c8:5c:55:45:
fb:92:5d:81:c7:dd:4b:bd:20:da:7b:cc:1d:e6:a2:
e6:d2:49:19:ec:4b:d4:28:5b:a2:88:c6:ee:00:ba:
c7:cf:aa:17:e3:21:b6:69:93:00:86:87:20:73:d7:
86:fe:2d:53:c7:bf:f1:bb:b5:d6:bc:bc:c0:09:3b:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:2A:B6:C7:45:DF:81:01:0C:AF:FC:46:46:52:85:02:C6:A7:45
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/X6MqtsdF34EBDK_8RkZShQLGp0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.236.0/22
185.163.204.0/24
IPv6:
2a10:c800::/47
Signature Algorithm: sha256WithRSAEncryption
86:e7:c2:04:20:5f:8b:9d:14:47:6d:c9:96:57:28:1e:a2:91:
7b:c8:82:81:ec:97:ff:2b:1e:3d:21:43:22:0a:b9:10:03:8a:
af:9f:5d:d8:ac:1c:60:03:b6:0e:ca:e3:df:c2:f2:7d:91:e8:
77:c5:ad:3d:7d:0c:8e:26:ad:ad:dc:90:6b:0d:ec:6a:89:4c:
e4:5d:3c:6f:a1:55:eb:9e:a9:06:08:de:b3:e3:1e:49:63:c0:
f9:48:32:ae:7c:a0:d2:1d:f6:fd:f0:76:16:0f:1d:c3:3f:82:
64:f0:8d:eb:27:cc:bd:13:93:02:5b:15:c9:be:27:2d:bd:3a:
91:0f:4c:86:d5:1e:a1:4b:6c:e0:5d:b9:53:ac:bd:b2:63:82:
3d:cd:b8:2c:a1:32:d5:3d:a9:46:76:cb:25:ba:e1:17:99:98:
4d:3d:f1:ed:34:a0:69:45:70:95:0e:02:df:bb:76:c1:ba:a2:
ed:23:c1:c8:c9:0c:e8:31:72:80:40:c5:bb:ab:c5:a9:80:98:
e4:21:68:34:b8:ff:09:95:28:ec:47:22:6c:7c:85:29:2c:40:
29:4d:68:83:8a:48:6c:60:95:8f:61:a4:a7:ee:46:45:b1:4f:
dc:17:b2:1f:77:dc:75:36:66:40:e7:d1:7d:e9:c2:50:6f:76:
05:0d:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org