Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/K6hjM_ExYS4YG3-2aDY1I4cMHjs.roa
File: K6hjM_ExYS4YG3-2aDY1I4cMHjs.roa (raw, json)
Hash identifier: HekPmDVMte6SEt2jky0PwGGU8I8ggs3sMu+76ylSXqk=
Subject key identifier: 2B:A8:63:33:F1:31:61:2E:18:1B:7F:B6:68:36:35:23:87:0C:1E:3B
Certificate issuer: /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial: 018B005839DC4C8C6E4C4F89078A3365A0CC
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/K6hjM_ExYS4YG3-2aDY1I4cMHjs.roa
Signing time: Thu 05 Oct 2023 14:57:43 +0000
ROA not before: Thu 05 Oct 2023 14:57:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 185.53.249.0/24 maxlen: 24
2a12:c8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:58:39:dc:4c:8c:6e:4c:4f:89:07:8a:33:65:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Validity
Not Before: Oct 5 14:57:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba86333f131612e181b7fb668363523870c1e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:a6:4d:70:cd:ee:4d:75:04:90:c5:ec:42:
6c:62:f4:09:c2:b0:c1:a8:ff:8c:23:61:28:ae:a3:
23:67:b8:7e:b5:9f:81:b6:81:82:07:77:67:b6:51:
de:6e:fe:ec:af:2b:76:0a:15:38:4c:7a:8d:db:fa:
ef:27:9c:12:ff:7b:14:61:88:d4:37:87:fe:06:98:
a0:97:66:5a:c3:e1:ef:a9:0a:d7:f4:df:80:aa:87:
f8:36:bb:0f:54:6e:78:b7:7b:8c:72:4c:9e:b1:4a:
8d:02:dd:f5:86:ca:b6:1a:b3:50:f0:e6:b1:98:66:
94:b0:e5:52:26:8e:3f:a0:95:ab:de:47:e2:26:7a:
e5:e5:4c:a1:0f:c5:d0:90:d0:31:72:f9:21:67:2c:
9c:19:02:db:af:8a:a8:6c:35:b1:5d:92:32:39:95:
14:69:58:d1:2d:bf:74:df:dd:07:86:12:f1:0b:d9:
09:19:28:e8:ea:67:30:ed:87:85:91:8b:5a:03:a1:
f2:f0:c9:8b:e0:2d:20:7d:58:4a:a3:35:af:27:96:
f9:07:6a:d9:0a:49:5a:d5:25:99:f1:ca:8c:c8:21:
ec:d9:fa:a4:2b:d2:53:37:fb:c8:df:a9:e9:cc:14:
74:6d:b2:37:45:31:4c:2d:d8:02:81:32:70:bc:cb:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:63:33:F1:31:61:2E:18:1B:7F:B6:68:36:35:23:87:0C:1E:3B
X509v3 Authority Key Identifier:
keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/K6hjM_ExYS4YG3-2aDY1I4cMHjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.249.0/24
IPv6:
2a12:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
c5:dc:f1:20:23:4e:bc:9c:79:6b:23:e6:68:22:a2:f7:2f:5c:
ca:4d:6f:59:ba:53:07:89:24:02:7e:83:4f:ef:d6:c2:fc:85:
5b:ad:d5:10:5e:90:ae:d5:c0:c3:e0:b5:0d:ee:4e:48:98:08:
5c:d8:8d:b2:63:48:26:6f:24:d7:53:a0:64:db:cf:66:2a:34:
70:3b:ad:c5:ba:bd:1e:5f:26:cb:7d:b0:45:18:19:b6:e1:18:
0c:ce:f9:cf:5b:42:18:28:d9:7d:b2:89:ce:b9:7a:0c:b6:69:
14:be:9d:ad:9c:e2:12:d0:d1:94:37:70:1a:c5:cc:31:66:17:
cf:7b:bf:b8:c3:b2:f8:4b:14:8f:f7:fa:31:dd:06:65:80:a5:
88:58:7d:46:a6:1f:13:bb:fe:eb:c4:0b:70:62:31:fa:4e:9c:
db:12:8a:99:32:9a:81:47:6e:db:fb:f7:df:70:c1:e4:83:a0:
f7:f0:44:05:a8:68:b5:b9:41:ee:ca:ab:6e:b8:63:e1:66:42:
5e:1c:25:41:2e:e3:0f:f1:40:1d:66:8a:a8:b7:39:54:e3:06:
ff:1e:8e:2f:cd:29:7a:d9:1b:0c:5d:f5:ae:37:b9:65:0b:62:
54:39:fc:c6:8d:a7:c8:e2:2b:b4:86:7e:ce:cc:58:46:18:0c:
6d:46:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org