Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/w3GiE3cq0IeBu80wLsvyHhdX-9U.roa
File: w3GiE3cq0IeBu80wLsvyHhdX-9U.roa (raw, json)
Hash identifier: gXSgjoPPM7r1i/wKXpPs7mJnRsK+4ws23saDBUDBejE=
Subject key identifier: C3:71:A2:13:77:2A:D0:87:81:BB:CD:30:2E:CB:F2:1E:17:57:FB:D5
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 01856FC27C3306F4127A8DC76BFADCB7A872
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/w3GiE3cq0IeBu80wLsvyHhdX-9U.roa
Signing time: Sun 01 Jan 2023 23:54:54 +0000
ROA not before: Sun 01 Jan 2023 23:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200600
IP address blocks: 185.101.220.0/22 maxlen: 22
2a06:2140::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7c:33:06:f4:12:7a:8d:c7:6b:fa:dc:b7:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Jan 1 23:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c371a213772ad08781bbcd302ecbf21e1757fbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c8:59:2d:a3:42:cc:be:34:aa:1f:64:23:e1:
d6:30:b8:0c:4a:2e:7c:9d:6a:00:f8:c6:ee:4c:78:
dc:69:6f:21:e9:d1:99:96:51:45:92:47:9a:56:43:
c8:65:f9:0c:c8:23:ad:70:5c:b2:5e:f5:6e:c8:6e:
a6:b7:40:8c:ed:12:9f:14:22:e3:42:54:c3:5d:ca:
79:cf:89:cb:f9:c4:d6:bc:5b:2f:d8:d8:b8:dd:7c:
ba:b8:62:58:6a:8f:49:80:86:64:cd:9f:01:d9:ec:
a5:a7:36:c9:eb:f9:dc:44:8f:dc:54:c9:00:84:26:
0d:68:28:42:ac:20:a5:82:a7:15:14:a7:b1:e4:8d:
c5:65:e7:cb:47:ea:d6:bb:bc:d0:0c:dc:55:8c:ab:
48:a4:5d:c3:9d:bb:8c:93:30:74:81:a7:1a:a2:85:
82:f5:cf:c2:5b:c5:29:06:0a:83:a0:bc:e3:66:0c:
1d:d8:d7:b8:7e:79:3f:f4:77:e0:bf:68:61:0a:37:
d8:29:9e:5e:f3:8f:a2:34:05:4a:0d:9b:88:88:c8:
69:ad:2e:4b:b1:8c:68:6c:17:ed:fe:3d:b1:82:88:
fa:4c:e2:ee:e2:69:62:26:d1:b6:be:14:93:12:e5:
ff:57:da:e4:0d:b3:64:82:71:12:af:8c:f9:40:39:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:A2:13:77:2A:D0:87:81:BB:CD:30:2E:CB:F2:1E:17:57:FB:D5
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/w3GiE3cq0IeBu80wLsvyHhdX-9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.220.0/22
IPv6:
2a06:2140::/29
Signature Algorithm: sha256WithRSAEncryption
07:0c:86:96:cb:5d:d4:26:b7:17:29:be:6f:83:f3:34:a9:fe:
e2:12:f2:5d:5c:96:de:db:54:16:41:f7:dc:a5:69:6a:ef:53:
4d:0c:49:cb:a9:bb:11:81:2d:b1:33:f8:32:db:11:29:0a:9b:
bf:99:1a:cd:3a:17:d7:f1:96:7c:a8:c7:88:61:57:40:1c:d0:
97:3b:9b:5e:dd:3d:5b:17:7c:1d:4b:37:04:be:58:1a:2c:bf:
34:5a:32:1d:df:8d:2e:dc:02:fa:ce:e9:8a:b6:a5:b1:89:38:
fb:80:81:79:1c:f7:8b:59:29:6a:e7:b8:e2:1f:68:5b:c9:fd:
4c:f2:e4:18:b6:69:81:34:02:f3:5c:df:e1:2c:06:6b:84:5a:
37:6c:02:85:fb:14:a5:c7:67:38:0f:4c:7d:48:c6:07:22:6a:
1f:e6:e4:b8:1d:cd:0d:14:d2:ad:72:9f:0a:bc:7b:16:22:fd:
f6:01:10:f4:5c:d5:c6:04:7b:4e:8c:07:e3:68:b8:51:78:64:
2f:0c:59:58:69:68:01:66:f3:21:c1:dd:0d:92:1b:9f:a0:da:
77:81:29:b4:c8:58:4f:7a:22:dd:61:90:87:57:84:98:e6:72:
9d:3c:41:11:45:d6:76:96:d1:62:ef:e4:c7:c8:07:17:96:de:
46:18:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:29 2024 by rpki-client on console-fra.rpki-client.org