Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/6qtkzDyklA_tylOL1Ap6tILpYs0.roa
File: 6qtkzDyklA_tylOL1Ap6tILpYs0.roa (raw, json)
Hash identifier: KFY62DMPsRwWbI/G/N7Wg62HV/lFhaipLju59DDg6cM=
Subject key identifier: EA:AB:64:CC:3C:A4:94:0F:ED:CA:53:8B:D4:0A:7A:B4:82:E9:62:CD
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018C1735F64CD426CE415CCC87C2D4126502
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/6qtkzDyklA_tylOL1Ap6tILpYs0.roa
Signing time: Tue 28 Nov 2023 18:34:21 +0000
ROA not before: Tue 28 Nov 2023 18:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52320
IP address blocks: 185.252.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:35:f6:4c:d4:26:ce:41:5c:cc:87:c2:d4:12:65:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Nov 28 18:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaab64cc3ca4940fedca538bd40a7ab482e962cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:2b:da:f8:e9:16:77:be:65:f7:49:92:95:
a0:68:9f:4e:0a:cb:41:37:b9:60:8f:8b:54:a4:50:
b1:c6:2d:19:fb:cd:83:da:85:77:13:0e:63:95:36:
da:d1:a2:e5:a4:69:6d:cb:d4:83:c1:f5:b3:e3:00:
37:99:8a:70:ef:84:5d:7a:54:b2:f4:c6:89:e1:ee:
da:9b:d2:a3:8c:f6:b6:21:eb:0a:79:3b:ca:b9:4a:
7f:98:e3:a5:90:ce:de:be:28:55:72:40:06:33:2b:
af:a3:c4:1e:7b:a0:1a:50:ee:85:44:d4:c7:2f:e8:
f7:12:8d:7a:92:0a:52:58:66:11:b4:03:18:1a:1c:
dd:8c:50:a3:b8:c3:f4:50:eb:b3:e8:32:7f:9a:be:
24:f4:99:91:4e:a2:6f:73:7e:67:42:ac:2e:5d:c7:
65:33:9b:7b:d6:4a:b6:bc:f4:89:6c:46:69:51:26:
11:79:0d:33:4f:af:ea:6c:1c:bb:44:36:02:da:fb:
52:aa:e9:1f:fd:6c:b5:35:1b:d7:53:cc:63:81:55:
e8:41:d1:a5:c4:d2:2e:0b:d9:65:4c:9b:e9:f3:00:
8d:fd:9b:ae:74:10:fb:b8:89:b8:b2:f7:a4:96:5f:
4e:f1:93:01:f3:c8:a0:68:4e:4e:e8:64:0e:d7:54:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:64:CC:3C:A4:94:0F:ED:CA:53:8B:D4:0A:7A:B4:82:E9:62:CD
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/6qtkzDyklA_tylOL1Ap6tILpYs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ea:6d:8c:80:47:2a:09:6b:5d:5a:8d:6f:81:04:0c:32:08:
06:cf:81:7d:68:a3:f0:22:d2:bd:df:21:1b:df:55:ef:d4:4f:
2f:a3:15:c4:c8:0d:5e:da:eb:45:70:fd:cf:7c:d3:34:b8:91:
d1:e3:1f:aa:77:09:20:95:89:98:8b:65:88:bc:5f:43:f6:11:
5b:88:fe:56:98:11:0f:d4:c8:92:3b:ba:40:4f:75:e1:c0:8f:
97:75:b8:f5:cd:bd:52:66:96:9d:34:63:e1:2a:6a:b7:b1:12:
6d:f2:1f:3d:e8:d3:a1:09:a1:3a:02:85:c0:1e:ea:21:01:c5:
db:5e:5a:4f:89:75:ff:14:8b:9a:45:f0:02:15:30:4c:6a:f0:
41:7e:b9:80:60:c7:8f:06:95:37:d2:06:80:4a:65:d5:23:1a:
d2:f9:44:34:6a:af:85:b4:21:c0:1f:cb:e1:88:6e:b2:6a:a0:
e3:ef:e8:71:a2:be:28:b4:02:33:a4:2a:9d:af:f1:58:a0:45:
11:6a:a7:a5:ed:2c:49:20:1e:55:21:89:16:f4:9b:c9:a6:c3:
34:23:39:4c:e0:18:3f:32:9f:9b:bf:59:c1:06:83:fe:16:34:
dc:33:1e:44:ce:42:fd:27:f2:0f:8f:3b:e5:40:d6:53:58:b2:
15:01:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 16:09:59 2023 by rpki-client on console-ams.rpki-client.org