Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/TtBHxU8I6HoeMuITK9O5HvAMq-I.roa
File: TtBHxU8I6HoeMuITK9O5HvAMq-I.roa (raw, json)
Hash identifier: iYKnGrU2Qv0QHfK0URy16wKxG2kpgbNvziISeEz8Ft0=
Subject key identifier: 4E:D0:47:C5:4F:08:E8:7A:1E:32:E2:13:2B:D3:B9:1E:F0:0C:AB:E2
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 01856C6F102712E10CE8A6B9ED788A1DB004
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/TtBHxU8I6HoeMuITK9O5HvAMq-I.roa
Signing time: Sun 01 Jan 2023 08:24:56 +0000
ROA not before: Sun 01 Jan 2023 08:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56665
IP address blocks: 185.3.44.0/22 maxlen: 24
94.252.0.0/17 maxlen: 24
185.40.60.0/22 maxlen: 24
212.66.64.0/19 maxlen: 24
31.204.88.0/21 maxlen: 24
2a04:81c0::/29 maxlen: 48
2a00:4180::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:10:27:12:e1:0c:e8:a6:b9:ed:78:8a:1d:b0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Jan 1 08:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed047c54f08e87a1e32e2132bd3b91ef00cabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:82:9b:ec:00:7d:1d:47:89:89:4e:cb:81:
cd:e1:0c:a7:f7:b0:18:db:17:8b:06:95:f4:9b:6f:
db:ef:15:30:ee:59:ad:d8:3a:76:6e:e9:32:5c:ae:
f4:20:1f:b9:43:56:9f:fc:71:9d:7d:94:fb:90:42:
57:ff:50:e4:84:9d:d0:e5:ef:6d:2d:32:09:c9:3e:
95:ec:97:c0:54:f0:7d:d7:a9:aa:89:78:b6:e2:58:
df:83:cd:4a:d1:f7:f5:fc:a3:da:37:7b:21:2c:a0:
e9:dc:53:14:1c:66:d5:21:0b:a6:fb:94:c5:35:3b:
fb:86:68:1d:16:be:6e:98:6f:26:23:bb:c2:57:6b:
d0:fc:de:ca:f3:51:bc:6b:80:10:9c:72:5e:c2:0a:
87:f3:5f:7b:6c:4f:d2:b3:57:a0:50:ca:fc:56:08:
a4:89:87:07:53:ae:d3:af:4f:bb:aa:a7:f6:35:16:
25:b2:ce:6d:10:9c:19:ee:48:7e:d5:fe:5f:84:31:
50:cc:3c:40:db:a8:8e:8f:24:a2:4f:ec:7e:93:fd:
bd:74:19:10:86:0f:ca:6e:bc:d3:4d:52:1d:31:e0:
67:82:3f:a7:85:0d:6f:a9:5a:79:30:84:7f:c7:96:
37:5c:9f:f4:f3:76:da:34:59:05:f9:bd:a1:ab:3a:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:47:C5:4F:08:E8:7A:1E:32:E2:13:2B:D3:B9:1E:F0:0C:AB:E2
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/TtBHxU8I6HoeMuITK9O5HvAMq-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.88.0/21
94.252.0.0/17
185.3.44.0/22
185.40.60.0/22
212.66.64.0/19
IPv6:
2a00:4180::/32
2a04:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:8f:b4:f0:88:a1:5a:5a:4d:a2:ec:a2:76:48:f3:dc:b7:e4:
b3:5c:0c:41:72:90:11:41:73:b6:35:9f:20:72:25:cb:e3:a8:
82:32:a1:75:20:b2:48:e9:ca:b6:e5:1d:6f:1d:47:60:cf:96:
be:f7:c3:03:3b:06:6e:36:bb:17:ba:51:c2:c4:1b:c8:fb:55:
8a:14:34:17:db:fb:91:29:50:05:d6:56:c3:c8:dd:d7:ae:ee:
a5:d6:d1:29:63:cf:71:c7:a2:74:d2:a9:7b:68:a2:10:47:d8:
96:0c:a5:5c:1b:63:8b:34:5e:f9:3c:b9:36:b7:11:b2:6f:68:
33:11:fd:9f:45:d8:25:7e:de:04:3c:a5:86:88:00:b5:e5:07:
f0:b2:12:ad:88:91:22:da:2e:42:f8:f9:f3:71:78:e8:f1:90:
c3:24:9d:31:cb:31:1b:2e:93:89:c9:2f:a6:e4:5f:9a:7c:ca:
cf:4f:d4:f0:7d:6b:1f:0f:66:62:57:1b:a6:6e:b0:04:30:c1:
8d:7d:e1:0f:1b:28:e3:72:17:c5:2a:f2:40:9c:f6:38:7b:14:
dd:13:0f:2f:0c:c9:ad:a6:83:15:5a:84:02:57:ec:82:0a:95:
0f:ce:b4:df:49:91:f7:dd:52:ff:e2:53:9f:26:e4:b2:d0:6f:
6f:cc:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:44 2024 by rpki-client on console-ams.rpki-client.org