Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/am03xJ5b2jtEl5nvJCVvB1oLKdk.roa
File: am03xJ5b2jtEl5nvJCVvB1oLKdk.roa (raw, json)
Hash identifier: Y6/gLw8GZV9KDOGlgeunawmk74dzoIWTPuGKNFVT8gc=
Subject key identifier: 6A:6D:37:C4:9E:5B:DA:3B:44:97:99:EF:24:25:6F:07:5A:0B:29:D9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F1509C5FAC9078DC47374CEE6AA5056
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/am03xJ5b2jtEl5nvJCVvB1oLKdk.roa
Signing time: Sun 01 Jan 2023 20:45:27 +0000
ROA not before: Sun 01 Jan 2023 20:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62445
IP address blocks: 194.102.241.0/24 maxlen: 24
85.120.246.0/24 maxlen: 24
85.120.244.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:09:c5:fa:c9:07:8d:c4:73:74:ce:e6:aa:50:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6d37c49e5bda3b449799ef24256f075a0b29d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:28:1d:36:d8:e0:25:c3:1f:a8:57:86:3b:
66:bb:49:e1:78:1c:f6:fd:00:a6:cc:42:98:6c:9e:
de:75:e3:07:a6:f4:1b:fe:e7:ca:27:dc:04:c6:8e:
5e:06:76:ab:11:83:c5:52:6a:9a:ed:f4:b3:8c:e2:
aa:38:77:77:c2:69:08:23:eb:7b:1f:12:5c:11:18:
27:a2:18:e8:0b:39:a7:f4:8e:d8:62:08:6a:d5:59:
23:14:c1:d7:31:76:db:72:02:f0:46:fc:a9:95:45:
12:d1:ce:be:53:f1:5a:cf:2c:2d:65:57:db:a8:c7:
11:0e:da:7f:4d:79:9e:9a:bb:83:26:6e:21:e9:f2:
bc:a8:c6:4f:52:11:7f:98:64:0a:1c:91:0b:ef:cc:
83:53:67:f4:24:07:b0:2e:25:68:8f:bc:1d:41:28:
e8:6b:89:3f:8b:c4:ad:d6:30:33:6a:11:83:9e:e3:
a8:1e:4c:17:7e:17:6e:93:e5:67:96:20:28:da:75:
64:2b:d5:6f:56:fe:7e:cc:73:b7:d6:2f:2e:4c:ec:
90:da:8a:f2:c5:8b:23:7a:1b:1d:21:cd:63:8b:9b:
e1:2b:9c:95:e5:e0:a4:0b:7b:6f:bb:a8:4d:13:1f:
5c:35:7e:a3:8d:51:4d:75:20:c7:0e:4a:bd:e0:cb:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:37:C4:9E:5B:DA:3B:44:97:99:EF:24:25:6F:07:5A:0B:29:D9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/am03xJ5b2jtEl5nvJCVvB1oLKdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.244.0-85.120.246.255
194.102.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:74:e8:6b:f6:4d:3f:11:3c:34:d0:e6:f8:b2:94:d3:97:0e:
c4:9e:e8:be:e5:31:8b:a5:0e:31:49:7b:4d:f4:5f:be:a1:ab:
78:58:8d:5e:66:59:41:46:33:f8:0e:6b:96:f0:d4:33:42:3c:
1f:1a:32:77:ed:0a:73:ea:c8:ba:c4:b5:5b:ee:eb:47:c4:ba:
f5:c8:96:c3:79:70:fc:0b:c8:f4:0f:97:42:9d:d3:a5:2d:63:
c3:ad:51:cf:27:7a:f4:3d:10:7b:7f:61:58:8a:16:0f:0e:0c:
09:e7:ae:d5:fc:f7:c7:c9:e9:c6:ba:ce:42:a2:a1:d7:b8:6f:
b2:a4:95:57:c0:a4:87:36:b9:43:19:b2:13:59:e1:77:15:f9:
1a:a9:5e:bf:a9:d8:ea:48:e5:14:8f:3c:9b:9f:97:02:5b:46:
71:c2:92:34:50:c5:98:50:e9:7d:38:1e:4a:45:2e:98:f2:80:
ae:dc:a7:cb:0c:0c:79:68:45:cc:9e:8a:36:52:0c:d2:66:22:
fe:c3:e0:dc:ac:80:10:1f:5f:0e:3b:5e:0d:14:53:20:25:16:
e0:66:26:b8:23:6c:1f:9b:a5:01:e4:bd:38:e8:a3:e5:97:30:
bf:96:b0:ec:2c:ac:1b:f1:88:10:78:64:8f:f5:b7:ef:a1:f0:
21:c8:24:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org