Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xqTBbqxfy3ooE_5k4l4ql8yHTCo.roa
File: xqTBbqxfy3ooE_5k4l4ql8yHTCo.roa (raw, json)
Hash identifier: J9kHqKhrCjpFRVvN9iCyqyHyy5hjcGS43Eto9X+Zm2s=
Subject key identifier: C6:A4:C1:6E:AC:5F:CB:7A:28:13:FE:64:E2:5E:2A:97:CC:87:4C:2A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572471B2BE2B3610236DF385DBBFD757E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xqTBbqxfy3ooE_5k4l4ql8yHTCo.roa
Signing time: Mon 02 Jan 2023 11:39:00 +0000
ROA not before: Mon 02 Jan 2023 11:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212496
IP address blocks: 146.185.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:1b:2b:e2:b3:61:02:36:df:38:5d:bb:fd:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6a4c16eac5fcb7a2813fe64e25e2a97cc874c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:61:fe:a4:f0:d0:c3:bd:18:03:df:7f:52:
d5:91:c0:12:7b:9f:f5:51:82:c3:ee:a8:a6:b5:e2:
fe:e0:a3:c0:10:9f:7f:23:cc:8e:3b:ff:96:4d:8e:
1d:e4:2d:c4:c8:78:7e:af:22:dd:f7:b7:9e:67:ae:
64:73:4b:ac:c2:c3:2f:31:63:54:72:dc:33:dd:1b:
0b:06:f5:df:50:f2:9f:71:1a:87:c4:2e:29:45:24:
05:51:d6:ad:af:56:82:c3:66:f6:51:45:db:6e:cd:
41:26:66:0e:97:57:8f:5a:f7:22:f8:ea:36:31:ff:
fd:5d:4d:a6:c1:55:de:66:d5:a5:7b:bb:6a:8b:a8:
ad:1c:97:52:47:b7:2c:58:5e:03:e6:c1:4a:46:0c:
52:2a:19:f4:30:6b:76:7a:19:8e:ee:eb:4f:d5:b4:
ed:bd:53:6c:5e:c6:05:41:ab:3f:4c:68:eb:34:da:
51:01:10:66:59:eb:2f:28:fd:e3:45:c5:7e:7d:72:
85:5d:ad:c2:8e:7d:7c:12:1c:0b:dd:58:87:a1:dd:
8c:5e:96:2d:36:b1:4f:29:a6:e1:58:5e:35:a2:bd:
a9:b3:bb:5d:2c:a1:6d:0e:5e:7e:c7:e3:d6:34:6c:
34:80:ce:b4:9c:0b:cb:57:8f:5f:a7:33:53:7a:62:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:C1:6E:AC:5F:CB:7A:28:13:FE:64:E2:5E:2A:97:CC:87:4C:2A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xqTBbqxfy3ooE_5k4l4ql8yHTCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:43:8d:0c:04:3c:fe:bc:d1:37:42:da:8c:7e:a5:72:7a:24:
fb:98:f4:a0:b9:61:ec:a2:7e:21:4c:eb:09:ce:e1:05:9e:84:
d3:34:aa:d4:77:4b:3f:96:9c:21:5f:e4:fb:f2:4a:90:e8:0c:
c7:99:4f:31:88:9c:32:30:a2:a1:8c:ea:33:4a:95:10:07:04:
65:8b:01:90:79:66:ce:0a:0a:cf:69:b3:d7:1f:3b:5c:44:ac:
bf:52:c4:14:11:77:81:cc:c1:5f:ce:68:cd:63:14:e0:8b:70:
b9:33:26:8b:e7:10:77:e4:d6:17:b9:23:79:75:ed:5b:e6:bb:
52:fd:47:04:b9:66:12:4b:d0:fe:a5:d3:5e:c0:23:5c:3e:0e:
d7:98:10:8d:96:70:91:0a:bb:6e:de:04:fb:3d:dc:f6:d3:95:
86:5f:64:f0:dc:00:f0:ca:a2:b0:84:d7:ee:d0:70:ee:20:15:
28:95:8e:df:33:68:4a:3b:84:5e:c3:46:0a:9c:10:b0:cc:3d:
58:65:58:27:9d:2b:f8:de:ae:0a:2d:81:c4:40:ad:b6:43:94:
9d:c7:e6:df:e8:37:6f:5b:66:51:8d:0e:98:e5:ab:65:33:0e:
87:ce:6a:5c:dd:d0:24:57:b8:8e:9f:f3:4c:a6:db:ff:a4:66:
b5:34:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org