Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/6YvqDGXOq2Utbd8tM5XrBXfvU08.roa
File: 6YvqDGXOq2Utbd8tM5XrBXfvU08.roa (raw, json)
Hash identifier: 0B6pWX/0gB18Gy+d5DBU/CBFsCfmuUw+Q2wnAxN7jDs=
Subject key identifier: E9:8B:EA:0C:65:CE:AB:65:2D:6D:DF:2D:33:95:EB:05:77:EF:53:4F
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01856CCB03AE21C774E4B60015E6645BA75D
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/6YvqDGXOq2Utbd8tM5XrBXfvU08.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 5.182.84.0/22 maxlen: 24
46.254.92.0/23 maxlen: 24
77.232.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:03:ae:21:c7:74:e4:b6:00:15:e6:64:5b:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e98bea0c65ceab652d6ddf2d3395eb0577ef534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:2f:29:28:9f:60:48:c4:cd:a0:e1:2c:90:
0d:45:d8:41:e4:d7:a3:07:7c:f3:51:16:87:c8:19:
0b:e3:cc:d7:2d:ff:63:79:ac:78:8d:8a:f3:64:3a:
e9:d3:5b:31:1e:25:70:19:a1:62:22:92:b2:58:74:
6b:19:39:ea:3a:7b:54:98:04:d0:41:37:93:72:93:
b4:fc:32:28:75:7a:4d:e9:e0:7e:d0:e4:53:57:92:
eb:a5:ba:a9:8a:ec:57:48:74:7d:f9:a5:67:7e:42:
ab:d1:c0:94:ac:5e:41:a8:3a:55:1a:6d:6d:e1:e6:
64:e8:c7:a9:b9:e8:67:eb:86:52:52:fd:ee:00:c4:
9b:a1:dd:27:52:39:c8:3a:b2:4a:2c:7f:97:a2:c1:
2f:e3:fd:3f:6f:29:23:ed:b5:7a:bd:cb:aa:4f:f2:
93:08:e3:67:c3:e3:83:c7:c0:ec:ba:1a:4e:26:01:
94:a3:a3:6e:cd:54:18:bb:a2:67:5e:5e:30:03:c6:
6b:bf:a7:59:b8:94:7d:49:8e:43:e9:d4:2b:eb:4f:
22:af:31:ac:ef:d6:96:9c:94:3b:32:80:ab:f2:8c:
ee:67:2a:63:da:0a:c3:68:7b:b0:85:df:03:00:fd:
9d:30:28:fc:d4:98:46:40:06:d9:f9:d7:44:04:1c:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:EA:0C:65:CE:AB:65:2D:6D:DF:2D:33:95:EB:05:77:EF:53:4F
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/6YvqDGXOq2Utbd8tM5XrBXfvU08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.84.0/22
46.254.92.0/23
77.232.140.0/22
Signature Algorithm: sha256WithRSAEncryption
22:55:1a:93:b5:d9:22:12:7a:f1:d8:b8:88:dd:25:d3:8b:3d:
f5:ee:9a:48:15:d3:22:13:79:d5:6a:e9:96:30:c3:47:d8:80:
ea:0b:56:ed:b4:86:3c:19:3e:0e:b7:53:ed:e0:6d:05:08:11:
1a:b6:9f:37:63:82:c1:c8:2b:e1:41:95:c3:18:2a:40:92:bb:
e9:49:3c:d7:b5:73:65:bd:77:fe:c3:5f:10:ce:79:d2:86:f6:
36:4d:07:1c:16:f7:34:00:d6:47:0a:dc:05:fd:8e:4b:e5:f8:
24:c3:24:7c:67:1a:30:0c:8f:94:3f:df:cd:77:f7:12:53:36:
6c:0f:a1:27:a2:4b:41:78:9c:be:52:9d:4a:d7:36:b7:9f:2a:
11:0d:ea:1c:83:db:da:3f:f2:e5:17:68:d7:00:c6:af:68:a9:
fa:ee:f0:7f:0a:45:8c:84:13:d3:e6:65:00:d6:38:f4:7d:60:
4e:35:cc:e1:7e:dd:0d:bf:e0:29:a4:6f:62:41:e4:c8:4c:7b:
e3:38:a8:a0:8a:a9:bf:9b:be:d4:84:45:34:a0:af:c1:b6:cb:
8f:84:fd:8b:15:68:01:11:0e:63:cd:3c:c8:f8:9a:5d:63:81:
ec:1d:74:3a:b3:03:23:b2:bd:51:a6:9d:48:c4:cd:42:e7:31:
71:71:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 18:01:02 2023 by rpki-client on console-ams.rpki-client.org