Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/6m2vWFCXouxf8cHhF_KvD3_20sE.roa
File: 6m2vWFCXouxf8cHhF_KvD3_20sE.roa (raw, json)
Hash identifier: YoJoX9J/SOAqVyiDAiVqLT+phwbjqY+63EqQcGo/1g0=
Subject key identifier: EA:6D:AF:58:50:97:A2:EC:5F:F1:C1:E1:17:F2:AF:0F:7F:F6:D2:C1
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0189DA38BCB3E02C7AA0233C4429A87A2CFD
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/6m2vWFCXouxf8cHhF_KvD3_20sE.roa
Signing time: Wed 09 Aug 2023 12:14:58 +0000
ROA not before: Wed 09 Aug 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 185.188.141.0/24 maxlen: 24
185.188.142.0/24 maxlen: 24
185.121.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:38:bc:b3:e0:2c:7a:a0:23:3c:44:29:a8:7a:2c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 9 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea6daf585097a2ec5ff1c1e117f2af0f7ff6d2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:9c:c3:7a:37:23:75:6b:be:79:1c:22:d3:
96:20:41:80:36:17:72:b6:74:8c:0c:c9:94:f9:c3:
fe:a2:49:a0:6d:b9:d9:11:e1:e9:5e:52:3c:fb:39:
36:f0:3b:70:83:1d:5b:b2:9f:20:15:75:cf:5c:29:
1c:02:ed:0b:9e:28:86:ea:ce:3b:82:97:a0:b7:9c:
46:1c:6d:00:0f:13:9c:94:79:e5:09:65:e5:ef:ac:
bb:93:d1:e2:fb:75:d5:29:6d:7e:bb:61:39:2e:9c:
4a:30:b8:eb:a3:90:c7:a5:29:2b:7a:23:28:10:2d:
47:5b:62:70:2f:3e:75:67:09:ce:2c:fb:29:53:d6:
78:c9:26:d3:ad:82:0e:c9:0d:e3:89:45:61:5d:b9:
c2:52:06:93:00:ee:52:15:dc:e6:28:92:6a:d6:84:
6f:3c:9a:8e:a7:2f:6b:8b:97:0c:73:5e:0b:17:a6:
fc:69:49:ea:ea:eb:0b:ab:9a:90:fe:a4:cc:60:06:
e9:69:49:b6:8a:d5:1e:48:6d:d0:22:95:95:7c:09:
f1:eb:56:1f:b3:2d:c8:46:5f:a0:78:39:45:f8:f1:
a6:f4:39:e6:7d:c4:23:64:0c:16:23:ee:1f:2b:4f:
0f:99:15:ce:f1:a0:c2:55:f3:8b:f3:c4:c7:af:6f:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:AF:58:50:97:A2:EC:5F:F1:C1:E1:17:F2:AF:0F:7F:F6:D2:C1
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/6m2vWFCXouxf8cHhF_KvD3_20sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/24
185.188.141.0-185.188.142.255
Signature Algorithm: sha256WithRSAEncryption
41:43:2e:98:42:dd:ad:71:13:f1:2b:91:1b:cd:7f:0f:ab:6a:
95:67:a1:b2:f7:f9:8d:6e:ff:60:89:fe:24:c9:06:d0:96:d2:
da:9d:ed:79:a0:c5:9a:c2:af:87:ab:4e:b0:95:1f:e5:6a:07:
5a:f2:d5:2a:3b:02:d1:37:65:0b:51:92:53:3d:39:fe:ab:76:
4f:83:d7:38:02:65:2e:06:77:e3:42:d5:d0:ac:33:d7:8c:2b:
b9:f8:48:5d:72:c5:19:1a:b1:81:ad:ed:95:aa:f8:86:0a:cc:
91:f2:1b:15:fb:d5:bb:53:22:33:c1:20:17:79:2a:27:65:c9:
b2:28:de:7e:a6:fb:10:16:66:ae:2e:21:40:c1:2f:61:23:1e:
32:24:9b:53:92:69:33:ce:a4:61:79:90:14:e9:b9:c2:1f:86:
8c:69:25:82:b0:81:4d:4f:ef:04:3c:e1:69:3b:d1:6f:44:26:
26:11:d7:dd:bd:08:10:a5:c2:0d:36:a0:72:9f:0e:90:7c:98:
7b:ef:0c:43:5e:bc:a4:41:8e:20:52:5a:d0:45:e5:b4:5c:8f:
0b:e0:8f:50:ed:b7:b6:06:09:e7:a2:be:f6:49:b2:99:62:17:
52:e5:99:de:52:6e:70:18:eb:d7:71:82:44:d8:cf:c9:58:b2:
dd:51:aa:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org