Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/6718yG9d-djaMsrdi_HL2G5ebTM.roa
File: 6718yG9d-djaMsrdi_HL2G5ebTM.roa (raw, json)
Hash identifier: QJBwnNBjNWcuUdjV7jKKq1GQqKx3UZaZuK9u79XKSrY=
Subject key identifier: EB:BD:7C:C8:6F:5D:F9:D8:DA:32:CA:DD:8B:F1:CB:D8:6E:5E:6D:33
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 01856F5491759A5E6C1974CAE39FE643B2F4
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/6718yG9d-djaMsrdi_HL2G5ebTM.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47716
IP address blocks: 194.0.104.0/22 maxlen: 22
185.164.60.0/22 maxlen: 22
193.186.162.0/24 maxlen: 24
2a0a:c400::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:91:75:9a:5e:6c:19:74:ca:e3:9f:e6:43:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebbd7cc86f5df9d8da32cadd8bf1cbd86e5e6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:5f:e1:64:c3:bd:49:8f:a2:96:bd:92:1b:
02:5d:66:76:b6:76:71:da:43:2a:fb:e1:87:74:e0:
d9:10:f4:20:50:10:81:ca:bb:5e:dd:2b:cc:e5:32:
d7:55:82:b4:dd:4e:65:43:16:0d:90:f8:15:95:58:
ab:05:6d:df:c0:62:19:51:53:42:b8:f6:59:cb:a2:
f7:a1:d9:fc:f6:23:2b:d5:54:70:09:4c:b5:f8:55:
88:98:58:70:fd:11:a5:a3:05:9b:ec:72:0f:d6:52:
ca:b1:8d:5d:dc:54:a6:23:66:6d:8e:75:67:ed:05:
9f:4a:b1:d4:c8:98:9b:ba:e5:6d:2d:13:8a:4e:60:
bc:73:52:fa:aa:ed:c2:97:18:3e:5a:4b:c2:6e:79:
08:e7:e6:84:63:be:25:b7:dd:6a:6d:d2:06:4e:20:
23:a5:96:76:a9:01:fd:f7:c6:09:c4:0e:7a:13:61:
60:a5:63:2c:4e:c7:a8:7b:a0:33:dc:83:58:d0:a8:
72:28:de:f4:14:b9:75:0b:8f:ab:19:23:3c:01:77:
b7:44:2b:c7:c2:ce:b1:d5:1b:a6:10:65:a3:88:49:
49:db:57:39:3f:12:86:00:b5:a5:bc:fb:5d:a1:f1:
5f:05:17:a6:94:b9:83:04:ef:73:3e:5f:3b:1f:d4:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:7C:C8:6F:5D:F9:D8:DA:32:CA:DD:8B:F1:CB:D8:6E:5E:6D:33
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/6718yG9d-djaMsrdi_HL2G5ebTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.60.0/22
193.186.162.0/24
194.0.104.0/22
IPv6:
2a0a:c400::/29
Signature Algorithm: sha256WithRSAEncryption
24:ec:84:e5:ab:d0:5b:76:90:95:6d:4e:75:ac:b1:10:9a:59:
b2:49:5f:be:33:0b:1a:55:58:b8:35:ac:4d:49:94:d8:df:89:
31:aa:39:6b:41:f0:4a:9c:cc:73:12:f5:32:d7:89:4a:30:f4:
cc:ef:06:f0:dc:e8:bf:f0:c8:74:bd:f3:42:82:d4:4d:1c:a5:
fe:63:d0:0e:37:86:f3:59:db:b3:3c:e7:14:d2:2c:a3:88:ed:
1a:a9:f2:ee:e8:46:a1:32:3d:d7:57:eb:04:61:11:a8:de:f2:
81:69:99:26:6f:14:8c:c8:1e:c3:81:50:4e:84:7b:81:40:a7:
f7:2e:8b:0e:70:bc:18:56:6d:b9:b3:3b:ca:7f:28:83:c9:ec:
b6:5d:60:95:3f:ff:02:da:47:5e:a5:41:ba:ff:3a:d1:7a:2d:
7a:27:e1:ea:8e:40:05:69:cc:1d:be:52:e0:a2:4a:61:72:09:
73:06:08:97:58:ae:1f:3c:1b:8a:62:6a:af:65:7b:e3:1e:15:
03:a5:0b:22:0e:54:7e:1a:0e:fd:db:48:e4:c0:1a:9d:2e:12:
f0:9a:60:05:38:db:ca:ba:c1:17:a3:db:bc:b6:dc:d3:54:d8:
80:b4:bc:f5:75:63:68:25:92:46:f6:49:84:42:1b:b7:35:1f:
30:b2:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:11 2024 by rpki-client on console-ams.rpki-client.org