Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/a62EWHFOyydftwhpTSqOHRTZ3sU.roa
File: a62EWHFOyydftwhpTSqOHRTZ3sU.roa (raw, json)
Hash identifier: 0OfAmhKOmSyYBW5vnDCuyFeSBGK82efaCj0SgxxQtGA=
Subject key identifier: 6B:AD:84:58:71:4E:CB:27:5F:B7:08:69:4D:2A:8E:1D:14:D9:DE:C5
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 0185704BB41F1BC011443C8D22F23B5AD5DC
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/a62EWHFOyydftwhpTSqOHRTZ3sU.roa
Signing time: Mon 02 Jan 2023 02:24:47 +0000
ROA not before: Mon 02 Jan 2023 02:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62340
IP address blocks: 185.39.112.0/23 maxlen: 23
185.39.114.0/23 maxlen: 23
92.43.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b4:1f:1b:c0:11:44:3c:8d:22:f2:3b:5a:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Jan 2 02:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bad8458714ecb275fb708694d2a8e1d14d9dec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:63:13:39:e4:07:1d:53:2d:e4:e5:76:1d:
e9:3d:22:84:0f:26:1b:c3:8f:26:a3:cc:5a:62:d7:
33:d4:40:24:5f:3a:10:c5:e9:59:74:9d:d3:be:5d:
cf:2d:9a:e9:45:9e:ce:4b:c5:99:01:28:4f:48:15:
a9:61:7d:ad:e7:00:71:f7:61:22:3c:26:32:9a:f0:
f8:e7:cd:8d:72:d7:b1:2c:9e:fc:89:6a:7e:55:a4:
e8:e1:b2:28:85:00:51:00:75:ad:59:e0:86:8e:49:
b4:ea:4f:eb:b5:89:10:9f:fb:95:a6:95:d2:49:dd:
ee:d2:a4:a6:be:9c:90:07:0e:f5:2f:fa:a4:ec:97:
6e:13:cb:76:d6:5c:3c:d1:f3:44:2e:61:bc:a6:d8:
07:8e:1e:6f:3a:71:12:48:4c:0c:a7:b0:1c:77:5a:
c8:40:48:9f:19:11:69:61:94:63:18:a8:c4:38:22:
77:b5:8f:d3:34:67:cf:b8:23:01:76:09:a6:a2:63:
1a:84:13:1e:18:8e:20:5b:cb:e5:3b:85:6f:11:8d:
ad:63:05:7e:6d:d0:21:54:eb:13:28:4d:65:c4:cd:
e8:47:b2:14:22:f5:72:84:5d:16:d9:2b:7c:89:19:
51:b7:ad:e6:b7:55:84:e2:71:29:d3:bc:6f:34:e9:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:84:58:71:4E:CB:27:5F:B7:08:69:4D:2A:8E:1D:14:D9:DE:C5
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/a62EWHFOyydftwhpTSqOHRTZ3sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.166.0/23
185.39.112.0/22
Signature Algorithm: sha256WithRSAEncryption
78:25:e3:86:df:da:3b:6f:1d:67:50:c7:c4:f6:1e:a8:f3:73:
61:64:e1:a3:5b:cf:ff:7c:0a:9a:19:2d:a3:ce:87:85:12:51:
52:5f:79:96:26:5b:de:05:d1:e5:c6:2a:54:a5:04:3d:25:60:
86:4a:e1:46:83:5e:0a:b3:c6:63:91:db:11:83:6f:b2:14:88:
0e:4a:4d:f6:7f:a9:21:e2:a7:79:d3:90:84:28:46:ac:66:a1:
7f:f0:3d:a9:77:19:fe:67:55:f5:66:3c:5e:d9:2b:f5:76:b7:
21:ca:f2:b8:51:aa:e1:17:87:59:7b:a9:61:fc:78:57:2e:82:
ec:e8:8a:53:bc:f7:a9:38:62:ba:52:d1:27:23:ba:a4:4a:1c:
4a:2a:a5:63:d2:4d:1a:01:36:b0:46:38:a3:dd:78:6c:71:51:
ad:d7:dd:86:62:3c:b9:95:2b:4e:83:47:9e:b0:c9:65:61:ac:
93:4f:71:78:75:a1:99:3c:44:27:39:58:0f:0a:80:c9:ad:67:
b9:af:de:40:3a:6e:e1:74:4f:b1:a4:d5:0c:d1:fb:c4:ce:e2:
a7:28:a9:a2:a5:fa:b0:78:02:dd:61:c0:8c:9d:db:2c:63:66:
4d:03:d2:b9:f7:cd:da:57:c9:f9:33:f1:cc:2f:3d:66:cc:ec:
04:66:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:55 2024 by rpki-client on console-ams.rpki-client.org