Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/y6GmUS5PvSVDUCBg4iz0ClKckQI.roa
File: y6GmUS5PvSVDUCBg4iz0ClKckQI.roa (raw, json)
Hash identifier: dZEEbCc2G5aoc2xRok7ZsYbwNolB+sZpCsdwJdgaz6Q=
Subject key identifier: CB:A1:A6:51:2E:4F:BD:25:43:50:20:60:E2:2C:F4:0A:52:9C:91:02
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 01856FD4F430B1317DCCFC103F84573E2E88
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/y6GmUS5PvSVDUCBg4iz0ClKckQI.roa
Signing time: Mon 02 Jan 2023 00:15:05 +0000
ROA not before: Mon 02 Jan 2023 00:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8339
IP address blocks: 185.92.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f4:30:b1:31:7d:cc:fc:10:3f:84:57:3e:2e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 00:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cba1a6512e4fbd2543502060e22cf40a529c9102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:41:23:ce:6a:f2:0d:2f:2e:ec:38:bb:d4:
c9:45:70:cb:c9:d6:6c:7f:2c:20:b6:2f:84:b2:ff:
4e:14:d1:99:fa:e0:ed:37:59:31:46:28:ec:91:da:
5a:4d:7d:5b:0d:6f:f1:1c:2c:aa:ef:07:e9:3c:9f:
53:3c:24:73:3a:e0:28:3d:78:49:39:bb:1d:0e:04:
a9:f5:40:51:48:1d:1b:c4:23:96:ad:46:98:1c:b8:
98:60:c0:33:30:06:77:95:51:33:62:5c:6e:47:c4:
0d:ae:6d:35:0e:b6:ff:dd:3c:b2:4f:90:a9:79:df:
34:af:11:29:38:cf:14:5c:e4:78:5c:6c:df:c5:35:
0b:eb:a0:f1:42:32:b2:f3:82:e6:dc:ca:68:0f:38:
86:f5:2a:a9:da:d5:05:d1:b3:b5:82:81:6f:27:8f:
b6:1d:a7:a2:e4:e3:43:cb:b0:8e:c4:b9:fa:91:3b:
f8:e0:56:17:9b:3d:c3:0e:66:37:dc:79:5c:fd:ae:
90:e1:b9:fe:76:27:c2:eb:49:f4:71:c1:16:2b:09:
f6:cf:5f:c4:95:1f:b2:1d:3a:9b:56:41:2b:f7:33:
ac:00:a3:b1:84:bd:2c:58:c2:98:37:4e:95:38:0b:
10:4e:8d:06:f3:b9:71:a3:78:b8:a2:55:d9:7e:89:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:A6:51:2E:4F:BD:25:43:50:20:60:E2:2C:F4:0A:52:9C:91:02
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/y6GmUS5PvSVDUCBg4iz0ClKckQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:9e:7c:0a:ba:eb:4e:67:83:3c:10:83:54:35:d4:70:f9:69:
eb:02:63:12:75:14:92:6d:e9:e6:5a:55:09:71:e1:06:4f:ad:
c1:a9:df:a6:e5:a1:49:cf:07:30:e3:a0:18:57:2f:d3:fc:87:
67:c9:44:cf:e9:5d:5f:f1:0b:90:2c:bb:52:17:45:a1:8d:66:
ea:90:73:3c:ec:cf:9b:ed:90:e8:58:c7:08:62:72:34:29:2a:
77:3a:3c:21:17:24:df:69:c3:bb:f7:7e:3b:21:3b:63:9e:9b:
a9:6b:8d:6e:b5:dc:eb:4f:21:f7:72:cf:46:3d:7a:d2:30:58:
44:09:32:4f:0a:f0:51:1c:2c:4f:13:f4:ff:2e:6a:0c:e1:98:
f5:f5:8b:e4:31:83:3c:4b:c1:71:79:2a:31:4e:98:5f:7f:ee:
c6:b5:79:44:64:e2:d4:61:aa:14:5a:e5:55:8c:05:87:57:6d:
1a:cf:73:8d:c0:a6:63:79:4c:79:78:30:af:0c:c9:ae:cb:c4:
b4:00:16:d0:22:77:67:f5:06:3f:34:db:90:90:12:a9:cc:2a:
da:fe:9b:73:0e:cd:c6:81:78:69:37:2b:87:9f:89:2b:bc:52:
97:bd:78:98:ab:9d:77:d0:8d:23:36:13:d4:8b:39:2f:89:f6:
e6:5e:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:41 2024 by rpki-client on console-ams.rpki-client.org