Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/6MOsZ0bmyqeVQpFeBgz0Vmmjkro.roa
File: 6MOsZ0bmyqeVQpFeBgz0Vmmjkro.roa (raw, json)
Hash identifier: bxRPpRdJ3uapR3wvqJ8CGuBC3fKsnCkdoxnW+9gCviM=
Subject key identifier: E8:C3:AC:67:46:E6:CA:A7:95:42:91:5E:06:0C:F4:56:69:A3:92:BA
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 0185701EE13CDEBF26F44BB76C62236AF047
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/6MOsZ0bmyqeVQpFeBgz0Vmmjkro.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9104
IP address blocks: 212.3.160.0/19 maxlen: 24
195.60.128.0/19 maxlen: 24
185.161.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e1:3c:de:bf:26:f4:4b:b7:6c:62:23:6a:f0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c3ac6746e6caa79542915e060cf45669a392ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:75:cf:16:a5:7b:71:78:dd:6b:02:f1:e4:
1d:f1:c0:88:a9:5c:9e:86:c0:d4:63:68:47:83:5c:
92:a5:3b:96:7b:60:4c:84:36:8f:f1:87:20:b6:89:
55:64:71:a0:f2:e3:f5:fd:8e:55:90:c4:78:b8:7a:
85:99:fd:4c:28:4b:07:00:2b:e2:ec:94:40:24:60:
b3:31:a5:ed:55:10:18:11:43:c8:9d:2c:c2:f1:cb:
f0:38:b3:87:5f:0b:23:61:b7:25:82:60:b0:9f:30:
88:43:4a:d0:b5:5f:20:d7:f5:ff:18:48:47:08:de:
4b:85:40:ec:c1:63:6c:03:1d:9f:da:16:20:0a:65:
3c:8f:f8:5c:c8:ce:65:4c:c4:3c:48:96:f8:7e:a1:
8e:32:5c:6e:7a:5d:58:df:39:cb:65:33:3d:82:fe:
45:f2:22:1d:ec:5a:0e:d0:6d:78:02:ab:61:4b:0d:
35:b8:2d:af:41:3b:31:18:33:cb:68:63:7d:6f:58:
68:84:e4:35:e2:a8:38:a2:bd:d6:99:94:16:f3:88:
3b:e9:eb:15:ba:62:4c:8d:c2:3d:4f:f2:f0:ff:c6:
c1:9d:0f:f2:1e:53:3d:85:43:a3:8d:07:2a:28:aa:
09:56:2e:b9:cf:72:f3:7b:dd:b8:4c:34:12:bf:5a:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:AC:67:46:E6:CA:A7:95:42:91:5E:06:0C:F4:56:69:A3:92:BA
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/6MOsZ0bmyqeVQpFeBgz0Vmmjkro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.220.0/22
195.60.128.0/19
212.3.160.0/19
Signature Algorithm: sha256WithRSAEncryption
32:61:70:46:d9:14:bf:d3:3a:17:27:33:91:a8:d0:70:09:76:
ed:a9:01:bf:4d:38:00:fe:74:12:95:b3:8c:7c:39:b6:f9:bf:
2c:59:c0:b8:48:d5:51:00:2b:49:2e:f4:4c:6e:62:ef:a9:40:
21:35:bd:4e:78:75:61:79:12:b1:0b:c4:bb:c0:fc:a7:03:a4:
1b:71:6f:3c:ab:bd:20:1a:f6:d7:1a:d2:63:89:f3:a8:9c:14:
7e:7b:42:34:c3:9c:51:73:01:ca:0b:d9:9b:04:55:36:7d:a8:
0f:14:77:0c:47:f9:44:3e:f3:8c:07:b5:65:25:c9:6f:ff:76:
bf:8e:30:3c:f5:0c:1c:ba:d8:92:47:c9:cb:ac:5b:49:69:54:
f9:90:8c:91:a9:ec:5e:ec:dd:d1:15:25:f6:e8:b3:7e:a4:7c:
9e:dd:48:b9:44:e8:46:18:ee:e9:60:f8:ce:1c:80:4a:e4:36:
c3:f4:1e:41:cc:37:93:87:f0:c0:df:4b:f2:4e:eb:1a:8a:69:
eb:30:36:ff:67:41:7c:50:1b:e3:7a:ec:73:1d:39:97:c0:da:
79:6f:f8:37:c0:08:e1:09:dd:14:89:fa:98:c2:3a:32:c4:d1:
2b:6a:e5:52:31:29:ed:e1:6d:36:98:d6:8b:4c:66:52:d0:6a:
44:1f:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:51 2024 by rpki-client on console-ams.rpki-client.org