Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/cGsYe2rcemnO2ak6w9iRLCaaxok.roa
File: cGsYe2rcemnO2ak6w9iRLCaaxok.roa (raw, json)
Hash identifier: DXES3Rf62gpajPZ5DEZIKWgVtdtvBo1mICgK5M9zfM8=
Subject key identifier: 70:6B:18:7B:6A:DC:7A:69:CE:D9:A9:3A:C3:D8:91:2C:26:9A:C6:89
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0185715548FC879D6F021F88100D9BE059C2
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/cGsYe2rcemnO2ak6w9iRLCaaxok.roa
Signing time: Mon 02 Jan 2023 07:14:52 +0000
ROA not before: Mon 02 Jan 2023 07:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202891
IP address blocks: 85.117.192.0/19 maxlen: 24
46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:48:fc:87:9d:6f:02:1f:88:10:0d:9b:e0:59:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 2 07:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706b187b6adc7a69ced9a93ac3d8912c269ac689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:18:31:bb:d3:94:2c:df:e1:9a:27:bd:3a:
89:79:6f:79:37:3f:c2:24:df:73:28:47:50:93:99:
76:d9:bb:92:52:81:76:ce:8e:b4:29:0d:5e:df:37:
7f:ae:e4:b7:30:48:c0:46:b5:4d:98:e0:ba:a6:ff:
ca:3c:8e:4a:03:8d:f2:83:52:aa:74:08:30:a0:5c:
fd:90:c5:82:b4:8c:b0:79:c1:ee:3c:17:85:9b:ce:
63:a4:f6:05:1e:0a:5f:47:cd:82:cd:d9:aa:5f:10:
5d:6e:a9:9b:34:e5:d5:f8:34:ef:62:2f:7d:62:58:
b2:81:8b:e9:1b:aa:8b:2d:f5:6b:15:f2:df:08:06:
32:f4:81:22:f7:4d:16:3d:40:34:01:95:b0:dd:e6:
97:6e:b7:b5:d6:fe:9a:8e:45:e1:aa:91:cf:62:6d:
76:8d:65:63:15:52:8b:f8:cc:be:8f:6e:f9:3d:31:
67:aa:f1:4c:49:5c:20:4a:22:d3:03:1b:e1:df:96:
99:48:fe:d4:cb:99:1c:ba:38:21:9d:2b:8e:cc:07:
c3:cd:e9:17:16:37:60:97:55:db:04:fd:b0:41:23:
e9:78:07:f7:c5:ee:84:20:d6:12:d4:15:3c:ab:b2:
d2:ba:91:29:ac:95:51:ef:81:f9:ff:d8:4e:93:c3:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:18:7B:6A:DC:7A:69:CE:D9:A9:3A:C3:D8:91:2C:26:9A:C6:89
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/cGsYe2rcemnO2ak6w9iRLCaaxok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
55:5f:1d:e2:a9:73:58:a8:05:34:11:02:06:38:e5:ee:d1:00:
7f:eb:13:e7:3c:35:03:d2:45:b0:4b:ad:e6:1e:97:87:f7:0f:
c3:43:71:1d:b6:7c:ac:90:63:23:f5:37:e4:a3:01:8f:99:d3:
76:c1:f9:b5:56:98:0c:75:b3:e7:48:dd:98:fb:cd:e6:9d:d4:
2e:48:08:66:4b:f2:6c:09:a3:1b:19:65:d0:9e:b4:a3:4f:2f:
30:c3:b7:72:9d:f6:ad:5f:ad:87:2b:2f:38:58:e8:f4:a8:e5:
b5:03:e8:14:0b:d2:6d:18:21:5e:7a:38:5c:13:15:b1:a7:b5:
83:b4:fb:6d:89:71:91:7f:72:a6:b3:69:a9:4e:df:d0:7c:c8:
6a:6d:4b:73:9c:8c:5b:ce:8a:41:fb:4a:b9:d1:85:e6:88:ff:
e3:0f:39:6e:16:72:0a:6f:cf:3e:d8:64:8e:74:26:64:86:96:
77:bb:dc:12:d4:08:81:60:a1:ab:19:d1:28:38:cf:ad:32:61:
83:79:2b:d6:e7:16:a9:71:84:5a:37:75:c1:4b:1a:6c:57:d5:
55:76:06:fb:d0:c7:92:24:69:52:90:9e:cf:61:12:b1:b7:47:
54:2e:57:fa:ef:7b:4c:c3:e6:a4:8a:03:ca:96:3b:16:ea:93:
fc:b3:58:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:04 2024 by rpki-client on console-ams.rpki-client.org