Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/6fLLOU1-_X0j5XfePBwI3spZZ6Q.roa
File: 6fLLOU1-_X0j5XfePBwI3spZZ6Q.roa (raw, json)
Hash identifier: VGOAOiwvVTFQFe1AjvXDWWoAFC3xMeqg/PunD2X/s5M=
Subject key identifier: E9:F2:CB:39:4D:7E:FD:7D:23:E5:77:DE:3C:1C:08:DE:CA:59:67:A4
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 01857227DBD2485ED58BE72119D82963D6EE
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/6fLLOU1-_X0j5XfePBwI3spZZ6Q.roa
Signing time: Mon 02 Jan 2023 11:04:52 +0000
ROA not before: Mon 02 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204667
IP address blocks: 185.243.164.0/22 maxlen: 24
92.246.64.0/22 maxlen: 24
45.148.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:db:d2:48:5e:d5:8b:e7:21:19:d8:29:63:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Jan 2 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9f2cb394d7efd7d23e577de3c1c08deca5967a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:33:e6:7e:e0:4e:ce:a9:29:ac:be:58:12:
22:7f:85:b2:04:89:1f:b4:c7:7f:03:86:d0:69:c5:
07:57:8f:38:97:a4:3d:f4:fe:49:f4:6b:51:ac:ec:
56:f7:ad:94:56:1d:c2:19:fe:70:c3:d3:49:80:3d:
2f:dd:fb:e8:b3:d1:ad:82:65:21:0e:aa:93:7e:78:
22:e2:d1:d0:9b:42:69:6b:80:87:4b:db:a1:bc:61:
52:8b:fc:56:d1:f5:1b:89:3a:89:74:23:25:8c:1e:
76:58:ce:3d:3a:f8:16:bd:3c:a3:29:4c:b5:a6:d0:
f4:e9:87:bd:45:21:e0:5f:4f:2b:3f:99:92:59:42:
51:4a:ec:ed:e7:6a:bd:ad:c8:c4:1f:3c:bf:e3:63:
65:7b:2a:6f:85:56:be:10:92:40:c9:f0:8f:27:71:
17:31:bc:9a:da:6d:85:1f:31:a6:07:7e:6d:9a:d4:
3f:79:8d:34:61:d4:f8:aa:da:e8:c7:56:47:8c:30:
29:24:f1:14:af:1d:ab:fc:cd:ef:43:b7:c2:8b:1c:
fc:ee:81:b8:1f:61:c6:ae:eb:8c:62:c5:1c:36:b0:
74:aa:16:6d:f2:18:b1:84:ae:75:03:73:90:a5:d7:
44:e5:f2:72:a5:b5:a7:a4:37:95:61:43:99:23:ea:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:CB:39:4D:7E:FD:7D:23:E5:77:DE:3C:1C:08:DE:CA:59:67:A4
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/6fLLOU1-_X0j5XfePBwI3spZZ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.84.0/22
92.246.64.0/22
185.243.164.0/22
Signature Algorithm: sha256WithRSAEncryption
66:9f:1c:26:40:91:40:39:d8:90:31:e4:6e:69:b8:f1:36:44:
ff:66:d1:2a:a7:b1:66:85:43:5e:f9:87:3a:3d:61:ca:65:5a:
1d:f6:84:e1:b2:75:55:d4:c5:16:84:4f:e2:56:7d:d4:45:27:
3c:54:6c:d6:7c:01:7a:d7:cc:55:dd:54:ff:36:a0:ab:44:53:
11:0c:25:22:bd:d8:06:11:56:2c:b3:98:c1:5e:4c:cb:25:11:
b7:da:72:44:50:f7:eb:b9:3c:1f:d4:e3:dc:bc:43:35:91:fc:
60:68:be:d2:ba:07:4e:5d:d0:e6:f5:2b:df:5f:c6:56:d7:8b:
ad:5f:51:91:27:a3:72:2d:24:34:52:e8:a0:52:8a:8e:38:37:
e6:97:77:45:0e:c7:fb:2d:ce:8e:12:ab:53:90:ba:46:cc:1a:
fc:90:a2:7a:44:43:51:50:1e:42:c6:c1:c8:76:00:40:23:55:
79:f5:47:76:30:0a:ac:cb:0e:a2:64:ec:3a:e6:f8:50:75:0e:
a1:37:ce:b5:bb:bf:b0:59:12:81:72:38:40:5c:9a:db:a9:30:
c0:af:b5:75:0b:1b:57:1e:9b:f6:c7:d1:5c:a2:d3:dd:80:cc:
ba:bd:e4:53:17:0b:2f:01:f9:f8:9c:05:58:38:5b:b5:86:b5:
8d:cc:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:46 2024 by rpki-client on console-fra.rpki-client.org