Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/6EWxL9LIrAbhN6ERm0mpjVco_Io.roa
File: 6EWxL9LIrAbhN6ERm0mpjVco_Io.roa (raw, json)
Hash identifier: 61oJkGb8OhbOoonke0ebYulwTPEMsapdj+Xq53FKLD0=
Subject key identifier: E8:45:B1:2F:D2:C8:AC:06:E1:37:A1:11:9B:49:A9:8D:57:28:FC:8A
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 018571308A5B3E041CC1CFCEC400ACC613CC
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/6EWxL9LIrAbhN6ERm0mpjVco_Io.roa
Signing time: Mon 02 Jan 2023 06:34:44 +0000
ROA not before: Mon 02 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204007
IP address blocks: 185.194.12.0/24 maxlen: 24
185.190.89.0/24 maxlen: 24
185.185.216.0/24 maxlen: 24
185.185.219.0/24 maxlen: 24
185.185.218.0/24 maxlen: 24
185.185.217.0/24 maxlen: 24
2a10:64c0::/29 maxlen: 29
2a0b:6580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:8a:5b:3e:04:1c:c1:cf:ce:c4:00:ac:c6:13:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jan 2 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e845b12fd2c8ac06e137a1119b49a98d5728fc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:4a:96:2a:63:b7:e3:8e:97:f3:91:21:92:
ef:de:55:c3:ad:8f:83:b8:87:67:c7:d4:4c:f5:e1:
c4:f7:2e:38:78:a0:72:f6:f8:b7:52:24:e6:10:27:
3c:2f:7d:3e:3e:2c:ee:d2:10:fa:63:35:8d:d8:b9:
da:5d:79:0e:3b:cb:cc:44:88:00:1a:99:d6:1a:76:
02:aa:9f:68:62:b7:d8:fe:0a:e5:57:cc:5f:47:a5:
0a:97:c8:97:9d:7d:42:33:a8:a8:d7:1b:81:7c:40:
0a:ba:9d:8d:32:f1:3c:13:06:c8:37:28:b2:c9:82:
27:91:10:0b:a6:35:3e:be:a8:4c:1b:90:a3:3d:fb:
f0:7e:bb:d1:0f:f8:8d:a9:af:1a:4e:36:ec:4b:4c:
1a:00:2d:4b:e0:c6:0f:85:0d:03:10:13:e1:08:97:
fd:c1:59:b0:dd:5f:47:93:a0:28:eb:42:1f:8d:65:
cf:2d:3e:be:b8:c5:b9:b1:ff:4c:a1:a6:59:1e:e2:
1f:b6:ac:4e:9d:01:15:14:2a:5d:46:48:20:72:5b:
28:f6:ef:2b:da:89:7a:64:a0:df:88:0f:9d:8f:c4:
be:a6:ff:8a:e2:95:dc:10:a3:f8:6f:db:58:d4:bc:
e8:88:4c:85:03:49:be:0e:9e:11:0c:6d:17:41:83:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:B1:2F:D2:C8:AC:06:E1:37:A1:11:9B:49:A9:8D:57:28:FC:8A
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/6EWxL9LIrAbhN6ERm0mpjVco_Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
185.190.89.0/24
185.194.12.0/24
IPv6:
2a0b:6580::/29
2a10:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:bd:3d:82:be:63:10:3f:82:80:17:02:57:62:79:44:c9:51:
f3:69:c4:99:1c:62:d1:2b:69:b6:c1:32:95:71:08:c9:08:4d:
2a:14:3b:2c:ed:d8:54:5a:43:01:8f:a9:14:1f:ea:ed:d4:5c:
43:85:6f:44:84:ab:9d:92:16:f6:eb:0f:96:89:8f:3e:2d:2d:
c9:3a:a7:3e:64:26:ac:0e:86:50:f4:bc:58:9e:e2:2c:a8:63:
56:85:b4:fe:39:d3:23:dc:fb:7d:df:54:16:a5:c0:07:4e:75:
cf:8e:1c:2c:12:24:21:b5:bd:c5:9e:9c:39:d2:2b:9b:01:a0:
53:34:d9:bc:c8:41:aa:13:35:d2:fa:15:72:df:1e:ed:7f:f1:
bc:86:33:b9:a0:33:ec:5e:14:b0:f2:7a:9b:ad:30:b6:80:3b:
5e:5f:ee:da:2a:ed:78:17:a9:8f:55:1a:7e:35:e2:44:fc:dc:
60:dd:8e:bf:f7:34:b9:c0:8b:2a:6e:e1:7b:1d:67:cb:89:c1:
9e:87:a2:81:3b:5f:d4:ac:a3:dc:b6:cf:79:b1:e2:ca:02:9c:
a6:a2:60:66:dc:66:8f:74:47:f5:5e:35:14:39:cd:a7:b7:67:
3a:93:6e:79:f3:8c:7b:fc:aa:98:93:0e:48:77:4c:ae:e8:4b:
56:51:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:25 2024 by rpki-client on console-ams.rpki-client.org