Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/3k_GL2hO2TC8Ccsp6_6lse4Ok0Y.roa
File: 3k_GL2hO2TC8Ccsp6_6lse4Ok0Y.roa (raw, json)
Hash identifier: fXZJtRA/hw7WQiFFEXLHoNPsTsi4da/EQXNxnFj3Kys=
Subject key identifier: DE:4F:C6:2F:68:4E:D9:30:BC:09:CB:29:EB:FE:A5:B1:EE:0E:93:46
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 018570151EEDA01472C92A6ED9E252184546
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/3k_GL2hO2TC8Ccsp6_6lse4Ok0Y.roa
Signing time: Mon 02 Jan 2023 01:25:10 +0000
ROA not before: Mon 02 Jan 2023 01:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201054
IP address blocks: 94.246.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1e:ed:a0:14:72:c9:2a:6e:d9:e2:52:18:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 01:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de4fc62f684ed930bc09cb29ebfea5b1ee0e9346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:87:a2:81:e5:05:fc:28:d8:f7:ce:33:1e:
9e:70:3e:d4:7c:7f:27:6d:32:72:54:1a:22:ad:51:
60:d3:ba:e3:95:ba:a9:3e:89:9b:be:1e:4f:92:55:
b9:55:95:64:fd:42:6f:f3:6a:ab:9a:04:1c:1b:bf:
c6:8a:a3:da:c8:20:63:77:9a:c6:83:ae:3b:9e:b0:
bb:13:25:1b:3f:78:9e:a1:59:c4:4f:3a:ad:3c:8b:
e2:56:46:26:93:00:6e:98:8e:24:aa:34:d4:dc:1b:
48:d0:e0:8b:91:81:61:3c:42:13:f6:f7:fe:8b:6f:
17:a1:16:a9:a8:75:92:8a:ab:77:cd:65:ee:d6:cd:
3c:ae:46:93:f5:a7:b5:45:ea:73:50:ab:9c:ac:aa:
37:64:09:9f:d9:bb:c9:95:a2:42:61:21:81:49:d7:
be:6c:cb:a0:bd:cb:80:31:74:7d:17:a3:e2:36:6c:
f4:9a:bb:ac:64:d1:d7:89:fb:88:50:37:d7:24:d6:
4e:77:05:9d:88:ea:a4:ad:59:a2:35:1e:9a:5d:dc:
2d:d1:64:ec:6b:73:9a:37:9e:0f:1f:04:38:0d:52:
8a:d5:2b:1c:65:9b:a1:f5:8f:b4:f7:da:70:e7:86:
6f:67:32:56:b9:3e:b3:d2:bf:b7:e3:5a:8b:af:ba:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:C6:2F:68:4E:D9:30:BC:09:CB:29:EB:FE:A5:B1:EE:0E:93:46
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/3k_GL2hO2TC8Ccsp6_6lse4Ok0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.185.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0d:59:9a:28:99:27:74:e6:13:7e:c3:20:0f:0a:90:2a:57:
bb:a6:a2:2c:6b:44:3e:20:7f:f8:7d:f8:95:1c:ab:f8:96:a4:
55:db:d9:d0:01:3a:21:64:3f:06:30:97:4e:0b:0e:2f:8c:b3:
ee:b9:31:96:fe:4a:99:92:e8:05:83:aa:a2:2c:f3:6b:13:a0:
b3:43:40:07:92:72:a4:46:c1:1b:74:ad:01:ef:cf:7a:25:e4:
28:b5:f9:1f:87:ca:8d:d1:02:d5:54:a0:a9:1f:19:f7:c5:76:
e4:f5:8c:f5:d8:04:ef:a6:f5:19:41:07:ee:a6:9b:b5:73:dd:
86:f8:f0:06:d0:1e:de:ac:bc:34:01:f7:42:3d:5d:26:0b:8a:
2d:90:d8:90:8b:7e:8b:03:76:69:79:94:7f:10:85:74:4d:eb:
6f:77:58:7c:51:a2:f8:5a:64:06:80:f9:4d:24:d0:c5:28:4f:
aa:6f:96:e8:7d:b3:46:3a:6f:18:9f:e9:fb:f8:e1:8b:b0:0e:
81:e6:a1:b9:82:c5:9a:bb:8c:7e:aa:a6:30:f7:9d:c4:fa:84:
d7:bd:e2:27:62:8e:29:eb:c7:5c:02:87:66:86:1e:4b:3d:29:
77:b2:5b:51:cc:a8:81:7c:1f:88:7a:28:d5:d4:01:5f:41:89:
df:16:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:40 2024 by rpki-client on console-fra.rpki-client.org