Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/mg6QKoG0hEulMrO0w8TlwtEQwFI.roa
File: mg6QKoG0hEulMrO0w8TlwtEQwFI.roa (raw, json)
Hash identifier: Lx8q+uieTFR72LKg4INA+G2Ry8IBY9ZEBpZmIE8vYOc=
Subject key identifier: 9A:0E:90:2A:81:B4:84:4B:A5:32:B3:B4:C3:C4:E5:C2:D1:10:C0:52
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 01856D9D3330411ADC9AF7B93DEDDAA337D9
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/mg6QKoG0hEulMrO0w8TlwtEQwFI.roa
Signing time: Sun 01 Jan 2023 13:54:56 +0000
ROA not before: Sun 01 Jan 2023 13:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20643
IP address blocks: 185.112.28.0/22 maxlen: 22
2a06:6240::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:33:30:41:1a:dc:9a:f7:b9:3d:ed:da:a3:37:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Jan 1 13:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a0e902a81b4844ba532b3b4c3c4e5c2d110c052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:ad:8f:6b:bc:f1:ec:e8:40:fe:76:ba:5f:
d5:ef:7c:ab:31:0a:e6:0d:f8:0a:51:36:13:e6:29:
cc:25:03:0d:9c:26:b2:4b:19:52:ca:27:ef:96:11:
d8:e1:8c:42:8f:0b:56:e0:52:00:8b:ce:23:ee:49:
93:bb:0e:00:5b:9a:d4:44:17:c9:eb:6c:10:89:31:
e7:35:5a:85:fd:8a:3b:13:93:85:aa:1f:ab:9c:18:
87:04:c7:49:33:74:9d:ee:cb:0d:f7:61:cc:83:ad:
40:e4:39:60:76:c2:7e:46:12:ee:5a:3c:f3:e9:fc:
5d:7f:35:f6:2e:c6:ce:73:e0:4c:ca:b2:10:ac:a5:
5c:a8:f4:24:68:1a:ba:d3:de:81:c3:82:23:90:2c:
2c:c4:ac:fc:0a:87:37:45:34:09:9e:83:58:65:74:
9f:cb:3a:ab:33:5d:ad:36:c0:1c:01:df:4e:b4:87:
8a:f2:92:79:9f:62:fe:9e:1c:9e:4f:c0:d4:d2:42:
5b:ae:39:da:75:95:f4:5b:77:3c:10:36:8a:45:f3:
a6:8a:b0:c5:39:6e:27:c5:7a:16:ad:c1:25:9d:51:
6a:0f:54:e9:fc:89:9e:94:21:38:d7:20:3c:15:f4:
45:ba:c3:b5:37:c0:35:db:6f:9a:35:2e:66:21:47:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:90:2A:81:B4:84:4B:A5:32:B3:B4:C3:C4:E5:C2:D1:10:C0:52
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/mg6QKoG0hEulMrO0w8TlwtEQwFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.28.0/22
IPv6:
2a06:6240::/29
Signature Algorithm: sha256WithRSAEncryption
78:94:ac:9b:7f:63:e5:de:ef:38:e4:c1:1d:e6:1b:6a:db:f7:
87:f1:81:c2:99:82:23:ac:17:dc:31:bd:f5:0f:45:6b:4a:17:
12:65:ea:23:7e:e4:ad:24:64:f4:b1:30:97:55:e2:d0:bc:bd:
2d:a0:79:12:b9:a3:4e:20:74:30:d6:40:1a:a0:99:f0:93:78:
f9:66:f3:43:77:cb:9d:56:b4:6b:af:0c:6b:b1:98:f3:2e:d2:
4e:cd:90:c9:42:67:a1:90:ba:b3:b0:ac:41:bb:64:0c:f7:ef:
c0:78:48:f1:0f:32:15:7c:90:e0:f9:a6:fb:bc:9d:6d:be:1d:
3c:73:af:52:f7:63:c2:ab:d8:ba:e8:13:6e:f3:66:1b:4d:ad:
23:3c:10:3e:fc:a4:5d:82:83:20:b3:86:31:a0:d7:95:c3:1b:
42:c8:85:1e:0f:ac:92:8f:43:8c:5e:1f:b7:56:48:d1:10:a8:
e8:db:85:cb:0d:bc:39:18:3b:db:3d:8e:d5:c8:11:b6:0e:cc:
70:1c:21:8c:d5:06:ca:84:c6:69:95:fb:4c:8e:3a:c8:9e:c3:
4f:e9:a4:c4:a6:97:7e:aa:5c:cf:fb:aa:64:b8:80:96:aa:9b:
80:57:35:25:a0:1d:c1:4c:1b:61:75:63:1b:7c:bd:56:14:2b:
3d:5d:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org