Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/6uIYkiH_Ff0B1oMJQH0zCKaMtG4.roa
File: 6uIYkiH_Ff0B1oMJQH0zCKaMtG4.roa (raw, json)
Hash identifier: ei9/Hm8BGoQXn6RBKrkQj2r+Tr5uYABz7ZrfuEu2hwA=
Subject key identifier: EA:E2:18:92:21:FF:15:FD:01:D6:83:09:40:7D:33:08:A6:8C:B4:6E
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 01866F56134B26BE0727197DE106D42280E6
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/6uIYkiH_Ff0B1oMJQH0zCKaMtG4.roa
Signing time: Mon 20 Feb 2023 14:59:17 +0000
ROA not before: Mon 20 Feb 2023 14:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.204.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:56:13:4b:26:be:07:27:19:7d:e1:06:d4:22:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Feb 20 14:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eae2189221ff15fd01d68309407d3308a68cb46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:74:9e:08:11:6e:c4:de:ab:ba:8e:ee:5b:
08:f2:99:62:b8:6b:4f:28:c6:9a:98:4d:53:c9:ae:
01:55:e7:93:e0:a5:c0:03:c6:57:c2:4e:18:ce:bd:
69:ae:b7:3e:eb:84:24:72:00:75:88:eb:e7:f4:ca:
21:ee:f0:4b:59:09:38:7e:c9:8e:e6:06:df:65:35:
66:78:39:a7:08:21:4d:1b:4d:e0:8d:d7:b9:7c:d5:
fe:6d:b6:c5:0e:ae:a2:f0:5f:8e:71:a1:ee:ce:70:
51:24:01:43:ff:ac:5e:84:6c:6b:2b:8a:58:ac:43:
2e:ab:a1:a7:0f:59:54:2c:cf:9d:b1:97:a2:6f:d3:
f4:2f:00:f1:22:87:fa:52:07:8f:f4:fc:c7:e2:70:
f7:8d:5c:31:a7:52:7e:25:d9:90:1a:92:ed:79:17:
ad:88:2f:9f:65:44:d6:5d:0a:e2:af:6f:0a:19:74:
82:74:fd:2d:91:39:59:61:77:99:d3:6b:c0:b1:c1:
71:1f:83:cc:92:5a:6c:f1:c5:b9:d8:1c:05:7d:ce:
aa:97:d5:99:6a:65:96:b4:04:18:0b:ea:d5:22:b1:
03:e2:ec:66:9e:29:0c:39:e7:95:ec:3f:fd:e6:44:
33:98:da:1a:6f:69:e9:0b:54:a3:af:6d:f9:73:01:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:18:92:21:FF:15:FD:01:D6:83:09:40:7D:33:08:A6:8C:B4:6E
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/6uIYkiH_Ff0B1oMJQH0zCKaMtG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.168.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a6:68:a6:e5:ae:f9:1f:69:d5:4b:ca:90:4b:80:50:1d:25:
ed:30:82:e1:ed:0f:d2:9d:2f:7f:b4:c3:71:b5:89:00:f0:1f:
f3:40:ca:b9:a0:cd:97:3a:10:64:d2:47:68:81:5f:d0:f1:9a:
04:76:98:34:bc:92:42:8e:c7:48:af:bb:a0:6d:1b:4b:e5:04:
93:65:e8:81:47:b7:8b:7b:52:82:76:ef:e0:6f:12:56:d7:b0:
5e:f0:72:12:d3:93:bb:30:66:69:e8:7a:53:96:66:31:c0:c3:
e1:82:f2:db:d0:e2:bd:6e:e4:55:df:df:ea:55:5d:42:60:65:
97:5b:23:b7:6c:ff:66:a7:a4:d9:e6:20:d1:36:f7:dc:69:91:
3d:a9:9c:64:de:d8:76:2e:15:66:ad:d3:85:5c:18:85:41:6b:
d0:28:df:b6:b0:5f:c0:40:9a:b0:0d:ad:7f:9c:05:53:40:1a:
c2:4b:28:d6:9e:2a:1f:0b:48:45:de:1e:7b:40:81:cd:90:52:
40:86:0c:90:1d:70:43:17:96:29:3a:e6:df:a5:2a:6b:7b:15:
eb:3e:bc:87:3c:41:f8:ef:cf:a2:4f:df:58:14:79:b6:a0:63:
19:86:4c:17:7f:4c:aa:c1:53:d2:f7:42:91:0d:eb:c9:5d:d8:
8e:64:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:06 2024 by rpki-client on console-fra.rpki-client.org