Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Cw6xd9N06W-QS0CQOPT6CsLCeYk.roa
File: Cw6xd9N06W-QS0CQOPT6CsLCeYk.roa (raw, json)
Hash identifier: nKyA85SOrRBP5dwPgcR75BNGGslVgvRIisIO+yoPkQg=
Subject key identifier: 0B:0E:B1:77:D3:74:E9:6F:90:4B:40:90:38:F4:FA:0A:C2:C2:79:89
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01877967D9B2C751E3963E3872E7B0B743E8
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Cw6xd9N06W-QS0CQOPT6CsLCeYk.roa
Signing time: Thu 13 Apr 2023 06:57:41 +0000
ROA not before: Thu 13 Apr 2023 06:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.132.187.0/24 maxlen: 24
185.212.206.0/23 maxlen: 24
185.212.204.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:67:d9:b2:c7:51:e3:96:3e:38:72:e7:b0:b7:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Apr 13 06:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0eb177d374e96f904b409038f4fa0ac2c27989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:b1:28:08:e3:c5:8c:82:1b:d5:cf:27:db:
3d:83:a7:29:cc:e0:d9:7c:cc:dd:14:73:4f:bd:c7:
cf:26:a1:16:d5:f1:9c:2b:e1:f5:fb:46:25:78:dc:
98:07:9d:6f:ad:4a:cf:d1:a3:6c:16:81:d9:39:bb:
01:9c:5c:b0:3b:ac:f8:3a:93:08:07:bd:60:14:bb:
56:90:6b:ab:d7:92:b5:99:58:bb:3f:43:aa:7d:2f:
40:38:41:96:c4:4a:5f:35:39:ad:5d:67:87:7c:4c:
2d:d7:d6:d8:3a:4d:96:65:b8:25:ea:54:af:82:8a:
74:3a:ee:27:61:0b:b8:e9:00:63:04:29:08:f6:26:
6e:38:04:ff:70:02:4e:95:29:d3:22:73:52:4b:7b:
a9:a7:0d:05:d0:da:f9:f0:a0:e5:70:3f:6d:82:30:
5a:64:8d:2b:c1:c1:e3:73:16:28:5e:7a:b6:80:16:
60:3a:2a:d9:43:cb:81:41:b1:51:ac:41:fd:6e:aa:
ea:9b:af:5b:94:ab:05:6d:0e:c5:05:e1:7d:f2:5e:
52:52:1c:42:30:b4:88:ac:49:83:4b:d8:46:bc:3c:
95:27:2c:c2:c5:e9:fa:d6:e8:33:27:4b:8f:2e:61:
9e:4d:31:7f:a5:62:4d:db:b1:8c:53:d7:14:54:0f:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0E:B1:77:D3:74:E9:6F:90:4B:40:90:38:F4:FA:0A:C2:C2:79:89
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Cw6xd9N06W-QS0CQOPT6CsLCeYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.187.0/24
185.212.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ad:41:0c:d4:6b:df:cc:75:fe:bc:e8:2a:6c:08:d7:0c:de:
1b:8f:c7:6a:ae:ba:69:8f:50:47:cf:17:07:ad:5d:2e:d3:c5:
ba:bb:19:11:44:35:85:63:30:32:fa:f5:dd:34:6a:76:96:3f:
3f:eb:33:37:50:d2:b7:ad:e5:53:bd:49:c5:e9:62:88:53:2e:
b7:e7:2a:7a:d4:a3:89:5f:6c:a9:ec:b1:48:3a:4a:e0:c2:4f:
19:ad:c1:a4:61:ab:dd:7d:d7:aa:d8:ec:2c:0b:a7:79:fd:27:
84:d9:c0:d1:74:34:14:fe:15:42:ee:de:4b:dd:61:6d:d7:cd:
e3:99:aa:07:73:f8:36:4c:e1:0f:6f:23:96:13:03:2c:a3:2d:
94:31:80:e5:66:e8:d1:78:f0:62:03:ca:e5:fd:93:39:ac:5b:
99:61:04:c7:e3:a5:c4:25:b7:72:be:d2:65:00:d9:e3:06:ca:
12:59:9b:2c:07:c5:d6:06:0a:83:42:0b:02:28:e6:40:fc:cf:
36:d8:b3:41:25:30:7a:e2:d1:87:04:2a:0d:cc:90:77:1c:87:
3d:5c:d1:d4:40:10:00:13:16:9d:15:7c:0f:15:2d:8c:66:79:
a1:3e:ea:29:91:a7:d1:d3:6e:97:57:93:f4:7d:1c:34:61:e9:
9b:78:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org