Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa
File: a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa (raw, json)
Hash identifier: qKe8pSzVqy0A9+6+Jluzrue0S1IB+MUwwgj5vsP93HE=
Subject key identifier: 6B:8A:DC:15:82:FC:8C:08:32:EC:44:3B:E6:8F:F0:95:0E:B1:7C:D4
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0186499EF481499C814BD9DCAA7CD1D3C0E8
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa
Signing time: Mon 13 Feb 2023 07:13:19 +0000
ROA not before: Mon 13 Feb 2023 07:13:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.212.204.0/23 maxlen: 24
185.212.206.0/23 maxlen: 24
93.177.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 14 Feb 2023 07:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:9e:f4:81:49:9c:81:4b:d9:dc:aa:7c:d1:d3:c0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 13 07:13:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8adc1582fc8c0832ec443be68ff0950eb17cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:cb:e0:90:a5:82:a4:d0:07:c4:1d:cc:28:
c8:b9:81:15:50:98:b5:38:f4:6f:90:84:06:00:89:
5f:d6:c5:cc:0e:b1:3f:31:e1:cc:2a:df:f2:50:f8:
ee:d1:11:de:21:d3:16:13:fe:9a:70:08:77:25:20:
ff:e8:33:ad:37:e9:3e:47:58:1d:a1:c5:b2:d4:a7:
b5:53:dc:0b:d6:30:15:42:6f:7d:fc:9c:08:1f:6d:
f5:f7:d6:2b:98:6f:6c:45:f6:1e:d3:fd:94:54:be:
ef:cb:1e:0c:8d:76:60:81:82:34:96:37:6c:f3:ec:
eb:0e:a0:be:84:4e:38:46:72:8b:05:35:22:84:4c:
14:5d:c7:fa:5c:84:2a:6c:94:ac:4e:49:a4:19:5d:
38:47:0d:c0:d1:ce:4a:c7:82:6a:65:08:96:36:df:
15:4b:b3:66:ff:2f:e5:2f:b9:3e:df:d8:14:41:e5:
ab:f0:c1:0b:00:95:0f:8a:83:29:be:99:0c:77:40:
e7:07:31:65:9a:a0:e8:5b:ee:bc:8f:81:75:60:35:
7f:98:91:b4:2d:72:67:1f:1c:e8:7a:e4:b5:6f:e0:
7d:0b:e1:df:a4:1a:1c:c3:7b:29:14:c4:5f:bf:58:
c9:c2:cb:79:49:e9:b7:98:72:20:d3:c6:a4:49:38:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:DC:15:82:FC:8C:08:32:EC:44:3B:E6:8F:F0:95:0E:B1:7C:D4
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.212.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:56:1e:3b:a7:35:4a:24:13:ae:6c:1d:0d:a9:d3:3f:a7:89:
2f:4a:e0:55:05:69:89:40:bf:66:d7:85:df:ff:fb:a2:20:f1:
9e:18:67:c6:cd:87:31:47:1e:e7:5e:29:b5:78:c8:d2:ba:97:
a8:13:ff:14:21:2e:8c:72:c5:0b:77:7b:df:ff:7f:bd:f9:75:
f8:de:87:f9:33:56:dd:9b:be:a0:77:64:0c:f4:77:95:2d:c8:
6c:4e:a9:9d:07:48:42:18:aa:21:85:df:18:04:fd:6a:e6:d9:
91:20:79:4b:8c:c9:cd:81:6d:69:47:5f:0a:a0:34:42:17:a5:
f3:3b:fb:1c:ff:ae:58:03:76:9c:0c:85:d2:e9:bb:14:1c:99:
8c:73:a4:ff:81:9d:70:19:e8:e8:fc:29:1e:f9:5f:59:b6:cb:
b6:9e:8e:c7:db:62:a5:8c:30:48:cf:5e:10:c6:e1:8b:33:12:
69:27:6e:ac:26:c7:12:6c:41:26:f7:b2:c2:dc:45:bc:42:6f:
33:b7:77:e4:fc:83:b7:10:0a:4b:e3:7d:39:01:32:86:fd:0d:
32:96:6a:e7:3f:0f:09:1c:63:8c:c2:84:dc:7b:bb:06:50:55:
fa:fb:ac:f6:77:83:b9:b3:5b:d8:26:5e:02:b2:86:14:fd:72:
9c:72:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:02 2024 by rpki-client on console-ams.rpki-client.org