Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6DLVwz41n9om9aZH_V3EJc6QoTk.roa
File: 6DLVwz41n9om9aZH_V3EJc6QoTk.roa (raw, json)
Hash identifier: R3t1KwoCFQ9XwnXBKYVgJhqOMSUtqYlLDpCpKYWLpNY=
Subject key identifier: E8:32:D5:C3:3E:35:9F:DA:26:F5:A6:47:FD:5D:C4:25:CE:90:A1:39
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01872C5E4A9EC7923B3464E45DBE64BFB054
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6DLVwz41n9om9aZH_V3EJc6QoTk.roa
Signing time: Wed 29 Mar 2023 07:56:29 +0000
ROA not before: Wed 29 Mar 2023 07:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199152
IP address blocks: 185.120.58.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 14:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:5e:4a:9e:c7:92:3b:34:64:e4:5d:be:64:bf:b0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 29 07:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e832d5c33e359fda26f5a647fd5dc425ce90a139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:4d:39:8b:1c:ab:4b:1a:fa:45:3e:7f:ba:
39:04:3b:3b:13:26:8b:74:c4:d0:f2:9c:f4:15:51:
e3:51:2d:f8:2e:9f:64:f1:a7:b3:ea:ab:a6:c6:a5:
1b:c0:f4:f5:2d:87:6e:35:be:ea:48:86:9a:fe:e0:
0b:b9:3c:04:3f:cb:76:7e:b2:ae:dd:db:48:33:bb:
4c:f8:0d:4d:ca:60:28:bf:34:a4:4b:54:2b:20:78:
f8:6e:d2:90:d5:69:e6:dc:fd:4f:3a:fe:fc:51:da:
13:b7:26:ac:0b:41:76:33:9a:ae:47:89:7a:cf:96:
20:12:82:7a:c6:1c:c7:85:e2:90:1a:71:ec:9e:fc:
88:36:c9:71:5c:ba:02:78:ab:a3:89:d9:d9:8b:a7:
63:01:56:0b:3e:23:a4:f0:9e:53:c4:2d:4e:b8:99:
25:dd:bc:68:ab:40:9f:41:a3:1d:6f:82:de:38:cd:
0b:7d:15:db:57:68:12:ea:10:b3:c3:bd:9b:b0:ac:
60:e2:20:f5:1b:32:89:e1:17:2b:9f:95:8f:d7:39:
3d:60:dd:3c:46:50:0f:ba:20:d5:fe:ff:7c:62:c5:
24:81:d0:5e:09:96:0a:a1:69:99:b9:29:ac:31:c9:
d8:1b:51:bd:03:ca:cc:7c:64:c1:25:5e:5e:a8:b8:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:D5:C3:3E:35:9F:DA:26:F5:A6:47:FD:5D:C4:25:CE:90:A1:39
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6DLVwz41n9om9aZH_V3EJc6QoTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
Signature Algorithm: sha256WithRSAEncryption
33:90:51:76:e8:54:3f:65:2f:97:b8:bb:66:38:4f:ce:4c:56:
0b:9e:3b:59:8e:89:71:9f:24:26:90:b5:d4:50:de:f2:11:ff:
53:c8:d1:ae:64:3f:6c:4e:dc:cf:4a:10:f0:55:fb:3f:bd:c4:
59:2d:a7:51:4e:b3:c2:ef:c8:3a:a2:ec:8a:02:e0:51:ae:7e:
55:53:ff:ec:e6:f9:fa:7d:97:8b:99:53:3c:47:9f:2a:6e:e4:
79:51:a0:f7:fb:16:e8:d7:fc:e4:a7:55:4c:24:72:50:9d:ab:
38:d3:9c:63:36:44:c9:ee:d8:89:80:66:f5:3a:65:2c:ee:e0:
6d:7b:aa:10:04:77:68:e2:d8:6f:c1:01:37:89:62:e8:5f:b3:
69:bd:83:4c:e1:b3:d4:e1:90:e8:6a:8f:aa:d0:7e:be:1c:6f:
42:1e:72:f5:43:f0:6e:dd:d6:21:62:2d:01:91:ec:51:8e:20:
05:f4:60:04:ce:93:d4:9c:3b:24:3a:55:b0:58:bd:13:13:85:
ee:8c:9f:08:c1:01:ca:a2:12:10:2e:2e:79:d2:de:cc:3f:d2:
51:0c:47:43:93:31:59:d0:68:82:d1:25:81:6f:fd:13:4d:99:
f8:cb:4d:25:20:c3:e4:fe:f2:4c:e6:14:6e:94:5b:4e:97:c5:
08:6e:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org