Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/EqBM6IjGBm0v-o-0aiB5bQOJZfM.roa
File: EqBM6IjGBm0v-o-0aiB5bQOJZfM.roa (raw, json)
Hash identifier: 1RS8AEZENADhQ+sZc67H2/RwVR0ZsAUqsZffipYqRa8=
Subject key identifier: 12:A0:4C:E8:88:C6:06:6D:2F:FA:8F:B4:6A:20:79:6D:03:89:65:F3
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1CA61D70EF75F8E510D877BD2CE70
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/EqBM6IjGBm0v-o-0aiB5bQOJZfM.roa
Signing time: Sun 01 Jan 2023 14:34:54 +0000
ROA not before: Sun 01 Jan 2023 14:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47596
IP address blocks: 185.120.57.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ca:61:d7:0e:f7:5f:8e:51:0d:87:7b:d2:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12a04ce888c6066d2ffa8fb46a20796d038965f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:1f:1f:e8:47:43:66:be:8e:47:1d:07:ef:
87:96:d0:3b:f0:fb:64:50:c9:fd:f9:fd:5c:d6:d8:
45:83:a2:bd:bf:7b:a7:5a:fb:de:ab:6e:d6:d9:78:
bb:c7:cf:02:59:4f:66:fd:4c:30:be:2e:04:0a:91:
fd:b5:19:bb:7c:98:ac:e3:3a:cd:05:13:e2:23:76:
5c:4d:a1:a2:11:8f:48:50:86:e4:75:69:24:b8:1b:
5a:19:f0:b1:b2:e8:e0:94:74:f3:fb:db:00:65:68:
ef:27:36:11:9c:e8:14:ef:59:fa:e8:9f:94:81:cd:
00:36:43:cb:2a:62:75:d4:ec:83:b2:2c:64:fd:19:
26:4a:58:fa:e1:b8:8f:34:ab:55:7e:37:7b:73:5d:
c1:4d:f8:c7:43:9e:5e:12:4b:54:47:23:a5:c5:d0:
9f:ca:d3:ff:0b:df:28:15:5d:f6:ce:05:62:55:c9:
d2:95:5f:10:c2:80:b7:08:a1:c8:9f:ce:69:fd:c5:
a0:ab:9a:f1:d2:54:11:54:48:8d:90:04:2f:bd:b6:
24:81:af:ba:bd:41:a2:50:e4:60:ae:58:fb:21:9d:
12:53:a5:11:72:4c:07:0e:9a:9e:dd:22:ed:b9:6a:
5d:da:8d:20:d7:29:b0:cc:62:dc:45:36:6d:74:26:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:4C:E8:88:C6:06:6D:2F:FA:8F:B4:6A:20:79:6D:03:89:65:F3
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/EqBM6IjGBm0v-o-0aiB5bQOJZfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
7d:60:f3:6f:c4:02:2c:4b:1e:e8:0a:eb:59:e1:77:d2:c0:7a:
22:85:91:84:93:63:b9:53:cd:d6:2e:0c:d8:a1:d0:e5:76:8e:
d4:09:b4:cc:61:e0:d3:1f:29:d7:aa:e0:2f:21:1a:ba:07:f1:
30:89:ac:fd:ad:79:14:37:15:d2:e4:7c:db:92:e1:33:5c:32:
38:5d:46:84:7e:b7:00:1c:df:a5:79:61:10:70:08:66:23:10:
d9:4b:0c:68:c9:b4:88:aa:4d:23:42:46:10:aa:e0:a9:38:ed:
d4:de:c4:9c:32:51:70:73:6d:5a:a7:9d:9f:e1:fc:b0:d4:49:
48:fa:ea:4c:d2:42:89:97:e4:4d:de:17:1c:e5:58:50:33:d4:
8b:ea:77:70:22:24:c8:bb:df:d0:5f:70:a0:45:9c:85:5a:93:
ed:b4:ba:a9:03:e8:7e:17:8d:a0:2c:e8:a4:45:12:b3:2b:06:
41:13:59:98:a4:7f:a7:89:b9:a3:92:47:d4:bb:e8:38:72:62:
a1:ad:74:73:f4:82:69:02:b3:cb:75:54:b2:77:79:ee:82:37:
4b:26:df:0c:33:22:13:51:db:c9:16:39:32:33:18:39:4c:fb:
f8:1e:af:4c:9d:ea:53:bc:25:09:12:fa:46:c1:dd:48:7d:b1:
ae:9b:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org