Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6BPNcu-emI5_aH7z8-zQq87Q_Fw.roa
File: 6BPNcu-emI5_aH7z8-zQq87Q_Fw.roa (raw, json)
Hash identifier: AR552OwW6eNi2vJuc9fWuBmogJA6JgmqTSHJPELti+s=
Subject key identifier: E8:13:CD:72:EF:9E:98:8E:7F:68:7E:F3:F3:EC:D0:AB:CE:D0:FC:5C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0185F394B9B8C4A89706CC26F778AF02BDBD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6BPNcu-emI5_aH7z8-zQq87Q_Fw.roa
Signing time: Fri 27 Jan 2023 14:14:48 +0000
ROA not before: Fri 27 Jan 2023 14:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44834
IP address blocks: 188.130.236.0/23 maxlen: 24
46.8.27.0/24 maxlen: 24
109.248.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:94:b9:b8:c4:a8:97:06:cc:26:f7:78:af:02:bd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 27 14:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e813cd72ef9e988e7f687ef3f3ecd0abced0fc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:54:9c:5a:6a:9a:a5:17:9a:0f:00:01:d1:
12:4d:61:5b:ec:0a:52:c4:0d:ce:40:2c:e8:6b:36:
17:41:45:f9:48:63:2f:77:bc:3e:06:fa:3a:5d:ee:
97:91:a2:b1:7f:72:89:39:16:67:61:6d:ea:56:7c:
59:ed:25:38:11:61:be:a1:71:c7:95:cf:44:0b:33:
62:97:eb:70:f2:08:25:8d:56:4d:1c:06:84:10:b5:
db:cf:36:eb:da:de:9f:b6:fe:4c:5c:42:84:95:2f:
bc:47:58:a7:ef:a1:1d:13:24:8b:a4:83:53:d9:6a:
67:50:24:c3:fd:16:57:b6:a3:d7:49:61:67:02:91:
7c:22:5a:f5:30:5a:d5:a7:e1:86:93:8b:0e:69:89:
06:35:9f:86:52:f7:f1:6e:33:88:2b:72:8b:d1:26:
bc:f6:b9:ce:58:8f:e8:4a:19:c2:e3:ad:d8:70:65:
cd:c0:8b:cb:9e:6d:a3:0d:71:3d:56:de:b7:92:98:
53:cb:eb:65:40:48:f6:c7:3d:90:30:4b:89:68:e6:
51:11:59:18:f4:56:5d:6d:2b:8b:2e:1a:36:1b:ba:
b4:51:f7:53:51:b9:24:b8:4a:18:62:6c:3a:2b:51:
16:8b:02:b0:c4:1c:5b:c3:74:59:0e:1b:a0:33:6d:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:CD:72:EF:9E:98:8E:7F:68:7E:F3:F3:EC:D0:AB:CE:D0:FC:5C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6BPNcu-emI5_aH7z8-zQq87Q_Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.27.0/24
109.248.255.0/24
188.130.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:e9:1d:f1:36:88:48:af:e2:8b:90:3b:ff:84:5c:4d:e9:f1:
c6:b8:fa:36:f2:21:6f:f6:e9:0f:b6:d0:63:20:aa:d4:ec:68:
a5:2b:ab:3d:68:d7:1f:87:9e:b6:b7:fa:0f:98:4d:d8:b5:e4:
ec:af:ec:9b:84:d2:f7:af:f6:00:26:01:7f:28:be:f1:a3:94:
4f:d4:25:97:bb:33:de:c0:a7:00:49:5c:4f:57:a2:10:35:ad:
0e:6a:fc:fb:f3:4b:5b:50:77:88:3e:e0:3c:e8:7c:18:1a:8b:
0d:29:51:a4:74:ce:9c:53:ee:a5:a9:35:9d:d9:45:ab:44:1b:
79:13:52:c4:ca:cc:ae:ac:3c:b7:26:39:84:1a:99:6b:99:2f:
14:4a:a5:ac:05:2c:5a:21:be:e8:35:5e:f1:80:48:8b:dc:92:
70:3d:21:68:b4:77:a5:8f:8e:14:2e:36:9f:d9:31:00:1d:ba:
09:9d:6b:fc:85:5b:36:cb:80:da:de:72:ff:88:10:17:f4:ad:
75:8e:b2:cf:0f:4f:41:11:0f:32:0f:ed:40:02:ef:44:e9:01:
fc:d0:a5:b6:91:dc:21:22:17:11:a3:02:a5:90:37:7d:43:9c:
54:b8:5e:4e:5b:18:cd:15:b7:1a:44:be:59:99:11:58:4e:aa:
db:07:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:51 2023 by rpki-client on console-ams.rpki-client.org