Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/K6yM8vaRtLI-DYpAAsjLPuOh37s.roa
File: K6yM8vaRtLI-DYpAAsjLPuOh37s.roa (raw, json)
Hash identifier: H/6hnkI+K35R5cOxDM8VSDbliPEmzhh2xApY/KViG9Q=
Subject key identifier: 2B:AC:8C:F2:F6:91:B4:B2:3E:0D:8A:40:02:C8:CB:3E:E3:A1:DF:BB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0B6A7D9B8789F7269958E50264E7A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/K6yM8vaRtLI-DYpAAsjLPuOh37s.roa
Signing time: Mon 02 Jan 2023 05:25:01 +0000
ROA not before: Mon 02 Jan 2023 05:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198984
IP address blocks: 195.136.172.0/24 maxlen: 24
195.136.175.0/24 maxlen: 24
195.136.184.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b6:a7:d9:b8:78:9f:72:69:95:8e:50:26:4e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bac8cf2f691b4b23e0d8a4002c8cb3ee3a1dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:c8:9c:18:c7:8a:02:bb:a0:af:a3:74:ee:
ec:25:6a:ef:48:3a:1b:f0:c2:2d:58:99:1b:13:ea:
10:64:16:79:61:82:21:7a:46:15:85:c2:c1:36:4d:
2f:53:10:cb:0d:d1:13:e9:90:97:f3:f0:f7:1e:d7:
d0:75:f5:db:26:4e:37:8a:fe:bc:cb:86:95:b7:c8:
ad:7c:bf:f2:25:c2:1e:de:61:fb:22:ee:dd:75:cb:
65:4d:8a:08:c5:ca:ad:89:29:b2:0f:12:38:91:68:
38:91:03:b7:85:76:e8:93:9e:7f:1c:0b:d6:3e:c3:
64:12:bb:61:3b:fc:eb:cd:c3:40:66:fb:bd:10:07:
e9:08:e6:bd:76:b2:9b:fc:9a:8e:86:a1:95:e0:a5:
88:91:19:ca:12:bc:d4:db:e8:4e:83:38:da:50:8b:
76:d9:1f:73:02:81:1f:45:84:e3:54:c8:76:4d:27:
e1:1a:ea:e6:22:54:97:0b:15:81:fe:86:f6:26:26:
f1:76:e1:df:8d:aa:77:b8:0f:e4:13:e2:fb:91:22:
d6:db:e7:31:17:e8:a6:6a:d8:85:bd:cc:a6:a3:4b:
c0:8c:6f:4e:53:85:73:01:42:50:74:b6:06:c6:95:
99:67:f8:c3:f0:62:09:57:46:a4:13:a5:8f:8d:1a:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:8C:F2:F6:91:B4:B2:3E:0D:8A:40:02:C8:CB:3E:E3:A1:DF:BB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/K6yM8vaRtLI-DYpAAsjLPuOh37s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.172.0/24
195.136.175.0/24
195.136.184.0/23
Signature Algorithm: sha256WithRSAEncryption
64:24:c2:09:d0:0d:0e:95:eb:ce:c6:bd:19:b1:cf:86:9d:bd:
de:c9:60:3f:f3:f8:4b:d9:a9:bc:36:9c:b3:54:99:ea:9e:69:
16:e2:ea:d2:ca:1b:61:5f:8e:6d:14:c5:20:17:55:9a:2d:9d:
6d:b7:71:de:6c:39:be:e6:45:47:aa:24:af:86:0e:0b:28:d5:
05:87:f0:ce:84:c7:24:5f:fa:24:c8:2f:2f:4b:7b:39:09:83:
1c:0b:68:f0:68:6a:97:17:43:e6:12:40:79:74:cf:61:7f:91:
55:b7:e6:b4:41:ea:a4:3d:0f:5b:34:11:53:41:58:2c:07:fe:
b3:47:c1:ac:39:c2:c6:2f:fb:22:d5:3b:c1:57:44:8f:0a:c6:
30:66:74:b1:74:14:3c:b3:63:82:a1:8b:c7:97:48:51:1b:66:
ac:14:96:57:9a:70:6c:91:99:22:7a:3e:06:f6:3c:3c:c2:36:
1f:0b:74:bd:80:57:cb:a0:6e:d1:7a:ba:2b:16:e8:f4:9a:05:
94:71:ca:1c:bc:00:8e:5a:4f:ce:9b:04:60:b0:28:4a:c3:ef:
9b:f2:e8:bc:9b:b1:54:bc:15:54:5c:d5:c1:0e:4e:14:50:78:
83:63:0a:81:0e:c2:0b:03:bc:2f:00:8c:84:09:ae:e6:e2:6b:
87:59:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:36 2024 by rpki-client on console-fra.rpki-client.org