Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/f6AxZ60p_kbx_RiKry3obJR3By0.roa
File: f6AxZ60p_kbx_RiKry3obJR3By0.roa (raw, json)
Hash identifier: /qH4enJ/VC4TWpY4biCyUaVAkFABMj/urGvETabJxf4=
Subject key identifier: 7F:A0:31:67:AD:29:FE:46:F1:FD:18:8A:AF:2D:E8:6C:94:77:07:2D
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 01856CCADFD0B1B2B3D50E09A5C856E02EDF
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/f6AxZ60p_kbx_RiKry3obJR3By0.roa
Signing time: Sun 01 Jan 2023 10:05:12 +0000
ROA not before: Sun 01 Jan 2023 10:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.225.236.0/22 maxlen: 24
146.66.125.0/24 maxlen: 24
77.104.128.0/18 maxlen: 24
146.66.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:df:d0:b1:b2:b3:d5:0e:09:a5:c8:56:e0:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 1 10:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa03167ad29fe46f1fd188aaf2de86c9477072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:57:63:02:26:a9:42:60:e7:5a:27:f4:23:
72:33:8e:2c:ed:cd:5c:fd:30:41:27:e9:d0:9c:9c:
a2:0b:d1:9d:82:b0:24:de:40:4c:75:f3:b6:d5:22:
01:92:12:25:82:6e:96:18:95:c3:14:93:14:85:d1:
3a:5c:5c:de:d2:37:f7:a5:0f:81:a0:e0:01:19:5d:
f6:2f:12:a2:13:00:6e:2d:24:60:1c:45:81:50:44:
4f:71:6c:17:1c:79:26:c6:ff:ab:86:7c:75:bd:79:
8a:23:54:75:f5:a8:91:24:31:b6:5a:99:3f:9f:41:
fa:9e:09:07:53:a4:7c:8d:5d:44:e9:46:59:a6:a3:
e6:ef:58:96:02:d2:0a:67:76:be:f4:ba:e9:e3:1a:
5b:6b:8e:f8:be:3d:cf:25:a7:59:d1:0c:6d:57:41:
52:4b:de:bb:4d:5a:09:d4:fe:e4:38:f5:91:10:57:
a4:86:ba:01:3b:b8:bc:6c:14:0f:f8:c2:0b:48:2e:
14:57:86:0e:e7:a7:27:f1:fc:55:42:92:9f:19:a4:
99:14:ac:a0:51:84:78:d9:c8:48:dc:11:67:f8:16:
99:09:8e:c1:8b:8f:ce:d3:1b:c4:af:02:8d:14:71:
0f:0f:f6:30:55:b9:79:e5:a0:a6:c5:10:cc:ee:68:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:31:67:AD:29:FE:46:F1:FD:18:8A:AF:2D:E8:6C:94:77:07:2D
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/f6AxZ60p_kbx_RiKry3obJR3By0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.128.0/18
146.66.64.0/18
185.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f3:57:a5:7a:1f:76:26:60:12:94:51:3f:67:62:46:e3:85:
b0:0b:ae:3f:51:8b:11:60:29:be:a9:5b:71:b2:3f:4e:31:f8:
66:ec:92:73:2b:69:b7:93:cb:90:8e:77:a9:1f:37:8a:35:ac:
bf:74:7d:53:68:44:24:02:cf:1e:d9:4c:ba:41:bb:2e:7f:02:
2e:07:bd:19:65:31:c2:5c:26:5c:01:81:21:cc:42:d4:ec:42:
04:40:55:dc:35:da:6f:3b:e9:75:99:00:d5:6c:ff:0c:99:b3:
5d:9c:ba:36:4c:99:49:05:b2:ad:d0:74:6e:ba:2e:bd:39:c6:
09:14:85:9a:93:a8:3a:72:8e:1a:54:c2:5a:b0:d0:42:b2:c1:
28:59:e6:c5:5d:32:67:19:21:b0:cc:b3:29:05:66:1c:30:e6:
04:75:5e:aa:71:13:82:9b:62:3b:95:19:1f:2c:f0:e3:2f:4e:
22:90:35:cc:2a:e8:f1:73:a7:e0:10:ac:5a:42:c3:67:e4:d8:
fc:bf:47:d6:35:4c:4c:8d:0a:60:07:2c:d3:aa:d0:93:0e:e4:
be:2e:4e:5a:63:c5:e7:17:84:6b:9e:27:dc:1f:d1:f8:7f:b4:
2d:a1:26:cd:9e:9d:dd:60:4c:22:59:db:57:0b:36:1c:37:b9:
1e:0c:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 18:35:12 2023 by rpki-client on console-ams.rpki-client.org