Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/CiWI6ja_AXR5poFZXt6wtu7jpys.roa
File: CiWI6ja_AXR5poFZXt6wtu7jpys.roa (raw, json)
Hash identifier: dBiVeNnKztgvbTlPnj9koZshBLwrz4BMxHr4KdqyXYM=
Subject key identifier: 0A:25:88:EA:36:BF:01:74:79:A6:81:59:5E:DE:B0:B6:EE:E3:A7:2B
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 0189449C7505E676F11ED99B1F39EA571646
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/CiWI6ja_AXR5poFZXt6wtu7jpys.roa
Signing time: Tue 11 Jul 2023 11:00:51 +0000
ROA not before: Tue 11 Jul 2023 11:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212136
IP address blocks: 81.22.47.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:9c:75:05:e6:76:f1:1e:d9:9b:1f:39:ea:57:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jul 11 11:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a2588ea36bf017479a681595edeb0b6eee3a72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:8f:1a:ae:1e:1b:f7:62:b7:c9:b8:25:b3:
24:28:08:03:94:97:5f:ea:61:2d:3a:98:87:17:a5:
1e:6c:96:21:30:40:d2:d2:47:9f:09:0c:bf:aa:87:
c9:e7:26:4f:ed:bf:b2:83:40:8c:da:81:0c:14:5b:
59:97:9a:aa:2e:f5:1f:dc:17:d7:f6:f5:77:5a:ec:
ba:80:e5:5b:82:2c:b7:be:44:c8:46:6f:22:14:a9:
e8:00:bd:95:a8:d9:2b:60:af:84:de:03:9d:e4:8b:
b1:11:14:1d:bc:d1:c2:cb:39:ee:a9:1b:4a:8a:56:
be:9b:b1:df:19:d8:f4:52:39:81:ff:d1:bb:2a:25:
9d:6e:a8:5b:92:49:c1:25:d8:cc:c1:09:b7:e8:ab:
01:a3:1a:07:ba:fe:66:ad:4d:b8:58:02:85:8e:03:
48:95:19:19:74:e5:11:ad:33:ed:e7:19:45:7b:b5:
90:2a:70:a6:c5:40:0d:e1:90:75:0c:0c:f9:7a:20:
f2:8d:ab:df:ac:f1:66:20:82:87:e9:cd:24:fa:2c:
a0:a4:3c:71:79:aa:68:f5:b0:dd:bd:d4:3d:fa:01:
66:29:d4:82:2a:07:e3:e3:ba:60:92:ad:1b:f8:97:
14:78:48:46:07:4d:f0:45:cb:11:30:f3:bc:2d:79:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:88:EA:36:BF:01:74:79:A6:81:59:5E:DE:B0:B6:EE:E3:A7:2B
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/CiWI6ja_AXR5poFZXt6wtu7jpys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.46.0/23
185.228.248.0/24
185.247.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:04:3a:84:f0:9d:67:37:b8:f9:3c:9d:d1:66:90:46:fd:fb:
37:93:69:c1:3d:bf:07:a1:5e:32:b7:97:db:8e:8c:81:37:a0:
78:4e:71:19:5e:28:fe:6e:6e:b1:c6:0b:f3:49:0e:07:64:17:
10:1e:84:fc:4b:f4:a6:3a:0c:33:14:ae:0a:d0:da:e4:72:87:
ac:ab:03:95:a1:52:5a:17:22:a6:ec:ce:46:2f:47:b3:64:49:
8c:20:43:da:97:f3:cd:04:9d:89:da:0c:46:44:5b:e1:29:df:
f7:de:ca:38:7f:df:e7:15:8d:23:15:0e:ac:a8:9c:05:9e:a3:
52:de:c8:96:ce:e8:c0:69:f1:b4:2d:c7:8a:a2:a2:74:94:7b:
9c:39:21:20:85:d6:61:c4:88:00:20:26:b8:41:f0:ae:09:6e:
0a:32:4c:1b:70:8c:16:63:aa:90:ca:fb:3e:bc:be:8b:63:1c:
65:fe:03:26:f4:22:49:d8:8d:06:46:7d:06:c8:4e:07:e2:eb:
cc:ff:ba:ff:13:be:40:c0:e1:98:3a:6b:9f:88:56:0a:b2:05:
b2:b1:fc:a7:83:48:a6:75:46:9f:7b:92:2f:05:76:99:1c:80:
73:b6:57:cc:ff:6e:33:c8:10:02:ee:02:28:2d:9b:ce:81:da:
1b:5a:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:47 2024 by rpki-client on console-fra.rpki-client.org