Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/6jSI8cEdm2WFhL5jMRXMA49FV00.roa
File: 6jSI8cEdm2WFhL5jMRXMA49FV00.roa (raw, json)
Hash identifier: w6yZalf/yOgBKz3U9h9ezTFvd+QnWuXihdBGF0UI2SM=
Subject key identifier: EA:34:88:F1:C1:1D:9B:65:85:84:BE:63:31:15:CC:03:8F:45:57:4D
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 018918226F75D5E39D79627B1C5C751626E6
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/6jSI8cEdm2WFhL5jMRXMA49FV00.roa
Signing time: Sun 02 Jul 2023 19:44:17 +0000
ROA not before: Sun 02 Jul 2023 19:44:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 212.34.0.0/19 maxlen: 24
185.98.224.0/22 maxlen: 24
213.139.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:18:22:6f:75:d5:e3:9d:79:62:7b:1c:5c:75:16:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jul 2 19:44:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3488f1c11d9b658584be633115cc038f45574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:bc:16:4f:fc:c7:a2:48:c5:77:ae:a3:41:
ab:6f:f1:3b:5c:74:da:9d:a8:cd:28:35:6c:c6:72:
14:0c:f6:d9:f6:8e:01:01:7e:2f:d5:6e:d4:ab:99:
44:1e:8f:bd:a8:e9:a9:c0:de:ac:70:70:cc:55:4f:
40:c7:81:fe:a3:62:3e:50:33:16:5c:1b:8c:9e:98:
e4:ff:27:af:41:bc:06:de:f4:ec:85:43:56:81:c5:
7f:c0:c4:c9:cf:a6:72:a1:af:83:21:52:55:6d:21:
e4:a8:0f:00:f3:61:38:a9:46:f0:57:c6:84:59:1d:
4f:84:77:32:35:04:55:04:a9:ec:0a:af:ee:b2:20:
f1:a6:d7:6a:d2:5e:35:ca:31:36:63:7f:a8:9b:ac:
0a:59:3e:a0:49:be:f3:2f:87:89:3c:f8:5a:00:86:
34:3b:a9:b9:28:c0:4c:f1:71:79:27:6b:b2:2d:70:
7c:3d:e5:4e:5a:5d:93:ec:b4:ce:d4:5b:5c:04:cc:
c3:88:c0:6d:80:d9:4b:48:a0:49:b9:ad:f2:48:ae:
d2:f9:d8:09:2d:80:b2:d2:b0:03:57:c4:0b:5b:00:
40:e7:e0:3b:2a:6e:bd:ef:34:0a:a2:dc:f5:93:64:
42:06:df:bc:e5:1c:aa:df:d0:de:e7:04:12:75:89:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:88:F1:C1:1D:9B:65:85:84:BE:63:31:15:CC:03:8F:45:57:4D
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/6jSI8cEdm2WFhL5jMRXMA49FV00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:2a:af:9e:97:fa:44:c0:9e:5b:0a:e6:03:36:2b:f5:75:cd:
d1:6e:ba:8a:d9:43:d9:f2:5b:c1:6b:27:cd:87:29:00:fa:d1:
26:79:a3:36:21:24:e1:fe:3a:77:65:d9:9c:45:d1:e9:62:da:
4f:6b:e0:0c:4c:d4:a4:c8:00:2b:df:29:d7:dd:8e:a9:ec:14:
14:4e:7a:e8:9e:52:44:5d:7f:d7:4c:fc:8e:13:8a:62:2c:e9:
c7:18:9a:dd:56:94:26:71:cd:bb:de:85:0c:3b:b7:26:1a:e3:
fb:06:4a:fa:79:1d:c5:35:dd:4e:e7:c0:32:01:8e:c2:f2:d8:
c1:5c:8b:21:b8:fe:af:a0:71:69:ee:2b:7c:70:4e:d0:a7:53:
81:b0:f3:ec:b7:39:5d:67:73:bb:00:13:f5:c6:52:05:a8:a6:
16:e5:4a:f3:b6:90:28:f5:43:00:25:05:d5:5e:31:83:67:dd:
e5:0b:44:3f:3b:43:d2:09:23:ef:a2:92:a2:54:0c:b1:85:f9:
7b:46:e6:c4:ca:75:b3:20:74:45:5a:a6:a0:dd:d8:6b:19:b2:
df:10:3b:70:9a:f8:61:7d:72:a4:fc:24:db:99:86:90:f0:f7:
8d:71:57:5b:51:c5:49:7b:3d:17:b6:b5:f2:a6:6a:f6:a9:a7:
12:4d:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 12:07:12 2023 by rpki-client on console-fra.rpki-client.org