Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/6a9iKed2aW9C2dmbdfStBXE2890.roa
File: 6a9iKed2aW9C2dmbdfStBXE2890.roa (raw, json)
Hash identifier: g0ee4dX7K4qktIPZqJZLz8jmuhqRvEEjK/h4BtL4xxs=
Subject key identifier: E9:AF:62:29:E7:76:69:6F:42:D9:D9:9B:75:F4:AD:05:71:36:F3:DD
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 018AA73EDFC64D688DFEC1F428C45BB87539
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/6a9iKed2aW9C2dmbdfStBXE2890.roa
Signing time: Mon 18 Sep 2023 07:43:50 +0000
ROA not before: Mon 18 Sep 2023 07:43:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31673
IP address blocks: 185.111.120.0/22 maxlen: 24
185.2.24.0/22 maxlen: 24
80.247.160.0/20 maxlen: 24
193.239.88.0/22 maxlen: 24
185.139.148.0/22 maxlen: 24
85.255.208.0/20 maxlen: 24
81.26.208.0/20 maxlen: 24
87.237.96.0/23 maxlen: 24
94.126.64.0/21 maxlen: 24
87.237.100.0/23 maxlen: 24
62.148.160.0/19 maxlen: 24
81.93.48.0/20 maxlen: 24
2a02:728::/32 maxlen: 48
2a06:5dc0::/29 maxlen: 48
2001:16e8::/32 maxlen: 48
2a00:f80::/32 maxlen: 48
2a02:4640::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:3e:df:c6:4d:68:8d:fe:c1:f4:28:c4:5b:b8:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Sep 18 07:43:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9af6229e776696f42d9d99b75f4ad057136f3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:77:43:92:d0:94:01:d6:e6:c6:90:fe:91:ce:
6b:db:56:23:06:4c:90:08:df:ad:b5:91:91:e7:9b:
61:9b:d9:b5:f7:62:5f:c4:81:a9:c2:f7:b8:ac:56:
9d:51:8c:3e:06:15:d2:95:3a:c1:a6:1f:81:5b:5e:
73:5b:1a:71:b4:39:b3:c0:46:df:9b:39:a6:a0:3f:
3e:d6:e8:6b:e7:c1:36:8d:c0:86:ec:66:3c:17:9e:
b5:9a:a4:16:49:26:49:54:74:15:5a:54:6a:7d:1e:
f7:e4:b1:f1:eb:78:2d:e9:05:86:ef:6b:60:aa:97:
b5:c1:b8:3b:9d:ca:db:ea:96:3c:0d:c3:af:21:61:
f3:6b:f7:55:d3:2b:dd:9c:ac:96:87:38:b6:f4:ab:
af:c8:83:ae:f1:c4:1a:eb:64:a7:4f:4f:f5:1b:cc:
e4:f4:45:9f:89:0d:ae:77:f8:8a:a6:a2:7e:df:02:
48:67:6c:86:96:03:e8:8b:49:85:d7:16:e4:f1:f5:
fc:f5:d8:70:02:af:d7:b7:d3:78:ba:a3:31:4a:78:
3a:1b:b2:50:a1:6d:fc:e6:92:cd:9d:e4:c0:47:f5:
27:6c:7e:f1:a0:72:d5:a2:a9:cc:81:bb:57:1d:76:
fa:29:5f:fc:d0:9b:fc:bd:c0:39:9e:21:0b:38:6e:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:62:29:E7:76:69:6F:42:D9:D9:9B:75:F4:AD:05:71:36:F3:DD
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/6a9iKed2aW9C2dmbdfStBXE2890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.160.0/19
80.247.160.0/20
81.26.208.0/20
81.93.48.0/20
85.255.208.0/20
87.237.96.0/23
87.237.100.0/23
94.126.64.0/21
185.2.24.0/22
185.111.120.0/22
185.139.148.0/22
193.239.88.0/22
IPv6:
2001:16e8::/32
2a00:f80::/32
2a02:728::/32
2a02:4640::/32
2a06:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
37:b9:e5:bb:da:e0:33:e8:ae:82:70:bc:f3:95:75:27:24:79:
81:c1:39:31:6e:72:fd:3f:56:7c:f6:8c:89:52:48:3d:4a:ea:
89:04:04:6a:c9:2e:a4:f9:d2:d9:37:78:c7:8f:0c:13:e1:88:
7d:c6:86:21:23:5e:cb:55:ec:f8:6d:1e:3e:9a:c2:8e:d1:5f:
76:82:32:7f:a3:c0:3d:43:d2:67:75:38:1b:0e:10:68:72:b2:
a3:7b:b6:e4:4c:1f:68:00:a0:ee:6b:14:1e:92:8b:83:e8:b3:
6b:39:6e:08:0a:d4:3a:2a:aa:4f:54:e9:88:e7:f2:16:04:bb:
e4:86:8d:55:99:e6:c7:7f:5d:3f:8c:1d:2e:80:a7:31:9a:17:
9a:4c:46:d8:70:40:3a:74:94:d2:b8:4b:9f:a6:44:7b:6d:32:
25:0b:f3:49:ad:04:02:cd:63:a9:4e:ce:a4:cf:de:54:a9:3f:
bc:ca:37:fd:66:14:74:d9:d9:7c:dd:59:86:e3:fd:a7:61:3c:
17:d6:8d:71:55:29:7a:92:a0:00:a0:93:04:cd:3a:5f:10:0b:
21:d7:c8:6b:f3:e0:33:5f:a2:84:dd:c1:3e:1e:11:6e:d2:d0:
10:d3:9c:74:3a:e5:bd:b7:01:e2:a5:a2:84:7f:c5:fc:c0:8c:
d1:6a:25:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 19 09:16:45 2023 by rpki-client on console-fra.rpki-client.org