Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/6Pt_b2dJIY2fPVW5qVAB3h7En84.roa
File: 6Pt_b2dJIY2fPVW5qVAB3h7En84.roa (raw, json)
Hash identifier: AcmxVPw3k2VSwJi9ZngwRuh1pSd5r4Ze1uhdE5GDilQ=
Subject key identifier: E8:FB:7F:6F:67:49:21:8D:9F:3D:55:B9:A9:50:01:DE:1E:C4:9F:CE
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 018572FA8F2147F5C30C50AB3055653FC428
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/6Pt_b2dJIY2fPVW5qVAB3h7En84.roa
Signing time: Mon 02 Jan 2023 14:55:01 +0000
ROA not before: Mon 02 Jan 2023 14:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47176
IP address blocks: 185.238.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:8f:21:47:f5:c3:0c:50:ab:30:55:65:3f:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jan 2 14:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8fb7f6f6749218d9f3d55b9a95001de1ec49fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:39:c9:19:c8:99:69:4b:ea:5b:1b:96:76:
64:e5:7b:34:33:58:55:a9:3f:31:94:14:ba:4b:67:
7d:28:73:60:33:13:bc:ac:04:13:6c:06:27:b4:99:
f8:3a:d4:29:27:43:99:26:c3:0c:4d:e0:53:13:d4:
42:95:89:05:cf:36:dd:f4:1c:65:4c:0f:ea:12:48:
05:0f:09:f6:3f:53:85:e6:58:15:2f:03:b4:99:00:
8b:45:11:d9:04:5f:6e:a8:63:a5:33:44:df:36:2f:
91:e2:fe:08:3f:01:68:99:00:37:15:b9:e6:28:47:
d9:18:b0:7f:3f:4e:b7:95:64:d4:f9:34:0e:ba:b5:
89:9f:af:87:fe:2b:8e:96:9b:e8:15:19:77:3c:31:
25:93:69:66:83:21:ed:3e:94:30:0f:07:88:dd:ad:
dd:80:f7:cf:15:12:86:70:f6:2f:e5:bd:38:e6:5c:
da:05:e7:8f:a6:0e:76:09:47:d1:5e:05:71:ab:8f:
bc:f1:ec:ae:fa:66:a6:b0:79:30:ab:88:ef:a2:c1:
9b:e4:d5:ba:88:09:d3:0c:15:e4:23:51:c6:a5:a9:
32:b0:89:62:21:97:69:e4:97:71:86:e4:0a:30:5a:
ba:a3:ab:eb:b2:f3:60:fa:76:51:a7:60:9c:59:f1:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:7F:6F:67:49:21:8D:9F:3D:55:B9:A9:50:01:DE:1E:C4:9F:CE
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/6Pt_b2dJIY2fPVW5qVAB3h7En84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.12.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c8:e3:f5:8d:9a:54:96:41:af:61:51:db:31:23:ce:a3:4f:
86:34:77:3d:1a:55:5b:ce:29:33:c7:14:6e:e1:20:08:56:6f:
55:7a:bc:ba:26:ce:dd:4e:d0:04:e1:3c:ea:e2:da:e1:10:5d:
ef:70:60:25:02:04:af:a8:14:45:4b:93:23:94:1f:d9:1b:00:
e0:64:0e:3c:27:ef:23:33:64:cd:ea:43:22:bd:11:94:05:45:
2c:6f:5f:56:1e:4c:f2:2c:2b:b2:24:be:38:f4:3f:4c:db:1b:
b2:71:75:d9:fa:c3:5a:aa:e5:6b:e1:86:37:8f:0f:69:2b:1d:
cf:ff:ec:9d:88:96:6b:cb:85:93:a6:1d:3a:c4:5d:f5:27:f8:
bd:2a:88:1f:18:1c:ee:35:f6:c1:ad:8c:fd:e2:86:bf:b9:41:
96:73:1c:e2:b4:ba:5a:9b:aa:e5:99:47:85:e1:8a:c2:32:ec:
41:83:30:41:21:4c:47:89:15:b7:66:f7:fc:06:42:6a:9d:88:
eb:14:10:96:71:00:0f:54:64:52:f8:3c:b5:f8:d2:49:50:7d:
76:f6:20:1e:86:ba:ff:7b:80:48:5a:e7:4b:3f:3b:a7:40:34:
25:34:94:3d:82:30:68:27:1b:62:6c:23:95:ce:47:be:c8:71:
21:40:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:25 2024 by rpki-client on console-fra.rpki-client.org