Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/c6OHK7KVQc-djf-SFk2krB17svk.roa
File: c6OHK7KVQc-djf-SFk2krB17svk.roa (raw, json)
Hash identifier: soJw1gqU2vUZnKCS6HnQntreKAUBXYCt3PyMhZOy0Ek=
Subject key identifier: 73:A3:87:2B:B2:95:41:CF:9D:8D:FF:92:16:4D:A4:AC:1D:7B:B2:F9
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 01856F9DFAF724FA4A7C97B451660D7E08F2
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/c6OHK7KVQc-djf-SFk2krB17svk.roa
Signing time: Sun 01 Jan 2023 23:15:02 +0000
ROA not before: Sun 01 Jan 2023 23:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 185.67.4.0/22 maxlen: 22
185.67.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:fa:f7:24:fa:4a:7c:97:b4:51:66:0d:7e:08:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Jan 1 23:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73a3872bb29541cf9d8dff92164da4ac1d7bb2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:db:aa:bd:66:9c:e4:8c:86:84:55:2d:d7:
d5:b7:01:69:3d:a7:00:70:91:97:3d:c3:25:7b:79:
f1:4d:c7:7f:de:7f:32:72:66:8f:49:73:ca:30:35:
9e:a6:2a:e6:df:5b:fc:11:97:c3:e0:eb:da:26:7e:
6c:42:c9:9b:4c:a4:52:93:fb:92:4e:d9:0b:76:43:
85:6c:c5:e5:92:9f:4b:86:e2:70:ed:6b:a3:28:86:
e4:bb:b1:74:46:d2:69:d6:f4:cc:0f:67:93:21:62:
f5:bc:3a:3c:ef:ef:64:5c:98:57:9c:71:f5:70:0a:
ae:18:3a:51:e2:d0:d7:ff:3d:3b:99:70:08:d2:e0:
1b:d7:72:6b:f9:90:a7:a1:0b:eb:1f:39:1f:3a:e5:
e4:aa:04:5e:e8:ad:5d:6f:c2:ac:2d:86:41:86:75:
b1:9f:58:1c:d1:85:9e:f4:e1:6d:a3:93:33:90:17:
ff:73:b4:94:9a:39:e6:f3:3c:f5:7e:67:6b:7c:65:
a2:77:e0:4f:65:f3:70:4a:1e:f5:70:4e:d5:44:0e:
8e:65:2c:6e:b2:44:4e:b8:7a:2b:f0:d7:24:35:7d:
d2:fe:b3:01:30:d1:16:5d:e9:b0:26:a1:8e:22:3a:
9d:9e:af:e4:d6:17:f7:78:9e:b8:1a:66:7a:4f:cc:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:87:2B:B2:95:41:CF:9D:8D:FF:92:16:4D:A4:AC:1D:7B:B2:F9
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/c6OHK7KVQc-djf-SFk2krB17svk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:84:0b:b2:a2:19:37:87:30:cd:33:bf:40:69:29:0d:b1:67:
08:c1:35:d9:9f:d9:d2:f6:11:d2:c7:6f:5a:45:f1:8f:40:b1:
e2:bf:3e:2b:cd:2f:ac:b8:fb:38:10:61:2e:7d:d6:4e:5e:27:
60:fe:73:8d:5f:51:da:13:2e:65:65:f5:d2:bb:07:1d:13:32:
fa:c1:24:f6:42:9c:65:a6:27:f3:43:34:d6:14:8f:5a:14:e1:
f4:24:fc:2c:dd:ea:69:74:b4:e9:d9:82:a6:30:b6:12:9b:bd:
71:e8:f6:20:5f:ca:7b:ac:bd:91:49:ad:4c:83:21:f5:ac:e0:
28:e1:49:7e:c6:3b:be:30:3e:a3:c6:57:fd:9a:66:5e:23:ba:
da:29:dd:95:e1:6b:12:9d:40:ae:e2:f5:1b:21:75:01:7e:4d:
91:04:04:ff:bd:88:92:fb:9a:9c:e4:5e:2e:fb:e0:17:03:e3:
53:0c:41:9c:e6:94:80:a0:cd:c8:a8:4f:dc:cc:95:7c:ee:fd:
04:37:be:b0:40:7c:11:24:04:b9:48:ca:77:3e:c4:16:0e:34:
c0:14:2e:47:4b:9c:76:02:f8:b5:46:be:d6:86:15:52:d8:9a:
d4:c2:fd:a7:2e:d8:86:6c:29:e0:60:85:25:55:36:4d:56:5c:
3e:4c:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:28 2024 by rpki-client on console-ams.rpki-client.org