Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/3Mt6mDUhCNX0Fs79KtSlNFnhC9w.roa
File: 3Mt6mDUhCNX0Fs79KtSlNFnhC9w.roa (raw, json)
Hash identifier: mux1c1iiPtdEYc99D7+hTZk8VYp/bxmgf2IuE8J0MVk=
Subject key identifier: DC:CB:7A:98:35:21:08:D5:F4:16:CE:FD:2A:D4:A5:34:59:E1:0B:DC
Certificate issuer: /CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Certificate serial: 0185730CB0E0197D49F91EC1940D088BBB2B
Authority key identifier: CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/3Mt6mDUhCNX0Fs79KtSlNFnhC9w.roa
Signing time: Mon 02 Jan 2023 15:14:49 +0000
ROA not before: Mon 02 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203744
IP address blocks: 185.125.123.0/24 maxlen: 24
185.125.122.0/24 maxlen: 24
185.125.121.0/24 maxlen: 24
185.125.120.0/22 maxlen: 22
185.125.120.0/24 maxlen: 24
2a0e:8ac0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:b0:e0:19:7d:49:f9:1e:c1:94:0d:08:8b:bb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Validity
Not Before: Jan 2 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dccb7a98352108d5f416cefd2ad4a53459e10bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:3a:3e:c2:e8:d9:cc:6a:11:d8:5b:1d:63:
a1:fa:0b:dc:56:2e:c8:e1:d8:af:00:32:67:d2:6a:
6f:38:6e:b1:6a:5c:46:f2:c9:58:bb:fb:4a:23:89:
2a:31:92:75:8d:ea:93:9e:12:8e:0b:aa:3d:a9:a6:
a6:db:2a:f8:1e:13:d6:86:69:07:67:67:db:03:74:
a1:ad:05:cf:99:27:79:e6:9a:67:26:7b:2c:7b:74:
ff:06:cb:73:c0:45:10:c0:49:a2:f7:29:ab:54:3e:
45:c3:d8:d3:6f:83:0b:b7:05:59:23:b2:f6:3f:20:
db:74:bb:3d:58:4e:a1:33:bc:ce:d6:4c:ac:8a:45:
0f:9f:51:ac:e9:54:45:01:05:89:d4:1b:33:56:f7:
4e:4c:1f:2e:a7:dd:99:5d:7b:a6:cb:3c:e2:4d:27:
61:98:a7:04:0d:d0:5b:e3:b4:8f:46:87:8e:02:64:
4a:7f:69:59:53:42:89:6f:ad:00:13:ad:5d:94:c8:
78:64:8d:56:17:87:8e:74:e9:15:b7:4b:c1:98:6d:
d9:59:e7:92:22:9c:f5:18:ca:79:f5:77:85:4b:a5:
29:de:a3:b7:02:59:9d:9a:a9:28:62:08:98:06:b9:
94:21:e4:c6:70:9c:1c:79:48:71:e3:3d:67:cb:9b:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:7A:98:35:21:08:D5:F4:16:CE:FD:2A:D4:A5:34:59:E1:0B:DC
X509v3 Authority Key Identifier:
keyid:CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/3Mt6mDUhCNX0Fs79KtSlNFnhC9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.120.0/22
IPv6:
2a0e:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
46:aa:73:e6:d0:cc:f7:3e:39:0f:4a:43:f3:8e:b4:80:a7:22:
58:a2:b2:2d:c7:74:34:1b:08:2b:a8:c1:73:de:1c:c1:eb:d2:
87:9d:8a:f8:48:fc:bc:ef:de:fd:13:a8:45:bc:c6:96:54:20:
fc:e8:64:6e:d8:09:b1:3a:15:d2:10:df:73:28:21:cc:6d:bf:
39:dc:6d:ae:66:61:20:0e:7f:91:22:4e:50:0e:65:72:c8:b3:
ef:6a:9e:c0:e3:b5:f3:5a:09:fd:d2:b5:3b:33:8c:fc:d7:f5:
83:85:e3:e1:ec:c2:6c:1b:b1:54:7e:68:58:60:6c:63:14:6c:
13:ad:b5:b3:a3:f9:6e:62:26:af:d3:1a:7c:99:29:af:b6:14:
1d:db:a1:f1:a2:24:ea:b9:33:24:81:82:70:ec:d9:74:fd:f7:
d6:a8:c8:a5:bc:0d:a4:a6:62:0d:af:0c:2a:0c:b2:ed:bb:ad:
da:6c:6d:70:a9:d2:e8:3c:84:b1:6f:2d:0c:4f:b2:26:44:f5:
71:e8:5d:01:55:5c:fa:a9:a1:b8:32:6b:d9:6c:16:66:5f:97:
7f:44:ed:a3:69:73:fd:4f:fe:28:75:2d:9c:64:76:0b:b7:5f:
89:63:7c:af:c5:e8:66:0c:c1:c6:2c:82:54:15:f1:94:cb:14:
14:8f:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:23 2024 by rpki-client on console-ams.rpki-client.org