Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/f6Jlt2XgvSMMnAALKEIVOQ-3fOI.roa
File: f6Jlt2XgvSMMnAALKEIVOQ-3fOI.roa (raw, json)
Hash identifier: NZlZN8Nz3Wb17NsFokmqH5SzvNQMgngXrBxqoSMJ05Y=
Subject key identifier: 7F:A2:65:B7:65:E0:BD:23:0C:9C:00:0B:28:42:15:39:0F:B7:7C:E2
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 01856BB7FBAF507BDDA10FB6A0BD858F5164
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/f6Jlt2XgvSMMnAALKEIVOQ-3fOI.roa
Signing time: Sun 01 Jan 2023 05:04:57 +0000
ROA not before: Sun 01 Jan 2023 05:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205834
IP address blocks: 185.202.176.0/22 maxlen: 24
2a0e:c000::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:fb:af:50:7b:dd:a1:0f:b6:a0:bd:85:8f:51:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Jan 1 05:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa265b765e0bd230c9c000b284215390fb77ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:a9:23:5c:fb:55:32:e2:7d:f8:09:73:65:
37:87:09:05:68:d7:7b:9f:e2:c6:38:01:a1:68:9d:
1b:87:7f:e0:ad:7f:a5:2c:b0:ea:ff:6d:2d:2e:ab:
a1:20:ab:6b:ee:e7:6b:6a:d5:ed:57:de:51:d0:86:
3c:93:13:37:a4:ef:87:db:29:58:0b:57:87:2d:99:
92:c1:6a:39:27:ff:25:e7:16:a0:28:c1:1e:ad:22:
8e:de:e9:e8:cc:49:6a:05:a0:1a:f7:ec:c0:ad:4e:
b2:be:6b:8b:c8:02:f4:3e:39:90:41:01:d0:12:cd:
9c:f6:50:f3:97:50:6b:76:4d:ed:f4:3d:b4:62:fb:
ba:3a:26:e4:e3:12:23:30:1b:54:9c:89:22:27:9b:
1c:74:9f:8e:72:5c:49:2e:9c:2a:23:15:fa:53:92:
cc:07:5e:70:5f:6d:91:c0:d3:77:47:1f:ca:7b:59:
4a:7c:e4:44:fa:45:7c:fd:b3:d6:7c:39:c1:ca:18:
b9:8b:e2:58:b0:d0:fb:b3:ed:aa:1e:9b:c9:ed:48:
32:e1:0b:a1:07:ca:92:e9:10:12:bc:b2:a3:6b:f7:
49:32:ac:ab:fd:72:86:d8:a1:67:78:5f:36:0a:1c:
95:f9:32:88:05:74:cf:ca:71:69:c1:c0:43:6c:c9:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:65:B7:65:E0:BD:23:0C:9C:00:0B:28:42:15:39:0F:B7:7C:E2
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/f6Jlt2XgvSMMnAALKEIVOQ-3fOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.176.0/22
IPv6:
2a0e:c000::/29
Signature Algorithm: sha256WithRSAEncryption
3b:c5:e1:5d:d1:cb:16:c7:40:e4:51:ef:e9:c1:48:f5:26:6d:
1e:74:87:38:99:14:aa:5b:d3:fd:12:67:37:33:0f:58:0a:49:
c4:cf:c4:b5:93:9f:c9:01:b4:9c:6f:78:ee:58:14:b2:01:95:
e1:fa:21:6e:16:3c:2a:92:8e:67:74:96:c5:6d:fe:14:6d:26:
14:5a:70:f0:5e:0a:2f:fd:f1:b7:6c:02:c8:a8:46:73:f7:e4:
9b:6c:d7:a1:76:47:60:20:a6:bb:9f:5c:12:ef:f3:db:c5:e4:
9c:7a:01:72:d5:79:8d:8b:87:04:d1:9b:67:c5:c5:9b:26:81:
74:98:ea:0d:43:bc:fb:5a:b9:19:52:44:d1:fb:a8:b9:2e:33:
4f:83:cf:16:9c:37:ae:60:e5:03:15:3d:20:2b:4f:5e:6a:c8:
e8:80:3e:97:ae:c5:7d:1c:84:58:87:bb:cc:1d:26:f3:36:f6:
15:0d:98:1e:15:09:d9:64:e8:53:29:60:b4:f0:bb:d7:67:29:
17:60:81:24:41:f1:87:f7:91:ee:83:92:9b:2a:fe:d3:fc:09:
60:b3:8d:5d:1f:af:97:bc:6a:c1:e9:b3:17:63:cc:97:33:3f:
e7:d4:c2:5c:d2:78:de:e0:1e:fe:1d:2a:33:6d:1e:bd:34:ea:
ce:eb:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:55 2024 by rpki-client on console-fra.rpki-client.org