Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/6XdpqKCi41Tv3NSS1bWkmy3dYVA.roa
File: 6XdpqKCi41Tv3NSS1bWkmy3dYVA.roa (raw, json)
Hash identifier: 2rt/9JwgaQsCQdbqYT2fEWBruJKdWGQPNCqs2JT32qk=
Subject key identifier: E9:77:69:A8:A0:A2:E3:54:EF:DC:D4:92:D5:B5:A4:9B:2D:DD:61:50
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01856C65BFFDDA05E9D9BB88C57722A1D3A5
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/6XdpqKCi41Tv3NSS1bWkmy3dYVA.roa
Signing time: Sun 01 Jan 2023 08:14:45 +0000
ROA not before: Sun 01 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47264
IP address blocks: 185.4.116.0/24 maxlen: 24
185.4.116.0/22 maxlen: 22
185.4.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:bf:fd:da:05:e9:d9:bb:88:c5:77:22:a1:d3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jan 1 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e97769a8a0a2e354efdcd492d5b5a49b2ddd6150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:f6:fb:3a:2d:80:54:bc:7c:72:04:25:19:
1e:cc:29:86:30:74:4b:7d:08:01:86:09:e8:47:58:
19:f5:59:0c:dc:69:d8:80:f4:d2:64:a6:01:0b:f8:
10:d1:e2:91:d9:47:6f:0b:17:f0:7b:93:c8:c4:09:
95:25:dc:d9:56:70:ed:22:f7:a7:84:01:01:6f:1d:
17:80:40:00:3a:dd:9f:f1:98:04:33:4d:b2:1f:22:
36:1b:73:52:81:a5:86:e2:6e:2f:6e:91:7f:0f:50:
9a:7a:da:9b:11:43:e0:88:f0:c4:54:ee:e2:30:6c:
05:e9:54:2f:29:91:b0:2b:b8:7b:a1:0c:e8:9b:ac:
9d:90:cf:6f:65:85:2a:a3:9f:52:78:a9:65:d3:a5:
90:fd:7b:15:59:37:06:4e:45:e4:0d:a0:21:dc:c0:
3f:e8:d5:2a:4e:e4:2d:1f:59:a6:96:b2:8e:eb:c4:
78:77:61:50:e3:c9:b3:cb:a6:28:ae:7b:3c:ff:7c:
33:d9:03:cc:35:96:a4:25:cb:f9:6c:6b:a0:b3:f0:
d8:cc:d5:1e:46:35:31:4e:d0:d2:c3:88:34:53:d7:
ca:7f:f0:85:23:ae:28:95:63:ee:52:77:86:d3:34:
be:83:de:15:0f:5f:7b:02:71:fe:c1:90:a3:f1:75:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:69:A8:A0:A2:E3:54:EF:DC:D4:92:D5:B5:A4:9B:2D:DD:61:50
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/6XdpqKCi41Tv3NSS1bWkmy3dYVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:d3:31:a9:3b:3b:83:d7:13:f3:b9:c4:3a:23:ed:28:d3:03:
f2:4b:f1:0e:b8:34:3c:86:6b:39:f4:d4:42:80:84:18:30:bd:
2e:83:3c:da:41:ba:05:f5:e2:d2:82:17:ae:af:8b:9a:e4:da:
e8:ac:55:5e:a1:ac:2d:37:80:b2:e5:94:ff:48:87:c3:77:7b:
1a:79:40:2e:2e:d0:55:c6:01:e6:47:04:f8:a2:02:31:9f:4e:
91:70:63:d7:24:fa:22:88:41:2e:82:0f:e3:68:39:05:d5:d4:
31:59:24:d6:cf:f3:cd:b5:29:cb:da:41:4f:ee:68:da:a1:6b:
e4:db:fc:3a:84:c1:9f:13:23:37:13:ed:5f:ff:0f:a3:c3:68:
4e:fb:b6:58:19:b5:2b:e5:26:36:c0:14:01:8b:90:ee:6d:c1:
64:be:23:7f:33:9c:25:53:15:8b:e2:64:8d:1e:38:cf:42:50:
32:27:32:60:82:66:cf:df:03:4b:bb:39:f2:6e:87:30:c9:7d:
fe:9e:2e:19:9f:18:31:9a:7e:18:ae:bf:86:8d:d8:69:c1:e3:
6f:92:59:2c:7b:4b:13:06:3a:87:93:3c:5a:1d:cd:29:c3:f6:
75:65:3a:63:0a:7f:89:2b:d5:e3:9e:6e:5c:f0:07:0a:dc:b0:
c2:be:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:47 2024 by rpki-client on console-ams.rpki-client.org