Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/CmtecgX3JEj8xtJVtHl8_k9H6Wo.roa
File: CmtecgX3JEj8xtJVtHl8_k9H6Wo.roa (raw, json)
Hash identifier: cu8jwCxifrTMr8fF5zQHJE3S3msEEzXJWFuVj9Br+80=
Subject key identifier: 0A:6B:5E:72:05:F7:24:48:FC:C6:D2:55:B4:79:7C:FE:4F:47:E9:6A
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0187EC099CA79458D5911C3128C527E5C094
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/CmtecgX3JEj8xtJVtHl8_k9H6Wo.roa
Signing time: Fri 05 May 2023 13:11:05 +0000
ROA not before: Fri 05 May 2023 13:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48648
IP address blocks: 195.12.56.0/22 maxlen: 22
91.211.122.0/24 maxlen: 24
91.211.120.0/24 maxlen: 24
91.198.233.0/24 maxlen: 24
2a0a:2c0:2::/48 maxlen: 48
2a0a:2c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:09:9c:a7:94:58:d5:91:1c:31:28:c5:27:e5:c0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: May 5 13:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a6b5e7205f72448fcc6d255b4797cfe4f47e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:6f:3d:e6:a5:2a:3e:a4:ab:de:ca:fd:e8:
17:d8:f3:d6:96:bd:06:8b:70:82:e6:20:14:5b:8a:
26:6e:09:57:3a:a5:46:2f:10:d4:22:9b:1d:26:c2:
ac:43:22:74:8f:a7:75:f6:47:e9:e9:ce:55:28:a2:
ed:7c:56:f7:30:bc:8b:06:32:0f:6e:d2:0c:b6:7a:
d5:50:13:28:e5:45:64:09:18:e0:d4:f7:59:e2:89:
9c:90:76:2d:38:7a:1f:c3:c2:09:ee:c9:a3:28:9e:
57:ea:b3:d0:69:20:03:1e:40:1a:a6:2c:c9:eb:f4:
e4:fc:b0:9f:34:32:d7:21:d0:e6:e3:4c:45:24:40:
d5:1a:db:bb:c8:03:ae:ba:bd:cb:57:ef:6f:39:ff:
98:c5:58:d3:43:17:06:21:ed:6d:43:80:b2:6f:ca:
ff:0a:86:b7:20:97:86:8a:74:bd:1c:3f:f2:32:0b:
38:b1:17:e0:93:16:83:c4:8f:d4:1b:a4:37:2c:6c:
d9:db:08:30:64:33:f6:c9:9b:57:26:d3:88:d5:67:
7b:8a:29:a4:12:69:17:e3:ef:63:2a:13:94:6f:70:
3c:7a:b1:ea:ae:f0:c0:77:ad:1e:c0:95:8e:75:0e:
77:b0:7b:36:85:e6:f8:e5:ee:7b:ec:00:51:bb:30:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:5E:72:05:F7:24:48:FC:C6:D2:55:B4:79:7C:FE:4F:47:E9:6A
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/CmtecgX3JEj8xtJVtHl8_k9H6Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.233.0/24
91.211.120.0/24
91.211.122.0/24
195.12.56.0/22
IPv6:
2a0a:2c0::/48
2a0a:2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
27:06:2e:8c:f5:0f:1f:0a:48:d8:44:71:87:0e:33:eb:5a:a8:
f4:f5:af:1f:c2:bf:1a:e3:c8:36:45:0a:cc:68:d3:8f:ff:d2:
ed:62:10:9f:f8:f2:ee:65:0c:7b:c4:73:c9:56:2c:0d:8a:16:
1c:39:92:a4:37:07:69:ee:96:2e:f9:f6:49:0c:64:1c:dd:37:
11:1f:a1:26:6b:ec:c3:bf:d0:ef:f4:be:73:32:b3:79:9d:01:
22:fe:93:94:86:81:e0:c6:f8:35:32:70:a4:f0:ae:74:48:b1:
72:64:d5:6b:0d:75:a6:3b:05:8f:3b:89:fd:5d:1a:55:d3:84:
0b:25:14:f6:14:cf:86:50:d2:5c:f1:58:47:f4:bf:b4:43:bc:
56:62:65:89:44:1a:7d:80:d4:a6:c5:f9:bb:a4:a2:e8:a8:1d:
e4:81:e1:91:f2:9b:4d:49:08:fe:47:34:7b:51:b9:d9:8d:90:
b5:68:76:ff:0e:be:b1:52:48:7c:86:fc:8c:10:87:10:00:fd:
3c:f6:48:b8:88:f3:14:c2:bd:b1:b6:5b:6d:17:a9:18:b8:76:
e2:1d:aa:23:a1:ac:fe:93:83:4f:26:0b:7b:ec:52:d6:dd:26:
8c:c7:33:1c:ee:9b:6d:7f:ed:e1:35:8e:69:37:8c:1e:e4:31:
29:d4:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org