Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/6jAqKw7tIIb9D9i0KvJFHBRwzMY.roa
File: 6jAqKw7tIIb9D9i0KvJFHBRwzMY.roa (raw, json)
Hash identifier: ZBGOdLvuRjeu6Z3ayi8IhbUTh/a5SI9gRHjvEHszDGc=
Subject key identifier: EA:30:2A:2B:0E:ED:20:86:FD:0F:D8:B4:2A:F2:45:1C:14:70:CC:C6
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 01856C2ED95A5E00A8B1EF01EAD862460BD9
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/6jAqKw7tIIb9D9i0KvJFHBRwzMY.roa
Signing time: Sun 01 Jan 2023 07:14:47 +0000
ROA not before: Sun 01 Jan 2023 07:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.234.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d9:5a:5e:00:a8:b1:ef:01:ea:d8:62:46:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jan 1 07:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea302a2b0eed2086fd0fd8b42af2451c1470ccc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:24:6b:2f:b3:fa:c2:fd:1d:72:14:0f:dc:
b5:0e:47:b2:37:b3:cf:3d:5a:87:1f:40:e9:16:6a:
c1:39:0d:23:69:3b:f7:ce:ca:4c:9c:eb:ac:54:4e:
5c:d2:85:56:df:7c:68:94:d2:c8:ee:25:c0:e8:9f:
04:76:18:e0:e5:aa:e2:4b:19:63:e8:69:9e:6b:87:
4e:9d:ce:63:26:ae:8a:3d:2f:ab:b8:27:f1:73:6b:
06:07:c7:31:d2:2b:7c:b4:3f:24:04:ea:a4:15:b5:
aa:c4:ab:c5:04:bf:de:2b:f1:c8:eb:26:6f:49:5b:
cd:5a:52:0c:0e:8a:38:a0:ed:d1:24:f3:f0:19:01:
dc:18:f3:66:9f:37:a1:a3:e1:ef:7e:22:09:e6:fd:
8f:9b:e9:3b:47:6f:28:7a:59:78:12:29:8c:72:37:
60:27:37:d0:08:f0:02:48:47:a3:ad:d5:63:af:71:
29:ef:7f:e0:1c:21:45:f3:6a:18:d1:ef:26:aa:ba:
45:40:24:90:ca:58:b3:7e:06:c5:40:c9:73:b4:0b:
3b:16:d2:c1:70:56:b6:54:21:a2:db:69:94:c4:94:
a1:cd:1b:1a:92:94:15:36:68:fa:b9:23:bd:42:8c:
2d:71:f3:5f:19:21:9b:fd:6f:aa:03:5a:26:ee:41:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:2A:2B:0E:ED:20:86:FD:0F:D8:B4:2A:F2:45:1C:14:70:CC:C6
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/6jAqKw7tIIb9D9i0KvJFHBRwzMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3e:1a:c3:e2:35:21:6f:7e:7b:93:09:0f:b0:07:d6:6e:81:
f0:5f:82:7d:16:e4:d8:71:a7:6b:b1:c7:76:fc:3a:48:21:00:
1e:dd:ee:b8:35:e9:b4:f7:43:a0:f1:44:e1:39:b2:81:a2:bf:
f1:3c:6a:15:2d:16:b5:39:f4:4e:92:e2:8b:88:87:32:5a:25:
d2:98:d1:a5:9b:1a:6e:62:3b:ae:d1:2c:52:02:23:00:c8:f4:
c4:92:ba:58:5f:18:aa:1d:ee:27:ec:9c:ca:6e:a7:7c:f6:ae:
91:47:6d:aa:2d:f5:7f:56:8e:f0:2f:97:fd:7b:4d:f3:fa:01:
2a:6e:0c:df:07:6c:ca:1e:1a:6d:39:b7:45:97:df:6c:8f:62:
e5:3a:c8:7b:b0:b9:51:e6:ea:bb:ba:88:66:9f:da:83:ad:5b:
03:90:79:23:1b:ea:44:ec:59:43:5e:2c:ba:81:c9:f6:93:4b:
99:89:81:bc:69:dc:38:74:01:a8:bd:fa:81:8e:7f:94:c7:8f:
57:72:40:ab:20:72:76:30:b7:aa:56:32:53:55:ef:5f:c4:c4:
ff:64:3d:54:ad:03:8a:a3:f2:6d:96:69:6f:18:b2:f1:16:af:
55:c8:d6:ac:89:5c:8a:c3:ef:71:e8:e9:a2:16:d3:da:fb:2e:
a1:38:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:32 2024 by rpki-client on console-fra.rpki-client.org