Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/6swZcDUlCAtg6nXaKcBu8WqGJ88.roa
File: 6swZcDUlCAtg6nXaKcBu8WqGJ88.roa (raw, json)
Hash identifier: F8X6R+HwWLAriT/oHzYVdWAL3wwqJQeropczzkApMz8=
Subject key identifier: EA:CC:19:70:35:25:08:0B:60:EA:75:DA:29:C0:6E:F1:6A:86:27:CF
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 01856C78133589A6A778301FA44C9B4AD282
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/6swZcDUlCAtg6nXaKcBu8WqGJ88.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205718
IP address blocks: 185.248.20.0/22 maxlen: 22
2a09:f4c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:13:35:89:a6:a7:78:30:1f:a4:4c:9b:4a:d2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eacc19703525080b60ea75da29c06ef16a8627cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:27:b8:ff:30:d8:7e:37:58:50:42:85:b3:
1a:f6:47:de:22:23:e1:1d:0c:74:6b:ad:76:e7:7a:
57:bd:59:d9:4f:a6:ac:e8:4e:1d:88:a5:a6:40:99:
5e:cd:62:d7:4b:71:d3:4f:dd:66:4f:71:b3:ba:e3:
e7:ad:d1:6b:08:52:b9:36:d6:54:85:22:ec:46:37:
a8:ae:0e:20:de:1b:8c:b4:77:b8:25:67:cc:15:97:
e3:67:da:f8:f4:77:f2:6e:3f:1e:55:d7:bc:5b:85:
05:18:cd:d5:70:44:84:d1:eb:90:c3:c5:1d:8c:b8:
00:a7:d2:17:64:c7:3a:85:f6:e0:d5:e0:53:56:64:
53:ee:d9:c2:ca:8c:18:74:56:33:b9:6d:38:a8:9a:
9c:83:dc:4a:c8:d8:ae:d6:02:7a:6b:2b:cb:d5:42:
b9:88:6b:76:bf:24:24:49:1e:96:8f:9b:4a:31:ee:
52:27:98:05:c9:8d:78:91:1e:11:b0:97:c3:28:2d:
84:54:48:b5:5d:21:5c:37:6e:f1:59:df:d6:01:f6:
0c:6d:96:aa:8b:81:d7:02:5a:69:e9:13:4a:6b:07:
4c:d6:28:63:94:03:32:b7:3a:b1:80:32:8d:4a:4e:
ed:5c:0d:79:a0:1c:1e:d5:18:99:22:e4:e0:30:7d:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:19:70:35:25:08:0B:60:EA:75:DA:29:C0:6E:F1:6A:86:27:CF
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/6swZcDUlCAtg6nXaKcBu8WqGJ88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.20.0/22
IPv6:
2a09:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
b6:a1:0a:87:11:99:60:77:7d:88:17:9e:9a:5a:80:28:77:68:
50:a6:a7:2a:d0:95:6e:0a:93:40:ae:c5:45:cb:8c:0b:7a:de:
c7:fb:b9:ea:30:a5:a4:d8:a5:ed:d5:3c:b4:7e:4e:f0:ff:f4:
b1:bf:2e:5e:3a:79:5e:47:3b:fe:e4:90:dd:2d:62:1e:5b:5a:
0b:ce:6f:cc:ab:52:08:db:f0:60:41:16:40:37:90:b8:c0:d9:
6d:ff:b1:47:53:71:be:03:ca:81:8c:f8:2c:a4:fa:52:fd:64:
d7:94:ba:d4:46:9d:3f:a6:35:85:22:23:9f:bf:ea:1d:4b:f3:
30:65:08:21:5d:45:41:f4:94:31:38:40:51:2e:d4:ef:3a:14:
01:ce:21:97:a6:ff:ff:db:e6:1e:6c:e0:e3:d4:08:c0:02:21:
02:6d:5a:9a:e1:12:16:cd:17:86:4d:86:4f:eb:bb:fc:82:10:
4a:d2:2f:1a:f6:6d:37:80:de:8a:36:5a:95:a6:07:cd:42:af:
5c:0e:97:ea:b0:ea:b4:6c:18:2c:b2:36:90:5f:33:66:43:cb:
bb:65:45:a9:f0:74:48:cb:1a:c9:21:d0:c5:e1:54:22:8e:b5:
0c:b4:e8:df:f4:f0:39:16:60:65:88:5f:15:49:58:16:18:5e:
63:0a:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org