Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/fPpKNm3e6V2GwU1JQlQEfUoooJw.roa
File: fPpKNm3e6V2GwU1JQlQEfUoooJw.roa (raw, json)
Hash identifier: kBLNTj4Hw7wahZn+KU5DwE6lXFggBbtt8pTmtjJJcOI=
Subject key identifier: 7C:FA:4A:36:6D:DE:E9:5D:86:C1:4D:49:42:54:04:7D:4A:28:A0:9C
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 01856E1447936F559253EB14F6B1943613D7
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/fPpKNm3e6V2GwU1JQlQEfUoooJw.roa
Signing time: Sun 01 Jan 2023 16:05:00 +0000
ROA not before: Sun 01 Jan 2023 16:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35657
IP address blocks: 185.231.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:47:93:6f:55:92:53:eb:14:f6:b1:94:36:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Jan 1 16:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cfa4a366ddee95d86c14d494254047d4a28a09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:6e:1f:ba:b9:77:a9:3e:9f:c8:f9:5c:15:
4e:30:5b:66:c0:0f:bf:96:19:a6:67:1f:6c:00:f8:
1b:34:26:d6:e4:6c:27:17:00:28:4c:4a:ff:f6:25:
f1:2f:05:ed:64:19:e2:40:58:83:3e:0a:e6:9a:ce:
0f:e6:6c:a6:7e:cc:36:eb:df:4c:a6:42:15:da:72:
17:98:52:60:ab:6f:f2:26:8d:36:76:04:d6:24:1f:
7e:8e:0b:c2:86:6f:27:6e:4e:af:91:3b:45:ed:7b:
7c:f5:b5:b4:90:04:d8:e9:66:22:1c:88:15:43:28:
0d:2e:c0:88:d6:9e:ed:de:bf:12:56:5c:bf:81:f4:
9b:aa:25:36:46:a2:72:eb:cf:4d:f8:37:f2:9a:94:
c3:8d:5e:0f:04:aa:ea:5f:29:c7:73:7f:81:f0:98:
a3:2c:c4:5c:4e:24:2e:1b:db:a8:18:4c:a5:31:b6:
a4:02:39:e4:03:6a:08:63:9a:de:00:3d:08:c5:88:
be:5e:ba:83:41:b5:cb:78:33:e2:51:da:50:3e:cf:
3a:be:de:66:c0:37:5a:8a:ae:07:04:55:4c:ce:2e:
70:1a:be:61:4e:09:92:05:47:74:7b:31:27:3f:08:
52:46:fe:56:b2:11:ba:18:58:0d:31:8d:ae:bf:87:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:4A:36:6D:DE:E9:5D:86:C1:4D:49:42:54:04:7D:4A:28:A0:9C
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/fPpKNm3e6V2GwU1JQlQEfUoooJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.6.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1f:23:df:59:a0:71:ea:a7:ec:1a:c9:0e:3b:b2:c9:88:ef:
4a:25:b0:28:c8:fe:9d:34:e2:bc:b8:41:88:02:90:6e:48:60:
f3:63:a6:f7:16:d0:08:ec:9e:cb:2e:b1:92:ef:8b:00:37:7b:
84:42:37:3a:36:4d:be:f9:ef:be:24:47:ef:7c:23:d7:eb:5c:
61:70:f6:ee:c6:14:df:7a:fd:27:76:da:e1:3e:cd:6b:e6:f3:
e5:80:b3:68:96:2d:eb:c2:0a:ef:37:60:45:3e:5d:46:87:17:
eb:c5:ef:70:02:5d:5f:a6:42:d5:f1:f1:bc:e2:46:83:67:d3:
1f:76:86:e0:df:e8:88:58:e2:79:cc:bf:cf:b1:c2:0a:06:97:
75:f7:57:94:fb:12:4f:2f:1c:20:7c:4b:48:ac:d3:99:3d:c0:
cd:1b:4b:ea:3f:be:7b:6d:55:53:50:39:41:11:34:0c:25:ed:
64:74:18:91:08:da:0d:e8:a6:d8:5d:92:8e:3a:7c:ee:51:e4:
b5:9e:49:63:f9:89:37:e5:ca:e8:94:77:44:1b:60:db:88:d8:
72:fd:10:d6:c1:56:b8:25:c2:dd:3e:00:72:7c:8d:0c:67:81:
00:35:d9:b3:2a:09:a3:90:4e:02:60:82:53:f5:f3:45:14:af:
9a:52:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org