Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/1Tn0Q03wlMZX76bjZRziEBz2_CM.roa
File: 1Tn0Q03wlMZX76bjZRziEBz2_CM.roa (raw, json)
Hash identifier: OvAlesQ0VlSqwOuPFQOIOvjpxf7eCo+jGFdGNbe2E1Q=
Subject key identifier: D5:39:F4:43:4D:F0:94:C6:57:EF:A6:E3:65:1C:E2:10:1C:F6:FC:23
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 01857079B64FF68CCF448D7F3DB9BE48FC03
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/1Tn0Q03wlMZX76bjZRziEBz2_CM.roa
Signing time: Mon 02 Jan 2023 03:15:02 +0000
ROA not before: Mon 02 Jan 2023 03:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204817
IP address blocks: 185.219.8.0/22 maxlen: 24
2a0b:dd40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b6:4f:f6:8c:cf:44:8d:7f:3d:b9:be:48:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jan 2 03:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d539f4434df094c657efa6e3651ce2101cf6fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:52:6c:e6:ad:b9:de:71:fc:cc:95:e5:35:89:
f5:5d:c1:a8:94:fb:9b:04:5d:7a:f6:a1:38:85:58:
3a:5a:25:08:c2:d2:15:e2:84:02:ae:de:5f:0e:1d:
84:f5:25:e8:03:66:fa:f3:3d:21:ac:ff:75:1a:92:
c1:a2:cd:fa:16:cf:66:64:bf:8a:51:80:3f:11:88:
f3:4b:d2:91:22:a3:ec:ee:7b:ce:a3:cc:d4:49:28:
ae:46:57:6a:f7:34:83:07:9e:ac:11:da:ec:11:b1:
ba:86:80:88:0a:fa:9a:88:4e:6b:36:3c:5a:7b:4a:
14:c2:b9:87:b4:ad:b5:d2:6a:73:51:af:32:b6:1c:
06:d0:8f:0f:6f:5f:a2:53:aa:e0:2a:09:0a:8e:07:
64:26:93:85:87:6d:bb:93:29:7a:7f:ab:e6:51:f7:
22:bd:ac:df:b7:c1:a8:be:93:7a:6b:9e:2b:0e:7c:
5c:87:f7:de:1e:48:1e:46:a4:bb:ae:6e:00:a0:5d:
b6:78:77:bf:7a:16:07:5d:82:07:ca:4e:e6:ef:83:
78:41:8f:64:59:a2:ec:d7:ea:2b:b5:03:9a:39:03:
14:ce:6a:9f:bc:9a:41:3a:0b:b5:bb:48:46:0a:20:
af:e7:72:50:4a:eb:d5:a0:7a:d6:7a:a5:cb:d7:58:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:F4:43:4D:F0:94:C6:57:EF:A6:E3:65:1C:E2:10:1C:F6:FC:23
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/1Tn0Q03wlMZX76bjZRziEBz2_CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.8.0/22
IPv6:
2a0b:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
b4:61:27:0d:45:fb:c7:7c:8b:dc:9e:10:de:67:41:a6:20:c1:
19:84:43:61:77:93:1b:90:8c:1f:e4:c4:68:a5:ef:1f:e2:52:
13:ad:eb:3b:a8:be:ce:38:cd:13:13:8a:66:dc:c4:c4:49:f0:
04:f1:7c:86:c2:cf:83:fc:ba:70:45:c9:58:b3:a2:45:a7:6e:
85:f1:2d:25:61:fb:c8:39:1b:2c:77:86:df:1c:9a:fc:7b:c5:
50:22:09:ce:d7:b8:78:fa:54:4f:ce:29:fa:f0:7c:85:99:b0:
be:61:92:89:14:de:48:b0:2e:47:f4:b7:3a:0b:bb:40:91:f1:
37:28:3d:de:79:3b:4d:96:46:83:9b:26:21:90:be:b1:b7:c5:
7b:fe:67:c8:08:d8:12:a3:5b:1f:9f:91:74:f4:e0:e5:6b:f3:
5b:d4:09:65:41:df:e8:72:eb:4d:b7:a7:62:a2:5a:ab:76:66:
2c:40:dc:4c:ea:f8:d4:18:1a:73:95:25:40:cc:ad:1c:9d:87:
e7:20:23:db:ee:a7:3f:ef:f3:e2:3f:90:ae:d9:1f:cb:24:38:
8a:90:55:b7:ce:5a:7f:5e:7b:4e:ab:a5:c0:42:98:41:c5:a9:
86:0f:d1:3d:6f:70:6e:5a:66:44:e4:43:4d:52:62:b5:98:a9:
77:5a:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:11 2024 by rpki-client on console-ams.rpki-client.org