Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/dm4rTOw2IrNU-4Z9rq6yCt613hQ.roa
File: dm4rTOw2IrNU-4Z9rq6yCt613hQ.roa (raw, json)
Hash identifier: JvR5Tt4SW4VQ5DoQtZhLYuTQvs0dQpZ2CtNo9lqia1k=
Subject key identifier: 76:6E:2B:4C:EC:36:22:B3:54:FB:86:7D:AE:AE:B2:0A:DE:B5:DE:14
Certificate issuer: /CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Certificate serial: 01856D6F4C9D597667F3AA43BD1D20A898FB
Authority key identifier: B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/dm4rTOw2IrNU-4Z9rq6yCt613hQ.roa
Signing time: Sun 01 Jan 2023 13:04:48 +0000
ROA not before: Sun 01 Jan 2023 13:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.214.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:4c:9d:59:76:67:f3:aa:43:bd:1d:20:a8:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Validity
Not Before: Jan 1 13:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=766e2b4cec3622b354fb867daeaeb20adeb5de14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:d3:a5:7c:5b:c4:04:5d:28:89:c9:0c:41:
98:10:51:30:8c:93:18:ee:5a:c4:ec:3a:61:59:9b:
38:b8:e1:74:05:c9:9b:71:71:9c:34:5a:de:55:15:
2d:f0:2a:68:22:99:53:ef:b9:c4:fb:78:4f:a1:a7:
21:e0:58:c7:a6:0a:bb:d6:6f:f3:55:fc:15:e8:47:
5c:b5:e3:ed:55:88:02:aa:0f:26:9a:0a:3c:0b:55:
5c:44:0b:32:d1:f3:fc:03:26:e9:4d:4f:e2:c6:b6:
0d:30:0c:ce:c0:12:09:54:43:d8:94:9a:c0:6a:cf:
b3:6e:9b:32:7e:28:cc:65:b3:8b:1f:b9:91:11:82:
fa:f4:de:27:92:49:f7:ff:40:a4:80:10:88:03:e4:
47:e3:42:cc:02:2f:f5:a3:dd:4f:89:97:cf:24:45:
7f:73:89:e1:e3:94:c9:c2:ff:b7:3c:40:43:a1:10:
c9:f3:5b:94:32:57:59:c8:08:6f:2b:ca:6a:ef:a6:
17:13:61:09:91:30:c7:b5:9c:45:fa:d9:34:5d:11:
6e:c6:cf:80:a3:9a:f6:48:aa:ef:e9:da:39:bb:bf:
f7:30:d4:18:3b:a5:ed:dd:98:54:30:5b:c6:1a:a1:
15:1e:77:88:c4:a6:ce:ae:26:4c:de:d2:17:82:3e:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6E:2B:4C:EC:36:22:B3:54:FB:86:7D:AE:AE:B2:0A:DE:B5:DE:14
X509v3 Authority Key Identifier:
keyid:B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/dm4rTOw2IrNU-4Z9rq6yCt613hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.166.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7d:17:48:0c:c0:4e:b2:45:43:0e:de:91:69:cb:9e:0b:c9:
a3:f3:23:b2:ef:60:03:bf:49:8a:5f:45:e7:38:4a:cc:c5:49:
04:7c:50:43:d2:15:b5:54:2a:bd:06:7c:06:b7:89:ee:a8:22:
4c:d1:64:fd:0d:eb:e7:d8:b5:37:34:80:c6:53:56:8f:8c:3e:
c2:71:30:15:53:32:03:d8:f4:b4:9f:d3:3f:da:91:30:b5:13:
f5:55:8e:a8:60:5f:bb:19:e1:b9:01:5d:84:e5:c1:ce:86:4e:
a4:1f:8a:a2:bf:f9:31:cb:17:8e:d8:53:0f:84:00:e9:ce:d2:
e0:9d:fc:44:6b:6c:b4:58:b9:dc:c7:1a:a8:f9:de:da:f8:27:
48:b6:32:4f:8f:e0:04:6a:b2:88:c0:64:7b:da:62:4c:39:da:
bd:12:2b:39:9d:f9:57:8b:b6:6e:2b:41:f8:15:25:46:58:ec:
da:1f:12:60:25:20:4d:11:01:1f:42:af:4a:15:9d:89:1b:be:
55:b0:fc:b6:ef:bb:b4:d4:60:92:cb:15:61:6f:12:b1:ca:8a:
6b:73:9c:e0:a7:c7:8f:6f:e2:9e:a2:c3:e9:0b:24:cd:56:05:
6f:34:8a:34:51:9f:e9:ca:41:06:0c:53:d4:ca:a6:38:e9:bf:
53:27:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:11 2024 by rpki-client on console-ams.rpki-client.org