Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/6-LSPAjzgmCuivp2uS-C6B0DsVk.roa
File: 6-LSPAjzgmCuivp2uS-C6B0DsVk.roa (raw, json)
Hash identifier: OXXxoZQQSk2ChcSONQK/K3fNMAKisBc9nn/Q4JEJYhI=
Subject key identifier: EB:E2:D2:3C:08:F3:82:60:AE:8A:FA:76:B9:2F:82:E8:1D:03:B1:59
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0185718C0E5EAD24CB4BDBC0D5CBC3788B02
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/6-LSPAjzgmCuivp2uS-C6B0DsVk.roa
Signing time: Mon 02 Jan 2023 08:14:42 +0000
ROA not before: Mon 02 Jan 2023 08:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30742
IP address blocks: 185.204.97.0/24 maxlen: 24
185.204.96.0/22 maxlen: 24
185.204.96.0/24 maxlen: 24
185.204.98.0/24 maxlen: 24
185.204.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:0e:5e:ad:24:cb:4b:db:c0:d5:cb:c3:78:8b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jan 2 08:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebe2d23c08f38260ae8afa76b92f82e81d03b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:b7:cc:f8:28:e8:fe:5c:af:1b:fd:2e:a5:
69:2b:a2:c6:ed:30:01:18:e4:73:3a:3e:ef:af:60:
8e:60:ad:03:9e:fe:78:74:15:6f:99:02:5e:65:b9:
ee:e8:03:98:f0:c1:06:b4:f6:4e:21:00:93:b6:e3:
c1:f5:18:53:e3:23:a4:46:0a:4e:6c:14:7e:02:a6:
25:ba:7f:f7:1e:3b:9d:97:6c:fb:11:6c:ef:53:de:
f6:f8:7e:5d:ea:00:0e:b3:d5:95:9c:98:3f:cf:c6:
e9:ee:d7:56:19:11:54:54:c6:8e:7f:1c:24:1e:be:
d2:45:87:6a:ea:90:b1:c4:9b:27:3a:25:63:3b:cf:
f7:5a:bd:6d:ce:aa:93:27:dd:6a:9b:b5:1d:db:90:
47:ca:2d:d1:69:59:51:68:7d:ba:09:25:47:c6:75:
40:a0:c7:9c:41:e9:97:0a:8e:d2:2e:19:5e:4e:db:
ef:0d:bc:f3:a4:16:61:d0:03:16:41:23:40:85:7f:
45:87:4e:1f:d6:1d:50:fd:c6:ec:ea:29:ab:22:da:
57:f9:04:1d:06:8d:59:3b:fe:86:45:7f:67:2b:3d:
fc:b1:d6:dc:8c:e7:91:9f:9d:8d:83:f6:7e:8c:ad:
bd:c8:52:53:0a:3a:15:95:db:81:7b:94:68:3c:94:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:D2:3C:08:F3:82:60:AE:8A:FA:76:B9:2F:82:E8:1D:03:B1:59
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/6-LSPAjzgmCuivp2uS-C6B0DsVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b6:23:ee:6c:3d:57:85:1d:40:a4:26:c2:29:e3:db:d1:ba:
f3:c5:d1:7c:12:70:76:09:46:72:2a:d5:e3:d9:91:4c:91:c7:
ad:c0:b8:70:c4:81:55:af:32:8e:85:c3:89:1d:ed:85:68:b6:
21:8d:30:03:09:44:6a:38:a6:5a:f9:26:be:23:4e:c4:20:6c:
76:d1:01:bc:d0:99:8c:88:6e:9e:da:04:46:1d:37:74:0f:11:
9c:5f:e7:2b:1e:52:d5:01:87:7c:29:b8:be:35:ce:0e:ec:e0:
fa:b1:33:1e:07:07:be:bc:3b:aa:cd:ba:b1:86:b3:51:2b:97:
b2:3f:51:90:5c:bb:08:57:01:6c:12:c3:1f:76:74:8b:86:00:
5a:28:84:f1:04:f6:ff:36:75:e6:36:30:2b:d8:02:dc:8b:00:
c8:49:4b:3a:9e:7f:ab:f1:15:9b:21:1e:cf:b0:0f:b3:6e:96:
eb:28:9b:90:5b:22:c9:96:9c:7b:ce:7f:88:f4:5b:8f:af:1e:
67:61:07:87:81:89:a3:b0:3b:bb:0c:67:84:98:04:92:a4:55:
00:50:b4:77:f4:8e:81:92:e3:17:16:de:a3:c5:35:a5:e8:90:
5e:7d:4a:a6:6a:86:19:e8:5e:bf:4e:2d:d8:79:69:0f:26:88:
4c:9a:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:27 2024 by rpki-client on console-ams.rpki-client.org