Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6H222sCCKX-5VIDdU5aejH35mig.roa
File: 6H222sCCKX-5VIDdU5aejH35mig.roa (raw, json)
Hash identifier: sOw/F3Fp1AvS8TdM81w9gnV8XOJuUKA92gsZ5t4Up+k=
Subject key identifier: E8:7D:B6:DA:C0:82:29:7F:B9:54:80:DD:53:96:9E:8C:7D:F9:9A:28
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01893E0F351C3A37316C63DC33699D4D5C0A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6H222sCCKX-5VIDdU5aejH35mig.roa
Signing time: Mon 10 Jul 2023 04:28:51 +0000
ROA not before: Mon 10 Jul 2023 04:28:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212411
IP address blocks: 45.129.133.0/24 maxlen: 24
188.241.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:0f:35:1c:3a:37:31:6c:63:dc:33:69:9d:4d:5c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 10 04:28:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87db6dac082297fb95480dd53969e8c7df99a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:3f:72:de:3a:8c:3b:74:08:97:e3:f7:23:
a9:b0:03:4d:e7:40:f4:62:71:92:64:24:39:1d:9e:
b7:15:38:0f:59:21:65:3a:ab:cb:8c:d5:d6:1f:87:
66:8c:26:61:8c:99:d3:36:03:a1:59:94:01:06:45:
bf:8a:58:49:9c:ee:3b:24:92:6e:26:19:13:44:f9:
0e:3d:a5:d0:08:00:64:fb:06:a7:e4:91:92:a1:7b:
13:d6:5c:ea:7d:41:fe:78:2a:1c:ce:63:54:b1:42:
eb:94:c7:3c:1b:9d:2a:37:ee:51:94:30:a3:f5:92:
6a:36:45:6e:1c:75:58:98:ba:07:65:41:0b:35:d7:
91:ff:fa:65:0f:f8:83:8a:9f:4f:98:4c:43:5c:1d:
e9:2c:4a:8e:57:46:e7:77:1d:e0:60:e6:d4:93:a1:
9b:5a:1f:b1:6b:04:d8:d2:87:36:cb:ae:12:c8:8a:
c1:f3:8b:3b:f8:60:c7:6c:ba:5f:ff:d8:3d:ec:31:
6d:7a:44:4e:e8:a5:69:44:68:18:a5:99:b2:12:f7:
62:8d:32:9a:36:00:c3:f6:56:72:8a:59:8a:c6:9e:
f0:e9:8e:b0:43:7f:69:20:26:d1:63:16:51:db:5d:
95:47:f8:c9:e8:32:b6:5b:62:36:46:df:63:f1:23:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:B6:DA:C0:82:29:7F:B9:54:80:DD:53:96:9E:8C:7D:F9:9A:28
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6H222sCCKX-5VIDdU5aejH35mig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.133.0/24
188.241.242.0/24
Signature Algorithm: sha256WithRSAEncryption
22:13:2d:86:b5:40:93:f1:0d:02:c5:27:8d:c1:9d:35:6f:eb:
1b:13:72:a4:e3:a9:0a:57:ab:2e:36:d5:40:f3:0f:aa:90:ef:
22:d5:d9:8b:a2:40:bf:55:98:ca:70:14:4d:e0:c3:23:e5:c2:
51:b1:58:47:af:66:2a:7c:96:83:d5:cd:57:ce:f3:c7:25:40:
c8:75:da:40:ab:5f:c0:9d:ea:3a:77:f0:a0:bd:85:e8:66:93:
09:69:18:5c:53:af:72:82:30:82:22:91:d1:6b:75:dc:ed:20:
78:50:fd:e5:ed:d9:95:de:7d:ae:19:89:69:e9:07:b8:54:10:
c3:be:23:17:6b:94:f5:c2:78:25:13:53:14:c1:1b:63:1c:d5:
64:3c:77:c4:a5:ed:5d:f7:08:8d:76:87:d8:4a:15:1b:4d:f9:
6a:b1:09:78:46:14:40:1f:fe:6b:90:d8:c9:4d:1a:e0:5c:2a:
77:2b:67:04:b7:eb:3f:bb:1c:07:74:61:18:53:e5:7d:59:fe:
31:91:b7:a8:d5:8a:7a:52:8c:00:ee:74:91:b7:16:5f:b7:4d:
44:83:aa:4b:49:21:a3:9c:45:e6:90:01:81:8b:7b:5f:a7:6d:
77:28:2b:2f:ab:8a:d3:57:77:10:0f:d4:88:b6:5f:c6:d2:ef:
89:6b:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 07:46:40 2023 by rpki-client on console-fra.rpki-client.org