Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/6KD3ljqges8agTizi9TsLTGb6cE.roa
File: 6KD3ljqges8agTizi9TsLTGb6cE.roa (raw, json)
Hash identifier: a+nS/IY5LYbuDQTUJ158qNrwRXR8RiF03AKiBF+tI+o=
Subject key identifier: E8:A0:F7:96:3A:A0:7A:CF:1A:81:38:B3:8B:D4:EC:2D:31:9B:E9:C1
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0190E8E5AE56BE4B80940BBA254A13DC5106
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/6KD3ljqges8agTizi9TsLTGb6cE.roa
Signing time: Thu 25 Jul 2024 07:58:04 +0000
ROA not before: Thu 25 Jul 2024 07:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.183.244.0/23 maxlen: 24
185.183.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:e5:ae:56:be:4b:80:94:0b:ba:25:4a:13:dc:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jul 25 07:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8a0f7963aa07acf1a8138b38bd4ec2d319be9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:09:dd:e4:87:ab:ea:6d:aa:ad:3f:c0:8b:
39:74:9b:17:c2:53:ac:b0:7b:94:e0:db:09:2c:11:
90:dd:57:93:7a:ff:d0:02:95:d0:8d:88:55:8c:1c:
78:53:ef:80:2b:cc:c7:73:e3:df:8f:ed:76:0d:69:
42:1f:d1:34:63:9b:2e:b8:73:da:2b:83:35:5d:cd:
a7:29:6c:47:8d:ac:8b:09:e1:72:59:75:b7:99:8c:
69:37:dc:08:e1:76:23:a1:ed:b3:fb:3c:61:94:cb:
53:3e:6e:46:e8:99:88:71:0a:34:76:eb:1c:bf:cc:
af:8c:be:d9:c1:5a:b3:0c:05:69:82:19:a9:ce:92:
72:15:36:02:f5:09:35:a7:49:c4:4f:0d:da:1a:69:
63:f0:2f:b2:a9:f5:1a:aa:7f:91:af:cc:31:17:e8:
4c:43:8b:8b:93:f1:af:bb:5d:2d:77:24:ca:d9:c8:
11:bd:5b:02:7e:68:48:64:e4:80:9e:d5:af:76:77:
e3:66:16:83:75:f3:24:46:6e:03:0a:ab:83:7c:ff:
68:44:a5:8c:dd:90:e5:a8:c8:18:7d:87:31:4e:4b:
03:3f:c6:f3:b5:ab:7d:e3:ab:13:38:36:0a:55:4e:
93:1a:1e:a7:c4:b3:ad:b5:76:da:fa:9b:67:71:ff:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:F7:96:3A:A0:7A:CF:1A:81:38:B3:8B:D4:EC:2D:31:9B:E9:C1
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/6KD3ljqges8agTizi9TsLTGb6cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ca:ae:b8:07:ec:f6:f8:26:54:f6:bd:10:94:a5:0e:b2:75:
49:a4:c1:c5:52:4c:3d:99:86:ce:5d:36:94:45:82:c3:cb:18:
40:14:e6:16:20:95:70:9d:fb:dc:67:33:f6:d9:64:e1:40:28:
23:9d:0e:65:5b:d6:05:b7:c7:aa:0e:a7:89:b7:1c:69:9a:5d:
20:7b:5e:e7:b7:b3:87:cc:67:0b:a6:b3:d8:fc:86:18:df:dc:
34:13:f6:43:b6:51:0b:22:8b:f9:9b:79:a3:04:2e:00:b8:0d:
d0:6c:31:9d:a4:fc:3e:46:aa:31:a5:75:93:87:ea:e6:22:37:
05:34:ce:a9:4a:f0:8d:d3:5e:39:27:a6:55:09:4b:a1:dc:6e:
26:02:6d:35:f8:d8:39:f2:6c:78:95:17:49:07:f1:d0:1f:fe:
38:75:33:58:31:07:c4:1c:18:37:44:c8:e1:6d:60:85:48:24:
54:1a:09:e6:4d:41:c7:5d:f6:9f:80:fc:87:44:37:69:67:38:
8a:86:5e:60:e8:17:60:bc:60:ef:c8:9d:20:11:25:5d:ac:2f:
0c:cc:7d:47:53:8b:08:6b:47:dc:4e:42:1b:c7:09:91:c9:a7:
87:89:67:7f:69:b4:aa:58:39:d3:fc:c8:9a:95:e8:02:2d:0d:
80:9d:68:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:39:40 2024 by rpki-client on console-fra.rpki-client.org