Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/6G063gNsdW-duQndZqcKVJv74iA.roa
File: 6G063gNsdW-duQndZqcKVJv74iA.roa (raw, json)
Hash identifier: 3uB2okH4aqSRPxdaKpmIP40A22J2IHeET72nIs8YelA=
Subject key identifier: E8:6D:3A:DE:03:6C:75:6F:9D:B9:09:DD:66:A7:0A:54:9B:FB:E2:20
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 018571D7A30F280C6582CD3F49920258D39C
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/6G063gNsdW-duQndZqcKVJv74iA.roa
Signing time: Mon 02 Jan 2023 09:37:15 +0000
ROA not before: Mon 02 Jan 2023 09:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.45.194.0/24 maxlen: 24
212.8.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a3:0f:28:0c:65:82:cd:3f:49:92:02:58:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jan 2 09:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e86d3ade036c756f9db909dd66a70a549bfbe220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:a6:12:d4:11:ce:6d:1b:b4:c0:5a:4b:a9:
6f:45:32:fa:26:68:b2:fe:34:da:69:94:d2:39:b4:
15:1a:06:bd:ac:97:71:38:a3:75:e8:13:00:3f:bf:
9a:2b:d8:d5:87:b8:c0:97:25:85:b2:9e:e8:10:f1:
05:41:2f:da:c5:d4:e6:ec:30:0e:0e:5a:2b:4a:44:
62:2d:83:75:1d:46:a8:fc:7c:a4:e9:a9:4f:8b:c9:
a7:68:03:38:1d:11:5b:4b:55:62:0f:8d:ab:41:68:
42:a6:42:bc:75:d4:98:ca:63:3c:ba:5a:dd:40:f1:
db:dd:04:e7:20:66:37:d7:d8:32:ae:ab:74:29:fa:
ba:4b:09:7e:4a:c4:5a:25:6b:50:d4:13:b4:cd:50:
5b:8a:9e:44:b7:cd:76:a7:e8:0e:e8:2d:17:59:e3:
1f:ce:94:01:fb:dc:5e:c9:f2:03:c4:16:2f:24:c6:
16:f5:d1:ed:27:bf:8c:99:e4:35:55:7e:b7:28:eb:
b4:c2:7e:47:6a:56:3c:58:6a:8c:ae:9b:05:4b:c2:
44:45:2b:a4:57:f8:ef:f2:98:64:8b:cd:07:32:45:
9a:3e:6e:ae:ff:d8:b0:dd:84:bb:05:d4:29:7d:b0:
2c:ff:78:ee:e9:e1:9b:df:4a:bc:1b:89:b0:ec:d7:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:3A:DE:03:6C:75:6F:9D:B9:09:DD:66:A7:0A:54:9B:FB:E2:20
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/6G063gNsdW-duQndZqcKVJv74iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.194.0/24
212.8.251.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a1:6f:69:68:e3:30:2b:fd:48:b7:ca:c0:71:79:fe:02:e6:
d8:18:46:35:09:63:73:0f:d7:c7:1b:01:63:b4:5d:e3:49:06:
fc:e2:4b:7e:55:af:79:57:5a:5d:d4:6e:15:58:8e:b2:b2:01:
2b:39:17:b2:8e:39:48:d7:d7:10:78:81:10:59:fe:d0:92:ef:
91:6b:d0:51:c8:0a:93:50:92:77:48:ee:8a:9a:8d:fa:e5:d3:
bc:88:88:04:7d:eb:42:02:18:b6:89:cb:56:a1:4a:20:27:16:
24:40:fb:78:2d:6c:20:02:f2:45:50:3c:d8:7c:0a:5d:3e:9d:
2d:f1:52:19:78:b8:11:bd:bf:5e:31:3d:fa:7b:f5:33:fa:c7:
ef:6d:97:e3:45:18:e6:7f:98:2f:a3:46:76:9a:02:14:f4:4e:
97:01:46:3c:02:7b:bd:dd:3d:8b:0f:8a:b9:39:b8:1f:6f:99:
47:9c:31:a2:d0:90:ad:88:eb:67:21:55:48:07:16:04:cb:f1:
fd:24:58:07:e2:ab:c0:4c:f9:54:2c:d9:9d:e3:e3:e9:57:60:
1d:26:29:2b:7b:f0:31:32:db:95:ee:4b:1a:4e:06:f8:32:ec:
48:d6:f8:0b:a2:27:b0:7b:67:a3:3d:4d:33:c1:79:71:3c:8d:
d6:84:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:17 2024 by rpki-client on console-ams.rpki-client.org