Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/6gzjbAnRFfV0TSNiTrWKzpjTPNI.roa
File: 6gzjbAnRFfV0TSNiTrWKzpjTPNI.roa (raw, json)
Hash identifier: 4B1c4e0rBTXQHOQhfJ9UpVBPos2ExXbRo4vKxDOJjig=
Subject key identifier: EA:0C:E3:6C:09:D1:15:F5:74:4D:23:62:4E:B5:8A:CE:98:D3:3C:D2
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 018571D798E747F854B9C32721EAB1B81EEE
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/6gzjbAnRFfV0TSNiTrWKzpjTPNI.roa
Signing time: Mon 02 Jan 2023 09:37:12 +0000
ROA not before: Mon 02 Jan 2023 09:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42000
IP address blocks: 91.103.160.0/21 maxlen: 21
185.160.20.0/22 maxlen: 22
94.124.104.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:98:e7:47:f8:54:b9:c3:27:21:ea:b1:b8:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 2 09:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea0ce36c09d115f5744d23624eb58ace98d33cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:70:33:31:bf:33:49:f2:58:e9:02:67:17:
f9:ae:8c:da:f2:49:c5:75:31:4e:33:f3:ae:5c:67:
a5:b8:c6:0b:79:48:68:69:1d:a1:c8:f3:4d:b7:df:
cb:a1:bf:d9:60:2d:6c:4c:27:9f:7d:ef:a6:79:e7:
5f:2b:e9:c4:a9:0b:15:4d:3e:15:39:24:b0:5e:d3:
9b:79:a7:16:a4:51:ee:06:34:88:bc:33:8a:77:0e:
bf:09:4f:e0:f3:bd:c3:bc:1f:6d:56:0c:b0:f6:68:
aa:a1:2a:c8:32:4e:fc:01:87:dd:74:49:12:0b:78:
cd:f7:1d:fd:71:80:2f:80:85:cf:65:5a:cf:98:35:
21:62:43:37:27:a2:80:39:59:b6:e0:0a:d6:a3:67:
de:d7:b2:ce:6a:79:85:b8:e6:59:2a:6d:5b:ed:03:
d4:04:31:98:b7:b3:1c:ed:73:3c:08:4b:e7:83:55:
1a:6c:ec:36:86:b8:5b:b1:b3:f6:77:cf:be:31:54:
39:81:94:46:5e:dd:6a:ae:a8:80:84:39:fd:15:92:
97:e0:f5:9e:f8:d9:db:3a:6e:e5:a2:26:6e:93:1a:
f2:c6:e9:06:f9:9b:84:1b:18:4b:13:87:9f:fd:2a:
ab:b5:ae:ac:a7:95:17:55:5b:a1:9e:0b:e9:f4:d5:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:E3:6C:09:D1:15:F5:74:4D:23:62:4E:B5:8A:CE:98:D3:3C:D2
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/6gzjbAnRFfV0TSNiTrWKzpjTPNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.160.0/21
94.124.104.0/21
185.160.20.0/22
Signature Algorithm: sha256WithRSAEncryption
27:09:dc:1f:8d:0e:5f:f0:0c:59:6a:87:af:80:55:10:79:f9:
c3:e2:be:13:78:53:95:13:6f:1a:8a:39:ef:dc:45:0b:73:f1:
1b:d6:ef:0d:5e:f4:22:7e:13:69:db:d2:56:ec:39:bb:c6:94:
21:58:0c:c8:c8:d3:f6:ba:97:28:4a:07:75:c7:f9:f9:84:03:
67:d6:fe:8e:cb:ff:95:8b:0f:a2:c4:cf:a0:4e:e9:2e:8a:db:
1e:8a:f6:12:a8:1f:51:6b:ae:fa:20:2c:d9:aa:75:a6:4d:e0:
7d:af:84:59:cd:28:d0:e6:52:9f:a8:8d:35:45:0d:f2:2c:fa:
c3:1e:17:aa:96:7f:0e:a3:07:00:4a:14:1c:e0:ea:23:dd:85:
9e:85:e3:95:f4:50:83:cb:4f:22:a2:2f:a6:70:63:c6:7c:d7:
3a:bf:ba:f8:1b:d6:2a:b2:83:a1:eb:62:3d:56:2b:91:ca:8b:
96:2e:38:26:56:3c:a4:a2:73:97:b5:24:68:be:1c:f3:f5:b5:
4c:ff:de:a6:06:23:b7:c5:cb:b5:5c:b6:78:eb:8c:97:02:45:
18:d6:44:8d:fa:d3:d4:7e:ab:51:10:ba:81:d1:4f:1e:1e:5b:
0c:e7:59:9c:22:5e:8e:96:7b:c2:18:52:27:08:39:93:87:d1:
07:12:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:16 2024 by rpki-client on console-fra.rpki-client.org