Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4chraKYoeLKIuRvnCgH5-jxEmCE.roa
File: 4chraKYoeLKIuRvnCgH5-jxEmCE.roa (raw, json)
Hash identifier: cMz5UXv2shQYHMWsf1gltmefTmGAxNW68GaIZ389h5M=
Subject key identifier: E1:C8:6B:68:A6:28:78:B2:88:B9:1B:E7:0A:01:F9:FA:3C:44:98:21
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53FCE7D3A646F00B97C5D2C7B92075
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4chraKYoeLKIuRvnCgH5-jxEmCE.roa
Signing time: Sun 01 Jan 2023 07:55:21 +0000
ROA not before: Sun 01 Jan 2023 07:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57758
IP address blocks: 185.142.141.0/24 maxlen: 32
2a06:7a04::/43 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:fc:e7:d3:a6:46:f0:0b:97:c5:d2:c7:b9:20:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1c86b68a62878b288b91be70a01f9fa3c449821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:e3:de:3e:00:7a:fa:07:b9:2b:95:f6:24:
a9:c3:96:a2:96:0f:d1:ee:0f:f7:df:b3:08:15:db:
67:0c:63:a7:e5:1e:9e:a3:e5:f9:06:38:8a:b1:32:
25:8d:7c:5b:75:f1:8c:d1:da:88:8f:b1:64:10:92:
d8:e0:56:1d:d7:59:15:4f:ec:8a:80:4a:ee:4e:ef:
4c:6c:ba:2e:eb:c9:da:0c:65:40:5d:a9:0e:21:d5:
26:bb:bc:54:67:0f:ca:c5:fa:e6:b0:6f:73:bb:43:
f3:80:40:d6:cb:c7:5e:f4:ba:7f:85:0b:40:99:8b:
35:ac:76:bc:48:4a:85:0d:43:e5:98:1a:7b:b4:00:
d9:3c:44:c4:c0:d9:27:b7:e9:ca:15:26:ff:92:bc:
01:40:5b:64:0d:b5:78:0a:21:b4:12:b3:ef:f7:d3:
bd:f2:79:f3:97:74:9a:7d:62:d9:86:80:40:df:d2:
39:70:3f:71:5e:92:fb:d5:9d:70:5d:7c:32:c0:65:
dd:32:09:04:25:c1:6e:ab:8d:30:a4:ae:61:27:68:
d1:58:70:0d:ea:bb:08:45:0c:1d:54:ad:c3:4b:28:
2f:21:4d:98:ce:42:b8:7a:df:e2:40:c8:08:60:78:
40:ed:66:1f:ed:54:c7:31:4e:76:5f:38:46:39:a7:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:6B:68:A6:28:78:B2:88:B9:1B:E7:0A:01:F9:FA:3C:44:98:21
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4chraKYoeLKIuRvnCgH5-jxEmCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.141.0/24
IPv6:
2a06:7a04::/43
Signature Algorithm: sha256WithRSAEncryption
9c:b1:61:27:c0:a1:9e:64:07:6a:44:1b:a8:07:af:72:01:88:
f2:10:0b:e0:cc:bc:e7:23:01:1e:b5:0d:86:dc:28:d7:a1:44:
66:60:af:9b:84:d7:35:e8:1d:38:37:0c:69:76:2d:dc:a0:86:
f8:59:82:2b:96:f9:2e:aa:07:53:69:b4:74:a1:34:4b:c0:ae:
04:4b:a9:50:58:8c:f9:4f:99:13:5f:91:9b:71:b9:bc:bf:0e:
94:f7:bc:f6:06:d9:b4:f2:70:bd:f4:f5:1d:2d:89:5e:10:d1:
5a:c8:8b:5b:39:8a:03:bd:14:ad:ad:b7:97:13:69:9b:02:c7:
de:e7:12:c5:d4:10:67:32:91:2f:fd:dd:f3:aa:f3:dc:c8:ca:
7f:82:c1:d1:96:a1:2e:70:fb:01:ab:ed:6c:22:24:a8:3a:f5:
e8:bc:bc:e4:33:cf:7f:43:79:c0:45:e5:5e:25:d6:38:56:8a:
da:f0:a9:e6:2b:d8:82:d6:e5:4c:61:6c:02:8c:5e:90:e1:3c:
c7:7e:19:60:4d:72:ed:e9:15:8c:ef:04:19:fd:39:cc:92:6e:
7f:ab:27:c1:16:e9:e8:42:f3:54:f6:ef:ba:c2:03:aa:78:1a:
be:64:f8:3c:21:f7:e7:e8:2e:bf:8e:72:ab:1a:6e:78:c7:55:
9d:cb:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:32 2024 by rpki-client on console-ams.rpki-client.org