Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa
File: EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa (raw, json)
Hash identifier: r1W0CK2mKP06SgwbuohFbGJVFeQuJVnW7IRmUvgIkzA=
Subject key identifier: 11:DA:EB:5F:A3:F3:B3:CF:FD:A5:8E:6A:2D:3D:F3:2F:0B:69:6B:7C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F38AE93D6F21F7BFA17F2C040ABD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.142.141.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f3:8a:e9:3d:6f:21:f7:bf:a1:7f:2c:04:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11daeb5fa3f3b3cffda58e6a2d3df32f0b696b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:ee:7a:3e:bd:b3:bf:1e:9b:f3:6b:e6:d9:
3d:ef:ea:0b:cb:a0:75:f6:c9:63:13:17:d1:9c:6c:
f9:95:f4:04:c5:07:b7:b4:48:0c:c4:fe:4e:eb:a9:
90:dd:87:0f:97:66:83:e9:c4:de:8d:c9:1d:52:53:
78:81:9f:63:b3:b7:1f:38:6b:75:de:0b:a7:b5:11:
5a:33:e2:8c:4c:3d:79:95:08:c2:2a:33:aa:2e:fa:
75:36:34:32:12:a0:1a:71:e5:ac:fb:ff:34:c4:8c:
73:10:92:f0:3f:b5:03:08:f1:a0:f4:39:62:fd:68:
ce:db:6a:7c:d6:38:a5:c4:39:95:25:0f:c1:fc:0d:
83:10:fd:ff:9b:26:52:99:af:01:30:c2:59:c1:59:
62:fa:47:c0:7e:33:3d:48:84:c1:04:f4:3b:67:c5:
19:e6:5f:f5:d6:d6:2a:3c:f7:63:8c:28:ee:3d:56:
c2:b0:77:2e:c6:41:15:e4:80:c7:bf:b1:78:27:4e:
21:13:3d:2e:b9:c7:a1:f2:22:20:15:a9:6f:70:18:
cb:78:74:27:b4:e9:bb:5d:98:fd:1c:db:1c:05:e1:
93:5f:5b:27:f3:42:4f:95:17:68:1c:29:c9:3e:6c:
a3:60:da:d3:6b:84:af:31:6d:37:fb:fc:1f:ee:3a:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:EB:5F:A3:F3:B3:CF:FD:A5:8E:6A:2D:3D:F3:2F:0B:69:6B:7C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.141.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2d:80:e3:a4:a9:f3:34:da:c0:5c:a8:38:7c:37:f5:f9:0e:
a8:ef:2a:77:e0:1e:80:41:c6:aa:d7:9c:0b:84:70:63:a8:41:
b2:e2:82:ab:6b:e2:e8:55:3b:7e:83:3c:0b:ea:c1:70:1e:bc:
2a:11:d0:ad:e2:5a:99:e4:c3:ce:0c:d6:02:cb:41:9a:bd:45:
dc:8a:c6:e0:27:a3:43:34:7e:d4:6d:05:4d:42:52:00:fd:a6:
de:09:f9:f0:8f:46:79:20:ad:d8:3f:93:20:cc:36:62:e9:25:
be:ca:df:1b:9c:f8:9e:5f:d2:29:53:23:36:74:b8:1d:11:cf:
90:99:ea:5a:03:02:5d:43:a3:df:3b:7a:ec:b3:c9:8a:af:1d:
7c:c4:fd:d7:5a:0e:9a:5b:23:01:70:8f:49:2a:b8:48:9c:81:
ff:cf:5c:ca:22:2e:62:18:f2:1b:9f:77:e5:ff:d4:fb:68:4a:
28:8e:ab:04:87:af:7b:65:87:cd:bf:09:b1:97:d4:ac:4d:2b:
36:40:d2:2b:33:83:77:03:af:41:16:53:e3:53:38:cb:57:9a:
fd:8c:4a:11:72:f7:5d:dc:6c:37:6e:0c:1f:7b:c9:83:f7:8d:
76:d3:90:a9:c5:0c:c4:4e:a7:85:ee:31:b8:2a:46:14:55:b6:
4d:21:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:32 2024 by rpki-client on console-ams.rpki-client.org