Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/cEVl6YMt2q8SEvkDPDh4cRmhCjM.roa
File: cEVl6YMt2q8SEvkDPDh4cRmhCjM.roa (raw, json)
Hash identifier: dvccPsI7wxjbXh3bkJAZWxF43HFTblH+TsjJdzZfxJE=
Subject key identifier: 70:45:65:E9:83:2D:DA:AF:12:12:F9:03:3C:38:78:71:19:A1:0A:33
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F3D1FFDF74198FEDF094BB33A483
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/cEVl6YMt2q8SEvkDPDh4cRmhCjM.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 185.142.142.0/24 maxlen: 32
194.34.230.0/24 maxlen: 32
45.93.119.0/24 maxlen: 32
185.249.217.0/24 maxlen: 32
2a06:8e01::/44 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f3:d1:ff:df:74:19:8f:ed:f0:94:bb:33:a4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=704565e9832ddaaf1212f9033c38787119a10a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:32:c8:e3:d5:c1:eb:2b:89:ce:58:cc:e7:
9c:cc:24:8d:bd:68:e7:2f:1c:92:b9:69:db:54:3d:
cc:39:23:6f:61:9a:93:76:29:de:f7:3c:e2:85:06:
5c:b4:66:0a:f9:67:e5:03:11:94:30:d1:b3:cf:92:
1b:b0:41:9c:bd:71:fd:02:49:fb:82:11:d5:ac:13:
2d:5c:30:22:01:3c:a5:e7:ed:cd:ac:99:fc:60:35:
fa:c7:52:1c:00:45:14:2a:87:7e:9c:78:59:57:cd:
45:a7:d7:4e:56:24:f7:ac:72:36:58:32:2c:eb:a8:
56:9d:49:ea:1e:a1:11:43:c3:c0:c5:69:12:9a:aa:
cb:26:b2:1d:db:07:f5:3c:b7:6f:25:06:da:c4:50:
9e:13:84:5f:0e:6e:47:ee:a0:3c:ec:0a:8e:fb:c3:
c5:0b:2b:3f:33:68:55:9d:1c:18:2e:c3:ef:40:73:
25:96:98:72:c5:40:d6:e5:b1:59:c8:ea:03:79:01:
cc:63:a4:4e:83:c9:43:84:f5:e9:c3:ee:7e:23:8a:
18:38:c1:ab:46:b3:0e:20:54:77:a6:da:c6:9c:b4:
6a:06:ad:17:c3:46:01:df:ae:b7:4f:b1:fc:81:f1:
72:93:cb:15:77:95:43:89:ce:84:22:07:7b:3f:84:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:45:65:E9:83:2D:DA:AF:12:12:F9:03:3C:38:78:71:19:A1:0A:33
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/cEVl6YMt2q8SEvkDPDh4cRmhCjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.119.0/24
185.142.142.0/24
185.249.217.0/24
194.34.230.0/24
IPv6:
2a06:8e01::/44
Signature Algorithm: sha256WithRSAEncryption
70:bd:9f:5f:0e:ac:f9:4f:59:33:86:58:81:1c:3d:b1:ea:99:
a3:e9:7e:8c:a5:be:55:d4:13:45:49:d2:fe:39:32:0f:dc:ac:
8f:3e:5f:05:fc:89:90:3c:31:af:d3:29:20:90:48:5b:70:0b:
56:54:8c:42:6b:e7:2a:59:15:ce:d5:f0:3b:16:d2:a0:bd:a3:
db:cc:2c:76:a9:ef:6c:60:25:11:27:af:b7:6b:0b:a7:db:14:
0d:1a:65:d5:e9:a4:42:b1:2e:51:36:cf:b7:a0:25:40:61:ed:
bc:6d:9b:3d:e6:ca:5c:3d:f4:a8:f3:d4:1c:b1:13:18:0a:a5:
27:ea:f3:6e:e6:dc:fe:0f:7c:53:72:87:2c:d3:84:b1:c7:bf:
fe:5a:3e:3d:85:50:21:b1:7a:4a:44:2b:f1:6b:77:41:0d:ab:
84:34:67:2b:15:5f:62:ff:3a:2c:ac:8d:9d:10:ad:6a:7e:3e:
73:58:3f:1a:03:66:26:4d:47:05:9c:f5:8c:e7:ee:02:85:cd:
11:40:d0:f8:82:08:37:cc:ca:8c:d8:5a:86:81:44:ca:84:a2:
f1:39:1a:d9:d2:71:4e:1e:5b:c9:59:53:cb:e6:78:89:68:14:
7d:26:0b:8b:93:26:e9:05:fd:7b:7e:4d:64:06:4b:c1:c9:42:
cf:5a:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org