Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tGmUo17IKaCJAehgD23rzZeVDuA.roa
File: tGmUo17IKaCJAehgD23rzZeVDuA.roa (raw, json)
Hash identifier: 7bgYpFA6UBNSHWIktuw478o/wT3dd90myn8J6ooYrLg=
Subject key identifier: B4:69:94:A3:5E:C8:29:A0:89:01:E8:60:0F:6D:EB:CD:97:95:0E:E0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C541B07E1A0EC2504DF8B1B7C112A37
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tGmUo17IKaCJAehgD23rzZeVDuA.roa
Signing time: Sun 01 Jan 2023 07:55:29 +0000
ROA not before: Sun 01 Jan 2023 07:55:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212728
IP address blocks: 185.215.215.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:1b:07:e1:a0:ec:25:04:df:8b:1b:7c:11:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b46994a35ec829a08901e8600f6debcd97950ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:39:bb:72:ee:82:bc:0c:22:42:1b:a2:43:
da:d6:40:bb:8a:31:0b:fb:d4:7f:1e:0a:03:be:a0:
8d:02:4d:33:f4:7c:94:a3:94:42:b7:94:dc:e1:8c:
1a:9c:c9:05:2d:40:90:59:77:21:73:61:24:57:61:
df:d1:0e:5d:4b:c5:bf:e3:43:d1:1b:15:16:7b:8c:
0f:78:a9:ba:fd:06:5a:bc:4a:6d:75:ae:0d:92:a7:
6f:8c:f9:37:22:bb:c7:71:7a:31:36:e4:97:86:4a:
31:f5:54:25:3a:b5:4a:ac:6a:9e:51:96:38:0e:0e:
10:6e:dc:2e:38:3c:3f:f4:70:5e:11:51:a6:49:0e:
1c:63:d1:1a:78:c6:be:d3:4c:54:96:18:ca:6c:3f:
88:bd:76:5d:fb:d6:69:49:55:70:5e:60:37:27:78:
0f:1c:99:09:78:19:91:78:2c:dd:de:86:8b:ec:cc:
18:80:16:12:cb:4a:b7:74:aa:7f:57:3e:49:f0:ae:
9a:79:3f:2d:fe:fe:33:a0:25:39:29:1e:78:f2:a5:
f5:af:e3:1c:80:4d:96:41:8a:72:d0:2c:0f:cb:85:
0e:09:be:84:55:a9:b1:7b:9c:e6:e8:76:64:b3:cb:
07:72:6d:f0:4e:cd:f9:62:a8:70:12:d3:d2:34:f2:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:94:A3:5E:C8:29:A0:89:01:E8:60:0F:6D:EB:CD:97:95:0E:E0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tGmUo17IKaCJAehgD23rzZeVDuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b6:34:5a:9f:2b:9e:3b:18:25:4c:6f:c7:9c:31:d1:e3:aa:
de:8f:c9:9c:7e:83:f9:72:f5:e6:be:97:1e:d8:d7:2e:f9:a2:
ff:94:31:31:0e:0c:13:f6:6a:74:87:6a:3a:ef:7d:8f:1a:b4:
62:5f:13:0a:95:fe:55:d5:13:e7:18:b4:9f:b3:8c:ee:e8:f4:
a4:f3:85:5e:00:5a:79:1f:ce:20:26:4b:cc:65:7f:db:94:19:
d1:b3:4d:0d:ac:ae:77:51:af:b1:27:eb:00:fc:d2:8a:6c:16:
f3:6f:94:24:8c:98:70:e2:20:5b:d7:42:2c:20:07:57:53:d3:
c2:f5:79:2a:8e:76:be:55:a8:59:d3:42:88:73:aa:5c:c2:a6:
07:a7:72:d6:ae:cc:69:c9:4a:27:2e:42:4f:db:eb:aa:f3:3d:
e1:3b:46:30:0f:b1:f7:f5:9c:6a:11:c7:86:da:b0:48:d4:2d:
63:e1:fc:4f:8c:c4:68:ad:38:85:98:fb:22:8d:09:d9:c8:1d:
5e:78:0d:d7:10:59:cc:67:17:1f:05:7d:e9:5d:e7:d3:88:e2:
a8:9a:2e:d5:fe:9a:86:b2:1f:d3:b6:13:83:ac:aa:fd:23:e6:
45:79:5c:d0:34:39:5e:f4:58:96:2f:dc:34:78:98:d5:a6:b2:
35:39:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 10:16:29 2023 by rpki-client on console-fra.rpki-client.org