Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z6K0JCggXp_KnLk4gOdFzL_MKN8.roa
File: z6K0JCggXp_KnLk4gOdFzL_MKN8.roa (raw, json)
Hash identifier: X6JPULd1NduMFSPDsCbQw1kmSzBt0qjEJb38bzJSgLk=
Subject key identifier: CF:A2:B4:24:28:20:5E:9F:CA:9C:B9:38:80:E7:45:CC:BF:CC:28:DF
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5409E0059CC0E777AB986A3A48A8A7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z6K0JCggXp_KnLk4gOdFzL_MKN8.roa
Signing time: Sun 01 Jan 2023 07:55:24 +0000
ROA not before: Sun 01 Jan 2023 07:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200325
IP address blocks: 194.156.156.0/24 maxlen: 24
185.190.83.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:09:e0:05:9c:c0:e7:77:ab:98:6a:3a:48:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa2b42428205e9fca9cb93880e745ccbfcc28df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:af:2e:e3:71:3d:83:4c:73:d6:a7:df:77:
7a:6d:55:e8:0a:cc:06:aa:03:d2:bc:78:9f:ed:93:
6e:bb:02:8c:16:a4:6b:dc:2a:8e:47:65:aa:b6:f4:
d3:26:18:fd:7a:73:7f:c1:f6:cc:36:19:b9:6f:0f:
a8:e4:fd:70:d0:d0:7b:0e:3d:a4:b5:30:d8:70:42:
e1:80:c7:a1:82:de:f9:48:67:0f:e9:be:10:6d:8b:
ee:17:77:4c:11:3d:35:c7:13:85:db:60:5f:6c:6a:
6e:8f:26:d8:0e:66:a5:6f:af:27:01:c1:be:af:d9:
9a:d5:ac:a9:07:50:5d:65:fe:ff:d0:0e:e2:f7:19:
df:48:3d:47:c7:6a:46:b1:3c:a1:69:c5:b9:97:58:
5a:79:48:78:35:3d:9d:4a:8b:ae:da:09:01:6f:3c:
53:4a:38:db:4b:24:de:15:f4:48:a1:da:2a:d1:02:
04:81:7e:a0:b6:7a:5b:d7:d9:1b:71:fe:5c:88:98:
24:ee:48:b4:e1:95:65:8f:f8:86:93:a8:29:84:5a:
8e:3d:2a:91:a2:54:a9:a0:36:8c:43:aa:65:3d:f0:
7c:61:fd:1f:bf:f7:ed:15:ee:a5:61:49:03:b4:12:
4f:17:bf:29:9c:4f:53:f4:aa:10:6b:d5:4d:11:d5:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:B4:24:28:20:5E:9F:CA:9C:B9:38:80:E7:45:CC:BF:CC:28:DF
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z6K0JCggXp_KnLk4gOdFzL_MKN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.83.0/24
194.156.156.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3b:7d:58:cf:9d:f9:20:0a:bc:a1:45:3e:a4:8b:75:20:e5:
c9:b5:d7:99:39:2a:6a:55:e0:76:93:a4:a9:bd:26:cd:63:81:
b0:c5:a3:6b:d5:14:cb:2a:85:53:c2:16:ae:68:86:ad:cb:58:
82:5d:a4:f9:5d:30:fb:71:83:8b:d6:43:f1:06:c0:eb:70:4c:
fb:27:09:20:9e:de:61:47:11:bd:4f:d3:13:eb:4b:26:d2:fd:
3e:7c:25:a8:d7:d6:2d:25:30:33:f0:78:ea:a8:57:94:7d:18:
b7:c8:d3:e7:92:88:91:4a:31:e6:9c:52:88:16:c1:c4:dc:3e:
fc:16:24:d4:9c:c2:de:fd:80:f2:db:f0:81:07:b4:fe:ad:3b:
28:7d:cc:f0:ae:46:be:39:a9:eb:87:c5:51:19:87:8c:b0:81:
f4:80:87:9c:f8:3e:16:6e:f2:8a:09:8a:29:1d:be:ad:9f:84:
f3:1c:6e:ac:ab:82:f6:2b:eb:c4:94:74:56:f0:bd:52:f7:7d:
c5:2d:81:4e:18:46:33:66:73:e0:05:01:8e:73:99:ad:01:3d:
fa:1e:26:f7:ae:c7:c8:42:da:72:49:7d:1c:40:cb:0e:5f:75:
4c:89:ac:7c:4c:06:47:2b:4b:11:b2:bd:18:82:b8:67:74:85:
6d:9c:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org