Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6P3Hhqp8g5K51zz8WkzvVQKp2co.roa
File: 6P3Hhqp8g5K51zz8WkzvVQKp2co.roa (raw, json)
Hash identifier: L2a38L2tg5N337yL9OWej9uPeXb1Ij3ej8q7OiZ2lNo=
Subject key identifier: E8:FD:C7:86:AA:7C:83:92:B9:D7:3C:FC:5A:4C:EF:55:02:A9:D9:CA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFDA24D5DDB481C5325C04FE08C33
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6P3Hhqp8g5K51zz8WkzvVQKp2co.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197308
IP address blocks: 192.121.252.0/24 maxlen: 24
192.36.169.0/24 maxlen: 24
192.36.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fd:a2:4d:5d:db:48:1c:53:25:c0:4f:e0:8c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8fdc786aa7c8392b9d73cfc5a4cef5502a9d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:5c:f1:e4:68:6a:17:e5:8e:87:16:e9:de:
cb:52:c1:c4:6f:73:a4:02:44:66:24:65:34:a8:7f:
bb:b5:59:01:ff:f3:eb:f7:d1:d9:2c:6a:c3:fc:69:
04:58:74:6d:57:02:b6:ad:c5:e2:7e:12:89:9f:ca:
3b:1d:2c:18:53:05:4f:69:3e:1a:ed:99:1b:d7:37:
1e:58:e0:cc:7f:2b:ef:f6:41:10:21:56:89:17:f6:
29:6a:d5:3e:a7:24:6b:95:9e:51:1b:ec:fc:50:65:
bf:d7:a2:07:6d:26:2d:40:3e:13:bb:e4:38:84:dc:
70:93:da:80:07:3a:f8:3c:94:6c:43:d7:14:8d:1f:
ad:7e:d0:4a:3a:35:c5:a8:a2:61:30:47:56:6e:41:
dc:c3:fe:c3:0d:e8:01:d3:6d:9a:92:04:da:58:db:
95:6d:ac:32:c7:ed:59:7e:4a:6b:12:b6:55:55:1d:
57:b6:94:a7:13:3a:a4:2e:38:f8:79:fb:2d:89:e4:
3d:d8:f8:60:18:9f:37:78:cc:8c:45:2a:ea:ea:4d:
54:53:25:8b:da:66:35:e8:5d:26:08:9c:c2:c0:67:
2c:a1:3a:66:b3:f1:62:06:74:ba:69:89:83:64:f5:
8a:73:a1:87:5e:35:b9:c8:e1:59:76:36:e2:ed:a8:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:C7:86:AA:7C:83:92:B9:D7:3C:FC:5A:4C:EF:55:02:A9:D9:CA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6P3Hhqp8g5K51zz8WkzvVQKp2co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.169.0/24
192.36.199.0/24
192.121.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5d:3d:87:31:bc:33:b1:6f:94:b7:7d:33:9f:11:a6:e6:18:
cf:ed:f5:28:d4:cb:36:5a:34:dd:7e:c3:41:0c:f2:3e:09:10:
45:21:bf:12:de:20:82:df:fe:e2:ee:f7:fc:3e:e5:9a:31:74:
7e:56:8c:9b:4c:0f:87:67:1d:04:4f:47:cd:d7:c6:7c:3b:58:
e2:74:42:5c:0f:34:dc:4d:28:35:54:d4:b4:11:92:1d:50:57:
f7:30:9a:9e:80:e6:c8:b3:2a:33:35:fb:73:27:0e:20:8e:21:
f5:fb:86:ae:48:34:39:45:ad:aa:e2:c6:34:e4:af:19:7c:d3:
26:b7:54:73:a0:00:88:c6:ac:12:6c:bf:a1:f8:ec:82:f9:cb:
c6:6b:f5:27:92:98:5b:07:d5:fe:8e:35:5e:2b:0c:35:99:23:
48:41:3e:7b:68:80:0b:cd:13:5b:68:a5:bc:ab:8a:01:28:a3:
f8:f8:23:bd:14:29:5d:1a:47:52:27:2c:df:95:01:3f:4f:4e:
70:f5:98:3c:21:1b:bd:dc:9a:60:8b:50:9e:71:7f:15:a4:d6:
f7:ee:2c:19:30:bf:fd:d5:ed:81:ce:19:5d:a2:4a:20:04:3b:
2e:4e:c8:07:88:13:27:a3:d6:c0:d5:fe:23:59:c8:3d:5d:2d:
c8:63:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org