Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/6l8454cX3DZHL7cJvzr6-Sq4aEs.roa
File: 6l8454cX3DZHL7cJvzr6-Sq4aEs.roa (raw, json)
Hash identifier: yKBAEclDZjxXsv3n/k2azq07Dd6anz2jm9eNoioOaY4=
Subject key identifier: EA:5F:38:E7:87:17:DC:36:47:2F:B7:09:BF:3A:FA:F9:2A:B8:68:4B
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 0185701546D6B46417D651293F51248F1AB7
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/6l8454cX3DZHL7cJvzr6-Sq4aEs.roa
Signing time: Mon 02 Jan 2023 01:25:20 +0000
ROA not before: Mon 02 Jan 2023 01:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38987
IP address blocks: 185.13.184.0/22 maxlen: 22
62.133.128.0/19 maxlen: 19
37.72.120.0/21 maxlen: 21
2a02:22e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:46:d6:b4:64:17:d6:51:29:3f:51:24:8f:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Jan 2 01:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea5f38e78717dc36472fb709bf3afaf92ab8684b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:78:90:70:71:9e:37:96:d8:16:b8:93:c5:
da:9b:fe:88:66:e1:74:34:f9:2b:4b:32:e4:aa:c7:
dc:01:72:c4:d8:5b:05:44:4f:47:3b:f6:d1:b9:18:
67:47:b9:74:f4:82:3b:39:7b:b2:d8:33:6c:7b:13:
cb:b8:e4:b5:c9:a6:cb:fb:6a:69:86:c3:19:93:11:
0d:02:4c:90:b5:50:4f:0e:22:84:b1:ed:d9:d4:e0:
21:6c:7b:95:32:11:5e:a4:13:fe:46:73:75:04:a4:
e9:99:cd:02:46:ea:77:59:23:5c:3b:70:bb:f8:7b:
c0:92:36:e6:bd:11:83:61:1e:7b:da:85:e9:57:8a:
f6:1a:79:4b:ac:ac:51:78:89:88:cc:e0:c1:91:20:
8d:a7:89:77:86:29:99:47:23:28:df:a7:55:d9:36:
53:d1:27:51:50:35:4c:eb:7d:22:41:69:ef:72:f4:
c6:04:2d:37:70:f5:dc:7b:b9:73:8a:92:cd:59:1e:
5c:2a:76:a0:4b:6c:55:dc:6d:56:b9:86:1e:8c:86:
04:16:a9:36:e2:d5:8b:77:26:c0:cb:24:8c:46:47:
3b:fe:f7:c2:86:b2:f2:4a:5c:3c:9a:64:b8:00:4d:
df:7a:d1:ff:77:e2:5d:51:ca:1d:4c:40:bd:ac:f8:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:38:E7:87:17:DC:36:47:2F:B7:09:BF:3A:FA:F9:2A:B8:68:4B
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/6l8454cX3DZHL7cJvzr6-Sq4aEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.120.0/21
62.133.128.0/19
185.13.184.0/22
IPv6:
2a02:22e0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:ed:09:5b:72:51:90:83:78:3e:5f:c1:4a:05:77:ee:f8:4b:
f3:1f:53:10:0f:db:27:20:9c:57:4b:b6:bc:6c:ab:29:0a:cc:
6d:5c:86:d6:ca:56:61:66:58:87:2f:be:52:1a:9b:48:ff:63:
49:c7:56:25:7f:00:70:a6:65:9f:19:03:54:8e:cc:01:19:94:
e4:d5:bc:c8:c5:48:73:30:9f:7f:32:57:f3:cc:69:d2:48:9e:
54:16:40:58:e7:76:8f:56:94:11:9f:fe:11:a0:e1:32:39:65:
61:ec:c3:45:c6:39:d7:65:c8:95:c1:3d:d2:06:e9:4a:52:4d:
5d:d5:d1:63:b7:9b:4d:8b:34:1e:5a:da:55:2f:46:a4:c0:4b:
ec:8f:98:65:6d:87:50:5a:12:f8:0a:75:1d:52:aa:0b:b6:95:
42:e2:4e:7d:7a:88:da:e7:75:a5:0f:92:e1:55:11:96:ff:a7:
03:2d:8e:4a:48:68:59:1a:d0:a3:16:46:50:16:ba:b5:dc:31:
de:00:66:73:40:ad:dd:e7:87:e4:44:4f:41:e1:f5:7e:17:a5:
98:10:c7:6d:93:ca:74:cd:f5:d4:bd:ab:c2:0b:12:36:92:b5:
5c:78:35:33:d4:45:3c:47:ca:59:b5:3c:a7:3f:50:d5:ad:6d:
61:f6:37:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org