Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/6I3EgvX0-_WvQz0gKRJICv2Xk3w.roa
File: 6I3EgvX0-_WvQz0gKRJICv2Xk3w.roa (raw, json)
Hash identifier: 36fGG7qYjeCrQz3furr+8No0a5h174yVZnEjLZcYGmg=
Subject key identifier: E8:8D:C4:82:F5:F4:FB:F5:AF:43:3D:20:29:12:48:0A:FD:97:93:7C
Certificate issuer: /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial: 01856CB82B7B983EA1E599173D978D27A25F
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/6I3EgvX0-_WvQz0gKRJICv2Xk3w.roa
Signing time: Sun 01 Jan 2023 09:44:47 +0000
ROA not before: Sun 01 Jan 2023 09:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58059
IP address blocks: 185.12.109.0/24 maxlen: 24
185.12.110.0/24 maxlen: 24
185.12.108.0/24 maxlen: 24
185.12.111.0/24 maxlen: 24
185.154.130.0/24 maxlen: 24
185.154.128.0/24 maxlen: 24
185.154.131.0/24 maxlen: 24
185.154.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:2b:7b:98:3e:a1:e5:99:17:3d:97:8d:27:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
Validity
Not Before: Jan 1 09:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e88dc482f5f4fbf5af433d202912480afd97937c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:e2:a2:69:12:84:a0:8f:20:a0:3f:05:8f:
00:4c:01:95:c4:1d:85:e7:a2:6a:4d:d5:9e:d8:82:
68:7c:18:b8:e4:c1:bd:ad:df:aa:06:68:83:55:72:
7a:bc:b6:dd:cc:e4:d7:fa:e3:97:40:75:6b:e3:43:
64:c6:02:e3:e7:11:1a:45:c8:a3:1f:21:b6:e4:2e:
7e:8e:de:dc:ab:43:2e:68:17:22:b9:07:5d:10:a2:
a6:6c:40:46:31:52:90:33:5e:87:c7:0c:41:25:b3:
21:97:5a:5a:f6:c8:24:04:88:ea:f9:6b:86:fc:73:
23:92:6e:c3:46:ff:7c:f4:57:4c:20:91:6a:f6:26:
36:c5:b1:2e:ff:de:97:61:71:35:32:bd:3e:a4:5d:
70:44:90:cb:28:d1:e0:c9:52:a3:63:42:43:a9:44:
4e:c2:6d:24:af:08:2f:33:e4:79:5b:59:8c:a2:31:
79:cc:df:59:ba:62:2c:00:0c:27:65:0a:3a:0d:ef:
3e:b4:c7:da:6f:d7:08:f2:68:0a:37:65:32:0d:40:
0d:fb:1b:e8:85:c1:0e:e4:ab:c4:fe:35:b6:75:c9:
59:82:6d:5b:7d:45:f3:e4:cf:f4:57:22:93:ab:cd:
a6:2f:c0:6f:26:aa:60:b2:f2:4b:6e:7e:94:74:0a:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8D:C4:82:F5:F4:FB:F5:AF:43:3D:20:29:12:48:0A:FD:97:93:7C
X509v3 Authority Key Identifier:
keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/6I3EgvX0-_WvQz0gKRJICv2Xk3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.108.0/22
185.154.128.0/22
Signature Algorithm: sha256WithRSAEncryption
19:d1:9f:63:0c:57:d3:a3:4d:b5:a0:37:9a:5a:26:e5:be:47:
ad:2a:98:f3:7e:93:6b:1e:82:5b:21:fe:6f:49:9e:b2:33:68:
a2:c0:47:48:66:e6:2c:d1:56:3d:28:f0:ce:a0:3b:9c:c4:71:
1d:b1:6d:26:0c:56:fe:b0:c4:b1:ec:cd:80:e7:90:f7:5f:06:
59:ef:1e:49:9b:dc:2f:39:a7:28:af:cb:62:81:9f:e2:36:d6:
cc:40:b9:4b:2c:72:7b:b0:69:79:f8:f4:eb:af:4c:99:30:3f:
a7:cc:44:fd:4d:e8:db:8b:96:fd:99:da:e1:50:2b:01:cf:f2:
ec:19:4c:a3:d1:06:0c:9f:d4:a8:f6:2a:5a:db:4f:63:b2:b9:
03:49:26:d8:0e:91:2e:51:8b:d3:ae:34:a3:de:59:97:96:6a:
e4:77:6a:1e:c8:e9:f8:06:2e:7a:7a:86:bc:80:7c:fb:5e:d0:
76:83:dc:bd:a7:56:56:65:26:7e:85:8c:68:2b:77:82:cd:b0:
0b:4c:cf:ed:72:24:66:67:94:8b:72:4a:44:ec:f2:ba:ad:d7:
15:f4:70:50:4c:db:79:a7:6a:6b:f9:92:5f:76:57:23:69:6e:
a8:90:df:96:eb:48:2e:79:55:41:bb:b9:74:ff:38:04:ac:74:
2a:e6:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:04 2024 by rpki-client on console-fra.rpki-client.org