Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/SNN6UZJRYMYa4wrrEHnwEHrqezA.roa
File: SNN6UZJRYMYa4wrrEHnwEHrqezA.roa (raw, json)
Hash identifier: s8fUb+fA2KNXJnVKS5ol4lZ75efVFe+fS1ySucnvzzA=
Subject key identifier: 48:D3:7A:51:92:51:60:C6:1A:E3:0A:EB:10:79:F0:10:7A:EA:7B:30
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 018571F9F1581FFA4076AD80D67877FC1847
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/SNN6UZJRYMYa4wrrEHnwEHrqezA.roa
Signing time: Mon 02 Jan 2023 10:14:43 +0000
ROA not before: Mon 02 Jan 2023 10:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58265
IP address blocks: 193.169.184.0/23 maxlen: 23
185.200.224.0/22 maxlen: 22
193.138.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:f1:58:1f:fa:40:76:ad:80:d6:78:77:fc:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Jan 2 10:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48d37a51925160c61ae30aeb1079f0107aea7b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:9c:68:95:eb:19:d0:30:0f:3c:e2:ee:c7:
5f:da:f1:04:e2:a8:63:60:e0:35:c3:8c:9e:18:a3:
0a:c6:b7:fc:3b:97:4f:0e:3d:48:42:93:f0:c3:28:
e0:49:10:e6:6c:a8:aa:3b:5f:a3:c6:3c:17:59:76:
5b:0d:8c:41:ab:11:8a:4a:57:38:9e:9c:ff:bf:e3:
ca:4e:5d:46:4b:bc:2f:74:d9:7b:14:a7:83:d9:ec:
31:c0:e6:05:7e:3a:f0:c9:90:e7:db:cf:90:f3:29:
12:bb:e4:54:1d:2a:40:32:35:ee:d5:1c:18:d9:b6:
bc:7e:96:34:c1:b6:a0:be:62:93:0a:71:85:19:d2:
2b:72:12:d7:22:8b:3c:e0:69:45:bc:2f:db:0f:02:
31:31:67:3d:c0:2d:23:18:7c:fe:3d:9f:0e:61:48:
4a:77:32:0f:36:b5:4d:21:b3:9f:6d:6d:5f:2c:47:
a0:48:75:27:1a:2c:46:43:21:4a:4d:e5:60:5d:93:
1a:73:29:c6:0c:97:29:78:b4:70:49:a2:e5:bb:56:
1c:f5:6d:33:01:36:8e:9b:8b:92:e0:4e:da:96:1e:
73:66:f0:5a:19:0d:2e:2f:27:42:6f:3f:cd:ef:d7:
5b:67:9f:56:47:d1:16:a0:1e:b1:28:df:f7:9e:23:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:7A:51:92:51:60:C6:1A:E3:0A:EB:10:79:F0:10:7A:EA:7B:30
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/SNN6UZJRYMYa4wrrEHnwEHrqezA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.224.0/22
193.138.156.0/22
193.169.184.0/23
Signature Algorithm: sha256WithRSAEncryption
61:bf:92:4d:99:ee:f4:54:6a:e8:7b:c1:b9:26:93:b7:29:06:
ed:57:a9:93:9a:4e:5c:42:d6:ad:13:15:50:ad:ba:e0:10:2d:
28:77:63:21:c1:2e:e0:79:24:b5:5c:a1:c5:64:c1:1f:2c:5b:
70:c9:5e:3e:75:32:17:a2:09:54:27:91:e1:50:8c:c2:ab:dd:
a3:f6:80:25:a7:9a:04:08:4f:e0:24:f5:af:cd:7a:00:00:36:
76:55:cb:96:78:fb:27:b5:14:f8:10:9a:63:f6:06:65:c1:bd:
ea:57:87:af:c8:3f:4d:19:09:74:73:1b:46:95:3b:d8:16:a8:
a5:6d:b9:ca:da:3a:ac:d6:a9:ec:0b:f1:4e:f4:96:8a:89:47:
2c:d0:9a:72:3c:99:3d:cd:48:95:57:db:f6:32:64:28:1e:bc:
6e:26:9d:f7:46:f0:1a:2c:b9:bb:43:cf:00:a1:6c:32:f5:6d:
3b:7a:d2:4d:9d:b9:57:42:ae:96:df:86:3a:4d:1d:75:5a:0a:
63:f4:e1:e7:36:6a:6c:66:40:2d:94:8a:44:b2:ab:16:07:4a:
68:87:06:05:e3:1b:e9:9f:1c:08:34:f4:1f:84:ec:2f:bb:2d:
fd:d7:46:ca:9a:3a:54:b2:77:e4:4b:d2:ba:50:6c:58:5a:7a:
1d:c3:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:03 2024 by rpki-client on console-ams.rpki-client.org