Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/X6vRD087qYhTY-oQdVJi51RtFEI.roa
File: X6vRD087qYhTY-oQdVJi51RtFEI.roa (raw, json)
Hash identifier: XfDlCR4b+SbvZaD8dgR2OLkZE+5N6ijterkC1eu4ZCY=
Subject key identifier: 5F:AB:D1:0F:4F:3B:A9:88:53:63:EA:10:75:52:62:E7:54:6D:14:42
Certificate issuer: /CN=f6f4febab33760475755755122b9f20262391b92
Certificate serial: 01857230DA10A254565ECD9DFE8FE2D0367D
Authority key identifier: F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/X6vRD087qYhTY-oQdVJi51RtFEI.roa
Signing time: Mon 02 Jan 2023 11:14:42 +0000
ROA not before: Mon 02 Jan 2023 11:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.249.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:da:10:a2:54:56:5e:cd:9d:fe:8f:e2:d0:36:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f4febab33760475755755122b9f20262391b92
Validity
Not Before: Jan 2 11:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fabd10f4f3ba9885363ea10755262e7546d1442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:4c:30:24:10:03:fe:93:60:a1:a1:76:84:
13:e5:9e:ad:e4:ed:32:cc:91:75:61:ff:57:96:a8:
61:af:d0:18:97:29:ee:ae:c2:6d:d8:fc:d8:ab:a3:
29:65:06:db:ee:05:62:3c:86:d6:eb:38:ae:a3:1f:
76:2c:b6:ca:25:de:28:a5:16:c1:6f:7b:a3:59:1b:
1c:47:33:cb:3a:b4:bb:c9:0b:00:0c:4e:09:1e:9a:
38:9b:ad:4c:0d:73:65:1b:7e:93:21:70:12:79:e0:
41:e3:db:d8:e3:c9:1e:89:54:a0:ae:d1:b1:22:4f:
73:9c:98:c3:11:b8:b6:c0:c6:0c:e7:e9:c3:aa:07:
8e:a7:fe:d5:0f:3a:6c:01:e3:d8:f6:68:7b:98:1f:
b2:1c:24:38:9d:92:cd:5c:b0:0d:76:41:b0:10:6d:
08:d6:9e:8b:59:cb:48:45:7b:f0:d0:e3:d5:ca:05:
bb:c1:2a:ed:31:08:01:e0:fd:ed:d7:04:5d:e3:ec:
c2:2c:b7:6a:0f:b2:97:41:10:d9:e8:42:4e:64:6d:
4e:67:77:6c:49:47:95:d6:6a:6d:3f:d4:8b:99:a5:
41:3a:ae:a8:78:bc:56:0a:cc:c3:61:d3:2f:74:8e:
83:81:16:dc:10:b2:37:07:7f:ae:af:ed:e0:70:13:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AB:D1:0F:4F:3B:A9:88:53:63:EA:10:75:52:62:E7:54:6D:14:42
X509v3 Authority Key Identifier:
keyid:F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/X6vRD087qYhTY-oQdVJi51RtFEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:9a:62:71:73:b8:0a:2e:24:47:38:99:b6:1d:be:4d:a3:d5:
6a:36:ba:ae:08:b3:ca:32:fb:f7:66:fa:cc:ef:c9:cf:c5:ac:
2d:27:1a:5f:ac:47:ba:af:82:89:98:52:ff:da:c0:e4:c6:63:
f5:a5:18:de:6d:6c:74:26:ca:bf:74:f6:55:35:17:b9:f9:24:
36:0d:12:d4:49:18:37:8e:47:3f:33:a2:e6:8e:3f:2f:8a:24:
b6:36:94:8d:ee:db:62:5c:94:08:23:1f:c1:b9:c3:da:5e:0f:
e6:5b:fd:95:72:6c:54:af:82:ae:53:b7:74:0f:15:d5:f1:4f:
39:1b:a5:28:89:bc:44:c4:3a:8b:f3:6b:8d:e9:13:9b:26:a4:
4a:9a:8f:dc:e0:bd:78:e8:97:bf:b1:dc:c4:50:cf:c2:18:9c:
39:c2:6f:77:ed:db:9e:4c:db:77:5e:e8:a1:39:c2:a1:30:35:
b6:72:64:24:7b:4b:d5:69:da:8f:e8:43:89:98:32:b2:3f:01:
e5:3c:5f:42:d6:04:ae:07:d1:a7:af:a9:47:b8:72:bc:cc:ef:
62:66:81:5f:a4:ea:07:4c:cb:d3:35:8c:1e:a8:5e:83:fd:4d:
27:b0:7e:d3:ed:46:c9:51:eb:25:37:ec:f1:8b:f1:16:47:ff:
28:69:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:11 2024 by rpki-client on console-fra.rpki-client.org