Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/6BLWvNU1RboKHpIYMi6ApBSHuI4.roa
File: 6BLWvNU1RboKHpIYMi6ApBSHuI4.roa (raw, json)
Hash identifier: QAxcAGKl7u81pqGx1jbSLthWx2ZLgBg7yE/Kz/wSXy0=
Subject key identifier: E8:12:D6:BC:D5:35:45:BA:0A:1E:92:18:32:2E:80:A4:14:87:B8:8E
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 018570FBC04B97998CF4F7E2A219D299B4A6
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/6BLWvNU1RboKHpIYMi6ApBSHuI4.roa
Signing time: Mon 02 Jan 2023 05:37:05 +0000
ROA not before: Mon 02 Jan 2023 05:37:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205258
IP address blocks: 185.104.216.0/22 maxlen: 24
185.24.232.0/22 maxlen: 24
185.24.234.0/24 maxlen: 24
2a04:2e06::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c0:4b:97:99:8c:f4:f7:e2:a2:19:d2:99:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Jan 2 05:37:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e812d6bcd53545ba0a1e9218322e80a41487b88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:b5:42:d8:26:00:90:8a:24:13:f1:25:dc:
8a:2b:8e:a0:e4:47:23:c2:61:a0:f1:23:03:e7:38:
e7:71:88:8b:90:89:0f:9e:42:2e:35:b3:e6:e8:b2:
38:88:d0:02:7a:f0:03:72:1f:7e:57:ca:78:03:8b:
ea:60:ed:05:9b:65:7a:bb:4d:a3:aa:a5:1f:27:bb:
74:07:a8:30:ca:bd:0d:c2:ff:10:e9:50:d6:d0:e6:
da:78:7f:1f:c2:7e:ae:53:40:ce:8c:79:f3:2f:b1:
94:92:66:34:10:75:ca:ee:01:e0:89:fd:d4:70:b5:
48:38:91:86:62:cc:2d:d2:77:04:d5:5d:af:4c:83:
0d:93:1d:1e:39:7d:9b:12:84:25:69:7e:08:54:b9:
62:c5:97:64:7e:65:9e:20:4a:e8:ea:74:3e:89:ab:
12:3b:c9:b9:26:62:e8:fa:8e:59:67:d4:8b:2f:76:
bb:d2:35:e2:e5:52:83:ba:47:16:ec:b4:29:60:19:
29:42:15:bc:ba:10:e8:2c:f6:4d:fd:ee:50:a2:25:
21:c6:9a:8e:b7:7e:2a:b9:46:a9:81:53:b1:9e:5d:
f3:ad:cc:fa:b4:f1:d8:31:05:4a:35:17:b1:30:92:
55:ef:a6:8c:92:04:59:51:5e:bf:5e:ff:f6:88:a0:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:D6:BC:D5:35:45:BA:0A:1E:92:18:32:2E:80:A4:14:87:B8:8E
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/6BLWvNU1RboKHpIYMi6ApBSHuI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.232.0/22
185.104.216.0/22
IPv6:
2a04:2e06::/32
Signature Algorithm: sha256WithRSAEncryption
ae:4c:3a:ae:e2:09:97:e9:28:78:d1:ef:18:e4:a6:17:06:18:
12:a5:97:fb:6d:d9:e4:b2:d5:27:ac:77:0a:d0:8b:01:10:de:
45:0c:b0:07:31:f3:ca:9a:ed:9e:fb:03:2f:f4:ec:8c:2f:89:
52:4a:d0:b2:e8:c6:4d:aa:59:76:85:22:4e:46:58:cf:0c:62:
8b:81:d0:c0:72:d4:34:ee:6e:a2:93:54:49:b8:a6:44:c3:93:
64:b9:0d:29:0b:6a:b2:36:74:50:14:b8:86:23:8b:34:cb:a5:
3e:28:1b:b0:7e:fc:cf:b9:05:02:a7:9e:1c:be:12:44:9f:6a:
cb:24:75:0f:d8:19:dd:26:04:ac:0c:01:33:f4:33:bb:85:97:
39:bd:ad:12:8e:c5:e1:c1:69:21:e3:65:44:b7:61:ed:fb:f1:
01:e0:51:18:a6:0d:47:34:50:f7:bf:58:30:f2:a0:6a:e5:c7:
72:2b:54:25:07:5e:db:cc:4d:96:34:95:22:45:4a:43:90:59:
74:d3:43:6d:46:da:60:b8:23:e2:3d:18:24:a6:5b:7c:7e:ae:
c9:4d:3a:57:e1:19:07:f9:96:f0:ca:2a:8f:e6:44:a1:99:4f:
d1:15:cd:89:53:ae:4b:6f:72:e0:aa:0d:4a:77:68:77:74:b9:
f0:da:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org