Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/S_g6XRi6M_uC5E2PzLIttkVs2Tk.roa
File: S_g6XRi6M_uC5E2PzLIttkVs2Tk.roa (raw, json)
Hash identifier: WnL6r33VBewvVuziGnOSe6h8VtzHbx5wwxGDAerWBCA=
Subject key identifier: 4B:F8:3A:5D:18:BA:33:FB:82:E4:4D:8F:CC:B2:2D:B6:45:6C:D9:39
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 018570C2CCD639B4A17C8384A73497307A80
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/S_g6XRi6M_uC5E2PzLIttkVs2Tk.roa
Signing time: Mon 02 Jan 2023 04:34:52 +0000
ROA not before: Mon 02 Jan 2023 04:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 188.116.35.0/24 maxlen: 24
185.206.120.0/24 maxlen: 24
2a10:a200::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:cc:d6:39:b4:a1:7c:83:84:a7:34:97:30:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jan 2 04:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf83a5d18ba33fb82e44d8fccb22db6456cd939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:61:55:f9:d8:25:a8:d1:c2:1f:f2:65:24:
77:83:e7:c3:92:df:12:ce:7e:ed:99:0e:8a:74:b4:
7b:fa:db:ef:de:5f:fa:7e:77:68:f6:1e:6b:13:e7:
3e:fa:ef:60:5c:da:8b:78:48:76:7e:3d:4f:ce:0a:
6e:ac:b7:94:f5:87:b5:1c:2c:93:f0:e1:3a:15:20:
0c:f2:d5:35:f6:70:95:04:d6:e2:bf:9e:af:dc:eb:
7b:83:a8:1a:6d:43:83:00:48:66:a0:88:ec:65:66:
9d:ef:2a:0e:10:d0:f6:ba:aa:b2:86:46:94:2f:5b:
5d:ba:9d:53:58:e0:93:66:f8:dc:3b:12:48:5a:66:
10:68:3f:13:7b:dd:b4:89:d0:c5:bd:ba:78:cf:19:
21:e0:68:e6:eb:af:0f:b0:e2:b2:da:0b:14:4d:0c:
7b:d4:6c:e3:69:89:73:0b:5b:56:26:d5:98:94:94:
fe:6c:d1:11:9d:55:b8:62:a3:9b:63:ec:31:91:64:
bd:a0:e2:41:8c:14:fd:8e:0b:8e:b1:5b:ce:68:71:
66:fe:0e:7e:49:33:70:0f:74:a6:53:5a:bb:1c:05:
29:df:1a:21:bd:e2:ae:60:3b:15:b2:22:49:64:d8:
7f:cc:b7:28:ed:6f:bc:35:92:a9:f4:f5:07:b3:e1:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:3A:5D:18:BA:33:FB:82:E4:4D:8F:CC:B2:2D:B6:45:6C:D9:39
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/S_g6XRi6M_uC5E2PzLIttkVs2Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.120.0/24
188.116.35.0/24
IPv6:
2a10:a200::/48
Signature Algorithm: sha256WithRSAEncryption
4b:50:4a:d1:3b:e1:6a:0b:f1:db:c5:04:c0:4d:f9:2a:b2:ea:
81:3b:1f:17:af:74:ee:30:bd:b6:e9:3c:16:4f:3e:7f:73:99:
82:57:12:d4:72:4a:18:c9:f8:cf:ba:79:54:4c:92:a1:d3:4e:
24:9b:93:35:e9:e6:42:5b:3e:7c:6b:fb:71:b5:4b:17:e7:71:
86:55:2d:e0:b5:07:fc:04:b2:51:73:6d:19:90:a3:52:12:80:
4a:12:51:52:17:19:71:a7:0a:ff:10:76:ff:e9:cc:45:e5:fb:
6b:2e:d5:7f:23:43:3c:66:18:a8:61:5a:69:a9:f3:06:a3:a8:
0a:b0:f1:b7:cb:22:64:59:ed:f0:2c:f1:ce:e3:d7:00:43:c2:
8d:4e:31:5a:06:79:2a:e3:35:9f:c3:57:93:ed:4f:68:b8:e0:
e5:58:cf:68:71:7a:01:f7:06:aa:5d:43:a0:71:61:09:04:49:
03:b6:a6:fe:e7:b6:42:45:35:e6:f5:ea:05:0b:21:e7:fd:e5:
9b:4c:fc:37:22:51:d8:3c:39:10:c5:b0:4b:ae:b2:bf:d9:53:
92:be:5d:29:5d:08:27:ce:6b:ad:9e:70:45:6f:b7:ab:fc:b7:
55:fa:11:90:9b:58:7c:f2:5a:d6:bf:5f:07:ea:2b:ba:64:6b:
d3:c4:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:48 2024 by rpki-client on console-fra.rpki-client.org