Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/xm6mNC9EvhqZUsFhmsGQ-4xojwY.roa
File: xm6mNC9EvhqZUsFhmsGQ-4xojwY.roa (raw, json)
Hash identifier: faWmXmEVKQbkeIukOhvyQ0K8DBpbt9F5QBAwxqUr0pU=
Subject key identifier: C6:6E:A6:34:2F:44:BE:1A:99:52:C1:61:9A:C1:90:FB:8C:68:8F:06
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01859BC2E77C178C4031B4C7DAF309960A95
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/xm6mNC9EvhqZUsFhmsGQ-4xojwY.roa
Signing time: Tue 10 Jan 2023 12:58:39 +0000
ROA not before: Tue 10 Jan 2023 12:58:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57888
IP address blocks: 94.250.116.0/22 maxlen: 22
94.250.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:c2:e7:7c:17:8c:40:31:b4:c7:da:f3:09:96:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 10 12:58:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c66ea6342f44be1a9952c1619ac190fb8c688f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4f:07:18:98:8b:fc:36:04:2d:49:77:cf:52:
d3:9d:e5:23:e7:88:07:41:67:52:fd:4b:eb:a8:9f:
a9:c5:7e:bc:08:61:65:24:f3:17:4a:3b:2b:70:59:
71:4a:30:77:0f:b9:cb:db:bc:51:dc:59:dd:b8:74:
f0:fc:07:5a:fe:73:a8:4f:9b:d1:2f:66:7c:6f:75:
c6:1a:e0:51:62:5e:13:5a:7d:eb:5a:aa:b1:62:9e:
89:9b:20:00:84:67:35:b2:16:12:ed:8d:84:8b:95:
02:7f:c9:03:37:45:9a:c2:5c:eb:25:01:5b:4c:0e:
98:a4:fc:f2:1c:56:40:26:61:f4:a9:52:8f:02:25:
73:54:7f:eb:88:b2:04:dc:af:6e:c7:e5:03:34:42:
a0:a7:d3:9c:42:f3:ce:04:a2:6d:e0:0d:59:47:35:
f9:f3:91:98:57:35:b9:7d:0f:28:da:62:ec:6d:7c:
31:56:dd:65:09:a6:0a:1a:a5:53:dc:5f:e6:10:37:
fc:17:44:02:3d:90:9b:76:53:04:4a:af:7a:bb:12:
de:e0:ae:15:ff:83:a2:28:71:76:bf:ce:7d:7a:3c:
5e:fd:c8:3b:3c:82:a6:b7:ee:dd:68:19:63:67:dd:
41:11:b3:da:53:ff:90:9f:98:2a:34:6d:2e:bc:f6:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:A6:34:2F:44:BE:1A:99:52:C1:61:9A:C1:90:FB:8C:68:8F:06
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/xm6mNC9EvhqZUsFhmsGQ-4xojwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.116.0-94.250.120.255
Signature Algorithm: sha256WithRSAEncryption
74:3c:a6:b5:f1:c3:84:1c:84:7d:d8:db:21:95:ef:06:7d:a8:
98:f9:2f:a1:86:82:96:c6:77:7a:e5:6c:99:20:e5:15:6a:a0:
fc:5f:71:9b:62:ed:26:7d:c4:fb:d4:0c:90:a7:52:42:de:f5:
9e:a7:93:e7:d4:b0:c1:19:56:c6:fe:93:2d:be:4a:0e:7c:b9:
79:5a:29:cf:43:7a:81:39:b2:81:a8:e0:3d:52:9c:f0:a1:a9:
73:61:4c:fd:e8:c2:58:aa:df:9b:a9:1d:9c:4c:8c:8f:c7:e1:
01:46:4b:fe:ba:d5:a8:74:28:49:88:cf:58:3c:53:e3:a3:be:
e8:4a:83:cf:49:18:8b:34:99:88:16:7a:71:a5:90:9b:38:26:
16:20:e6:95:1b:d6:07:f5:8f:9f:c0:db:29:64:3b:3a:35:be:
50:a9:43:fc:66:73:80:32:a2:78:be:77:d8:5f:3f:07:9e:45:
90:40:f4:f6:a7:fa:85:80:30:7d:cc:d3:21:6c:85:10:dc:28:
b1:79:81:58:b6:d4:5d:84:f5:ad:b4:85:4f:b3:a4:89:e6:e7:
07:10:24:a0:86:2c:b6:8e:5b:10:2b:7c:53:02:64:12:1c:35:
96:83:7f:b9:b7:0b:33:00:d0:7d:a7:36:57:e2:53:82:57:49:
fe:a0:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:37 2024 by rpki-client on console.sobornost.net