Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/AsRcFWSY-bsO4E2xdE7LIKtJVtI.roa
File: AsRcFWSY-bsO4E2xdE7LIKtJVtI.roa (raw, json)
Hash identifier: MSG+LuezCSmip9fp5321wf7DiN/6PfAAezXPIu7Cihg=
Subject key identifier: 02:C4:5C:15:64:98:F9:BB:0E:E0:4D:B1:74:4E:CB:20:AB:49:56:D2
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 01856F26BADEF2AA651168C3B2D8F432C18D
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/AsRcFWSY-bsO4E2xdE7LIKtJVtI.roa
Signing time: Sun 01 Jan 2023 21:04:47 +0000
ROA not before: Sun 01 Jan 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200070
IP address blocks: 193.29.206.0/24 maxlen: 24
212.237.229.0/24 maxlen: 24
194.0.14.0/24 maxlen: 24
185.43.134.0/24 maxlen: 24
2001:148f:fffb::/48 maxlen: 48
2001:678:1::/48 maxlen: 48
2001:678:11::/48 maxlen: 48
2001:148f:fffd::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ba:de:f2:aa:65:11:68:c3:b2:d8:f4:32:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jan 1 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c45c156498f9bb0ee04db1744ecb20ab4956d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:34:50:8d:40:1b:c2:46:02:87:5f:3c:32:
56:0f:1f:d7:6d:83:da:94:23:d2:ba:e5:10:66:22:
3c:71:e1:31:a1:68:52:0b:4a:c6:f2:ec:23:a1:43:
c5:e5:95:b4:55:db:96:de:50:0a:31:c8:c0:49:2f:
7b:86:b0:11:f3:e6:38:9a:b1:a0:63:aa:05:89:f5:
0b:a4:1e:86:48:a0:89:1a:94:b0:ba:e3:6c:15:47:
50:fd:df:6a:4c:ab:67:99:cb:7e:2e:b0:bf:06:1e:
a7:64:3b:08:c6:dd:95:52:46:5e:21:d2:6b:b0:80:
ec:67:0e:14:08:f4:0b:85:d3:5c:9c:0d:8c:1c:1b:
30:20:4c:a4:6c:82:d5:6f:a2:02:23:56:93:0f:8b:
58:39:e6:17:95:16:fe:f0:ff:f4:10:e5:95:c8:9e:
15:f4:af:b9:38:1d:77:dc:57:17:ef:b0:d1:a6:8d:
33:2c:b7:da:f3:20:d1:e9:61:46:9a:bc:54:59:c5:
f8:23:ac:64:2d:11:57:5a:7d:e5:ae:74:c7:70:dc:
92:2d:74:11:7f:3b:8c:99:ad:7a:64:52:38:9d:57:
2c:f2:65:b1:b1:75:9a:2c:57:f7:d7:b4:f2:a8:ff:
a6:d9:9f:74:b4:a0:f1:2d:e4:d6:25:a0:78:ef:63:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:5C:15:64:98:F9:BB:0E:E0:4D:B1:74:4E:CB:20:AB:49:56:D2
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/AsRcFWSY-bsO4E2xdE7LIKtJVtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.134.0/24
193.29.206.0/24
194.0.14.0/24
212.237.229.0/24
IPv6:
2001:678:1::/48
2001:678:11::/48
2001:148f:fffb::/48
2001:148f:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
58:30:ac:36:4f:a1:18:ff:00:38:88:d4:17:3b:5e:2c:11:1c:
f5:68:93:08:6a:57:44:0a:61:d9:c9:47:82:05:dc:e0:c3:82:
05:01:4c:da:6a:9e:4f:ce:1f:7f:c5:f2:2a:42:f8:2a:88:40:
7d:a8:ee:4a:05:da:33:ea:2c:ba:e5:f4:6b:33:3e:a9:aa:72:
4f:8c:ce:7f:0d:e9:51:87:46:a0:5f:f3:4c:c9:a2:ee:cf:97:
92:21:38:7e:26:07:63:8b:0a:c0:7b:c8:5f:e6:47:a6:c0:69:
b0:52:79:14:1f:04:18:c5:83:09:92:c3:b4:58:71:d3:04:ac:
fd:54:ec:9d:be:e9:26:e7:9b:e8:18:b3:e0:23:38:47:31:f9:
36:79:1b:7c:4e:ae:28:a9:6a:e9:df:68:af:37:62:4d:98:da:
8b:85:3e:dd:7a:76:46:58:04:ff:d9:5f:24:46:be:69:a4:88:
c9:c8:2e:dc:1d:be:d6:98:0e:8e:c9:d5:14:d9:0e:7b:27:56:
3e:dc:ff:48:3f:21:4c:15:76:0a:db:39:d5:ca:26:ee:d1:c2:
e1:25:62:be:15:05:87:1a:24:c8:01:ec:9c:dc:4b:14:34:11:
9b:c6:2a:0c:c2:05:55:ab:8f:50:d1:4d:0d:bf:a2:d2:44:43:
45:6a:53:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net