Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6M7jFyDcj-zkE-P4a1f8hA-5zNs.roa
File: 6M7jFyDcj-zkE-P4a1f8hA-5zNs.roa (raw, json)
Hash identifier: dn2KTKB1fwvtBmlDvR8C6pC0l14Ln7U7jUGI/wWOg7M=
Subject key identifier: E8:CE:E3:17:20:DC:8F:EC:E4:13:E3:F8:6B:57:FC:84:0F:B9:CC:DB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801336C672704DF74B7C00B297BDBEC
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6M7jFyDcj-zkE-P4a1f8hA-5zNs.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202085
IP address blocks: 159.148.224.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:33:6c:67:27:04:df:74:b7:c0:0b:29:7b:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8cee31720dc8fece413e3f86b57fc840fb9ccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:17:9c:82:69:8a:0f:d5:b8:30:2c:b5:ca:
1f:a4:9d:c2:da:06:a7:4c:04:11:b9:78:f7:47:c0:
d0:ec:64:14:7a:2b:da:d8:0d:fe:3b:d3:18:e4:7c:
bd:74:62:fd:69:d2:92:a7:52:cb:e7:dd:7c:4f:28:
4d:23:d7:7a:7d:63:ab:41:61:ae:1c:e3:a2:9b:49:
8a:2b:78:a9:f8:f0:f5:b9:a0:a5:dd:c0:c3:98:ad:
4b:06:31:7f:70:86:5c:f5:f2:9f:ad:ee:e0:22:72:
9e:6d:5d:14:01:b8:fc:96:32:56:44:ed:27:17:90:
2f:75:97:7e:c5:b5:0a:ec:bc:87:a8:c3:0b:b0:e8:
56:2f:79:0e:98:64:56:f1:cc:b6:b0:7f:9a:14:c0:
21:8f:9d:ab:a5:c1:e5:89:4a:d8:29:f4:92:5c:01:
f8:4f:04:ba:d2:ff:0a:cc:8c:50:f6:0a:69:0f:7e:
e6:73:36:db:ce:4e:17:55:b5:ae:6d:68:27:7f:b3:
f0:9b:5f:38:f7:fb:dd:f9:38:88:d8:50:46:8e:07:
d1:de:76:61:e6:96:1b:52:36:5d:03:5b:53:83:3c:
c5:8c:b8:6e:ac:1c:de:9c:9b:56:f7:35:47:6e:60:
33:b8:ef:1f:00:3b:44:23:08:ab:f7:7c:0b:aa:e7:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:E3:17:20:DC:8F:EC:E4:13:E3:F8:6B:57:FC:84:0F:B9:CC:DB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6M7jFyDcj-zkE-P4a1f8hA-5zNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.224.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:1f:08:a0:df:75:d7:62:da:ad:c5:df:4c:d2:df:0c:a5:85:
18:8e:f4:43:37:e7:9b:35:53:43:76:bf:97:dc:62:24:27:a5:
b6:69:73:2a:d4:39:82:f2:da:33:23:33:e8:bb:73:08:29:57:
b0:d5:36:bd:4c:04:79:d3:b0:3f:b4:f5:f5:af:e0:37:ab:19:
fe:85:45:2d:f3:14:c1:d5:84:ef:41:27:3b:7c:82:dc:07:cf:
84:f0:80:5b:49:10:a9:09:0a:95:69:1f:1a:62:bc:63:e7:eb:
74:d7:94:41:76:db:bc:e7:c7:5d:4b:18:5d:ef:17:79:a3:eb:
2e:72:c4:2d:12:c7:94:8f:80:d4:9d:2e:72:19:fe:ee:f8:2d:
19:ef:05:21:2c:0d:c6:4e:bf:94:8e:e9:5f:8f:b7:ae:6f:62:
e5:5f:95:02:e8:46:1d:ca:9d:e3:65:72:66:a2:c4:93:46:1a:
99:cd:6f:9a:13:33:82:97:2c:dc:79:9d:fa:79:fa:4d:74:0c:
c2:6e:0a:64:9a:7a:e2:cd:9b:2a:67:9a:6c:29:e9:1f:93:81:
02:6b:4f:bd:ba:6b:ac:13:e7:b5:b5:5f:6b:46:14:f3:0d:5b:
d4:30:25:38:4f:86:f9:75:20:41:bd:a0:de:f7:f0:af:be:c5:
6a:5d:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:34 2025 by rpki-client