Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/b-6ydnyfWqNndBVzNGb98m-MYsA.roa
File: b-6ydnyfWqNndBVzNGb98m-MYsA.roa (raw, json)
Hash identifier: cRM9aCMAKVYp2vawLBkda9sTu5RKCvvF1AUnFUxE4GA=
Subject key identifier: 6F:EE:B2:76:7C:9F:5A:A3:67:74:15:73:34:66:FD:F2:6F:8C:62:C0
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 01856EEFE9ED43C282E20AD900325F2277FE
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/b-6ydnyfWqNndBVzNGb98m-MYsA.roa
Signing time: Sun 01 Jan 2023 20:04:54 +0000
ROA not before: Sun 01 Jan 2023 20:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39326
IP address blocks: 193.151.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:e9:ed:43:c2:82:e2:0a:d9:00:32:5f:22:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jan 1 20:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6feeb2767c9f5aa3677415733466fdf26f8c62c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:ba:79:c9:ed:cd:49:58:b4:88:64:e3:1f:
30:68:14:14:cd:9c:d5:36:0e:fa:5c:47:b2:e4:b5:
c9:21:e4:dd:11:15:c3:9f:85:c6:1e:9f:3a:59:08:
22:84:bc:96:ac:9c:68:2c:f8:97:5b:d8:39:92:2d:
ab:2b:86:45:e8:98:34:6d:7f:28:7e:dd:b0:23:b8:
17:62:f3:a5:25:93:2f:b2:0b:22:59:a3:2d:49:77:
46:aa:59:e3:28:84:d3:bd:4d:89:8d:f2:bf:c3:56:
1b:f0:9e:0e:08:ad:e8:0a:85:fe:2e:61:f6:56:f9:
c4:f6:f0:9d:73:c5:a9:d7:8e:b3:9e:0d:e9:3d:5e:
6d:a7:c8:f7:12:72:63:b9:2d:3d:ca:00:07:19:90:
f0:eb:f8:20:8d:51:38:4d:87:5d:41:7d:10:bc:15:
2f:a1:2f:d4:23:12:9e:ea:60:85:d5:7f:42:86:b9:
41:b8:d1:0a:20:01:f3:42:e9:9f:66:d3:c5:51:ed:
92:e0:b8:87:14:d0:f1:2a:fd:a3:ad:b5:0e:2b:e2:
7f:83:5e:f2:43:6f:21:2c:a8:13:12:31:1e:b7:17:
18:a4:97:20:86:23:32:42:41:fb:d4:ed:d9:ae:de:
63:ef:56:a8:27:d4:ab:b7:57:41:72:a7:c2:7f:79:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EE:B2:76:7C:9F:5A:A3:67:74:15:73:34:66:FD:F2:6F:8C:62:C0
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/b-6ydnyfWqNndBVzNGb98m-MYsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6c:8e:e0:a6:46:e9:ca:43:3e:69:1b:46:3f:82:42:5b:6d:
18:0d:24:fe:7c:53:15:2f:27:8d:a4:51:26:76:7a:ba:ad:7f:
10:66:71:2d:99:a6:55:a9:ca:74:49:b7:e9:1b:e5:89:95:0e:
5d:e6:9a:76:81:ae:2b:72:51:d5:f5:91:a6:c5:1a:13:d2:c3:
d4:76:fa:b5:da:ff:b1:0c:a3:d0:19:fa:a2:7c:66:c6:5d:c3:
f1:16:d2:23:d3:9b:45:e7:e9:e0:25:a9:3f:6b:62:51:15:1b:
97:ad:2b:2e:4e:00:3c:d9:6d:c7:9c:26:7c:9b:5b:8e:c3:a6:
bb:be:1c:9c:fc:0b:3f:c2:eb:c3:ee:42:ae:31:d2:da:87:5d:
3a:7a:54:cc:82:7d:f1:94:c4:dd:93:b7:b2:66:67:a7:4c:60:
62:d6:a5:1a:c0:ba:6c:f7:b6:4a:15:aa:65:21:a6:b6:01:b0:
b7:fc:d7:97:c6:e5:eb:4c:71:58:c3:76:e1:2f:d7:0f:31:92:
0a:c0:e6:db:71:29:24:55:9b:99:ce:64:ed:cb:12:52:78:9b:
48:b7:c5:95:87:7b:5d:b0:66:29:a6:6b:13:69:5b:37:40:d6:
ed:39:59:8c:22:57:63:23:fb:5a:40:8a:8d:54:24:a9:2f:c5:
f2:f1:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org