Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/3Yfn3a08Rzspb0mIR17PeyqnoWI.roa
File: 3Yfn3a08Rzspb0mIR17PeyqnoWI.roa (raw, json)
Hash identifier: suaupgALQXEEY64pYumAZo6sSeIC+n1oD9cq1yhZGkM=
Subject key identifier: DD:87:E7:DD:AD:3C:47:3B:29:6F:49:88:47:5E:CF:7B:2A:A7:A1:62
Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial: 018CC649DD0E97505A98A1BA0E402B7E3BEE
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/3Yfn3a08Rzspb0mIR17PeyqnoWI.roa
Signing time: Mon 01 Jan 2024 18:29:38 +0000
ROA not before: Mon 01 Jan 2024 18:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29686
IP address blocks: 195.28.12.0/23 maxlen: 23
91.199.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:dd:0e:97:50:5a:98:a1:ba:0e:40:2b:7e:3b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Validity
Not Before: Jan 1 18:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd87e7ddad3c473b296f4988475ecf7b2aa7a162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:f8:68:5f:28:85:9e:72:8e:31:de:19:99:
b2:b8:27:3d:a7:b3:9f:91:ef:93:64:0c:2c:54:56:
b7:e9:9d:8b:b9:82:fb:9c:7c:2c:25:fc:fe:05:24:
5b:c7:af:86:6a:bf:2f:0f:dd:d1:ab:81:47:86:a8:
d8:ce:16:fb:fc:39:63:e9:77:08:db:39:16:45:f2:
6c:20:93:91:b2:8e:d0:cb:89:65:db:0e:4a:d4:f2:
d5:87:a6:e3:1d:5a:86:b9:da:40:7b:66:70:a9:a5:
54:0b:43:fa:a6:cf:47:09:39:3b:60:93:f7:0e:96:
e8:98:fb:28:32:b2:c6:2d:87:65:6d:a1:65:f1:43:
bc:3b:95:79:82:e6:32:6e:31:72:f9:3f:c0:91:ad:
43:f2:0b:e0:c7:64:0d:78:2f:93:71:df:4f:41:1e:
cb:56:ef:c9:83:2e:f0:bd:ef:54:fd:89:74:e3:13:
38:a1:5a:82:1d:3b:84:81:b4:e2:7b:33:65:09:22:
6b:5d:96:39:66:2b:18:58:a3:26:ba:d4:98:e2:38:
7f:d0:44:ca:df:d1:21:a2:06:dc:a6:90:ce:34:f7:
51:a5:ff:bf:33:9f:27:13:bf:7e:e9:6f:f9:13:a4:
d2:56:fb:1a:f1:17:76:0c:65:68:0d:06:bf:61:a2:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:E7:DD:AD:3C:47:3B:29:6F:49:88:47:5E:CF:7B:2A:A7:A1:62
X509v3 Authority Key Identifier:
keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/3Yfn3a08Rzspb0mIR17PeyqnoWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.225.0/24
195.28.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:dc:be:e3:41:35:d6:ad:36:19:15:6c:c0:2c:d9:3f:6a:b1:
73:4d:32:00:20:2a:97:15:2a:e0:8e:32:d1:75:c6:4e:01:1d:
ed:d5:f3:ef:2f:6c:ec:b9:b4:8a:63:2f:74:5a:3c:75:9c:5a:
18:a2:4b:18:50:77:86:67:09:6d:6c:02:ff:33:37:c4:0a:97:
68:f4:83:6d:7a:7c:1b:7c:8d:eb:ac:f4:d0:a1:02:1e:dc:34:
72:a6:3e:ec:e9:7e:4e:d2:df:7e:00:56:15:99:39:f3:ae:d3:
35:34:eb:9e:31:1c:cc:18:fb:ca:7c:98:f5:4a:82:a6:78:10:
20:72:ac:1b:10:11:6e:92:a0:8b:7b:3d:2a:b5:8c:a4:a4:c9:
57:ee:e6:0d:e2:05:df:d5:73:2e:58:0d:46:c7:15:12:c8:1a:
0e:7f:f9:be:b8:a3:c3:b6:03:2d:0f:7d:cc:fd:05:ea:e0:c0:
b3:c6:b2:99:49:03:f7:57:20:86:d9:46:0e:f1:ad:d5:0c:a1:
2d:ff:6a:26:c1:85:9e:51:0d:6c:bb:b3:f9:14:6e:2f:27:0b:
4e:79:42:7e:77:7a:b3:51:c0:56:a1:f1:78:66:3a:d0:5a:db:
80:01:05:d6:c5:07:a2:c2:89:2b:e9:b6:2f:86:0e:14:74:7a:
15:60:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:20 2024 by rpki-client on console-fra.rpki-client.org