Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/V6YKJon1tbmDNHQ_5AVe-1lZAMI.roa
File: V6YKJon1tbmDNHQ_5AVe-1lZAMI.roa (raw, json)
Hash identifier: hG9HhiIHwEuY3xm3Oe9g1JA5l4yJ8/vE7qKMQjs6Ih8=
Subject key identifier: 57:A6:0A:26:89:F5:B5:B9:83:34:74:3F:E4:05:5E:FB:59:59:00:C2
Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial: 018BE72BAEBC738E4D3B7EE698BA53A9A54C
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/V6YKJon1tbmDNHQ_5AVe-1lZAMI.roa
Signing time: Sun 19 Nov 2023 10:41:21 +0000
ROA not before: Sun 19 Nov 2023 10:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31400
IP address blocks: 195.28.12.0/23 maxlen: 23
91.199.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:2b:ae:bc:73:8e:4d:3b:7e:e6:98:ba:53:a9:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Validity
Not Before: Nov 19 10:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a60a2689f5b5b98334743fe4055efb595900c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:a3:35:4a:18:8f:00:82:a9:11:5d:55:d2:
ac:40:17:a3:26:b4:3b:1c:df:55:e3:e0:09:5f:16:
70:ad:ff:71:67:d9:c0:88:0f:8b:25:a2:86:37:6d:
53:cb:d0:eb:a5:d2:cf:53:4f:8c:c3:dd:31:b0:ce:
02:3f:77:45:2b:c4:29:69:5f:9e:0c:0a:a5:b5:38:
b0:0a:a4:d3:93:db:23:7d:de:0a:7d:e1:e7:69:6f:
7c:cb:32:c7:ba:ef:fe:1e:33:9e:3e:bb:d1:32:24:
07:37:b1:4b:59:3f:04:38:f9:35:77:45:57:1d:64:
77:d3:b7:ad:5f:5a:15:99:19:dd:fa:2f:16:53:da:
21:6e:a0:d7:72:c9:f5:54:a8:ea:5b:af:d7:2f:5f:
de:14:d7:35:10:48:f3:4c:48:84:fb:83:d8:62:b9:
be:e9:2c:e1:25:bd:46:4e:2d:95:d6:db:fc:15:c7:
46:9f:4e:73:14:d9:6e:49:7a:7d:77:41:c8:ef:62:
c4:ef:86:a5:cd:1c:c5:34:09:06:95:4e:39:ed:9e:
34:5a:61:10:91:bb:1f:2b:51:2a:74:aa:2b:16:6a:
0a:e8:06:23:f1:21:86:1f:e3:a5:23:d0:cb:5b:05:
c6:7c:4e:0a:33:10:54:5e:d8:28:16:76:4c:ca:9d:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:0A:26:89:F5:B5:B9:83:34:74:3F:E4:05:5E:FB:59:59:00:C2
X509v3 Authority Key Identifier:
keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/V6YKJon1tbmDNHQ_5AVe-1lZAMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.225.0/24
195.28.12.0/23
Signature Algorithm: sha256WithRSAEncryption
92:7c:52:7c:4f:72:b0:88:8b:df:a0:f5:00:63:bf:4e:9f:28:
9d:dc:a9:83:e9:1c:5c:68:56:1a:07:5a:63:be:89:be:c7:c8:
90:f4:32:8a:24:d2:94:fd:12:60:84:99:61:5d:d1:7c:51:65:
a9:7b:d0:4f:b9:3a:82:71:b7:f4:13:af:66:90:94:65:f0:ea:
59:cd:70:13:68:34:c3:43:1b:b1:1e:1d:06:8b:d5:83:e0:3c:
73:ce:4f:88:2e:07:51:8d:2e:45:56:31:23:06:a2:9c:df:6a:
74:1e:0d:ce:0d:89:9f:92:d2:51:3f:ba:d7:a9:f3:1c:17:07:
43:ee:cb:e0:82:ed:77:2e:e4:bd:47:ad:6c:0c:77:60:75:22:
35:06:16:eb:10:31:36:5c:4b:9c:cb:8b:48:0a:04:9d:b2:18:
c5:23:eb:2a:5b:63:22:d7:ae:08:42:09:bf:89:11:48:bd:d7:
e6:87:f4:b0:49:9c:e8:3d:26:29:ef:35:e1:77:4f:14:ef:c3:
10:9f:ea:8b:db:9b:7a:0d:4d:65:85:59:87:a7:21:17:93:c0:
4b:de:b4:11:d6:f2:aa:ba:e1:9b:68:5a:5b:a4:00:ea:87:42:
83:83:ac:39:f8:a8:2a:f4:dd:d5:ca:09:5d:7e:45:f4:a5:40:
ff:61:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:20 2024 by rpki-client on console-fra.rpki-client.org