Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/6P8_yxPOPjiZyIf_w3a4mRzyjbU.roa
File: 6P8_yxPOPjiZyIf_w3a4mRzyjbU.roa (raw, json)
Hash identifier: 6SLb+4axI2fYdBigs8nxJqPVYyLy0DsiP/7Wn2TsVzQ=
Subject key identifier: E8:FF:3F:CB:13:CE:3E:38:99:C8:87:FF:C3:76:B8:99:1C:F2:8D:B5
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01914C2BBA199834A2BB9B1862D1DD9162CA
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/6P8_yxPOPjiZyIf_w3a4mRzyjbU.roa
Signing time: Tue 13 Aug 2024 14:36:59 +0000
ROA not before: Tue 13 Aug 2024 14:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 217.180.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 12:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:2b:ba:19:98:34:a2:bb:9b:18:62:d1:dd:91:62:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 13 14:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ff3fcb13ce3e3899c887ffc376b8991cf28db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:25:e7:04:28:f7:bb:79:72:42:9e:99:0b:
80:90:f1:5e:3c:f3:fc:a7:40:0a:0e:5b:33:5c:5e:
f4:d0:37:63:ac:35:84:41:b4:47:2e:dc:fb:37:41:
ef:df:d8:2c:06:01:90:29:68:85:fe:85:e4:3c:ab:
2a:04:62:0e:5c:78:39:be:a9:a2:6a:69:1b:35:15:
f6:5c:78:84:2f:31:cb:bb:63:10:79:37:8f:9c:ba:
4f:60:af:fa:b2:25:f9:a3:12:cb:9d:23:34:41:33:
01:bd:0c:ca:df:47:3b:20:d0:23:d0:60:f3:39:8c:
b4:2c:18:ad:9a:94:58:78:26:62:39:d8:49:bc:0d:
9f:2f:7a:42:6a:a0:85:8c:ed:c3:f9:99:76:a4:5c:
6d:9d:0b:c5:e9:c7:42:63:dd:81:b0:42:54:a4:73:
ac:7f:ed:de:9b:02:f3:6f:6e:e9:99:0c:4a:1c:b7:
08:73:0c:7a:6a:6f:51:a0:35:87:a8:15:4e:0f:36:
1f:fd:ad:7f:0a:36:72:b6:d8:bf:f3:a1:ba:9b:27:
5a:ce:ae:fe:be:b6:9a:fd:99:fa:29:1d:cf:a7:e5:
6c:55:ae:20:63:2a:bf:f7:95:ad:f8:a2:b1:21:64:
58:ce:30:15:6b:35:af:7f:6f:94:2c:c4:04:ed:11:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:3F:CB:13:CE:3E:38:99:C8:87:FF:C3:76:B8:99:1C:F2:8D:B5
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/6P8_yxPOPjiZyIf_w3a4mRzyjbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cd:a4:a7:fc:55:1f:cd:2d:36:68:c5:bd:77:4e:04:a2:50:
53:13:71:13:f4:6c:75:e9:8d:42:99:7d:de:f6:a4:c3:af:a6:
27:6d:ba:c3:71:f4:5e:ea:26:32:8c:d2:3a:90:6a:00:61:f3:
35:f0:c5:d9:15:8c:a9:67:a8:28:94:31:16:0a:dc:ac:e1:c7:
ef:4c:60:b8:21:8e:c3:90:a5:b8:9f:55:9d:7b:63:9f:2b:02:
3d:d3:b2:59:cc:7a:af:d6:14:80:1c:6e:36:e0:a2:6f:03:e2:
07:b5:b9:39:02:83:4c:7f:8b:7e:24:de:44:25:b4:8f:8d:49:
6e:94:fe:54:ff:31:5b:c9:11:cf:30:b7:54:35:bb:6d:bf:f8:
64:82:36:e6:ba:f9:be:da:a2:46:1b:47:c6:f5:d9:7c:d1:af:
02:9f:a6:b8:05:99:29:ee:bd:a4:ea:bd:48:f2:83:0f:24:40:
88:45:6b:f8:46:08:85:cf:25:f6:96:3c:66:88:ad:b7:50:5f:
7b:75:48:b2:f9:22:37:99:09:29:6b:9f:36:e5:7d:60:14:8b:
c5:c1:65:94:94:6e:10:5e:7d:87:e2:55:65:c7:b3:ef:46:72:
ea:0d:e6:97:20:41:4c:da:87:b9:4d:57:ab:09:63:99:11:15:
78:4b:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 16:07:25 2024 by rpki-client on console-fra.rpki-client.org