Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/r6XGVHXPhK8WtcXrqN7sArBgRKU.roa
File: r6XGVHXPhK8WtcXrqN7sArBgRKU.roa (raw, json)
Hash identifier: ZOyiZYX7Z4qyH/bTNSNuIIvyHfPVGLCykQiKAlqW1eQ=
Subject key identifier: AF:A5:C6:54:75:CF:84:AF:16:B5:C5:EB:A8:DE:EC:02:B0:60:44:A5
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 01856C6F22B31367B8905601CA3D4BD48BC6
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/r6XGVHXPhK8WtcXrqN7sArBgRKU.roa
Signing time: Sun 01 Jan 2023 08:25:00 +0000
ROA not before: Sun 01 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41540
IP address blocks: 194.246.120.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:22:b3:13:67:b8:90:56:01:ca:3d:4b:d4:8b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa5c65475cf84af16b5c5eba8deec02b06044a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:20:40:d0:d0:6c:71:a1:9e:d4:fd:e7:bb:
fb:f8:dc:97:19:70:7c:e4:87:21:a2:20:e8:86:01:
5f:26:40:3f:28:6c:3e:a9:7e:c4:eb:24:34:b2:36:
5a:01:96:12:3c:8b:2a:04:be:35:61:4e:f1:d9:09:
46:4b:6c:16:89:fe:b3:6a:83:f1:ae:79:3d:12:b1:
2d:90:98:ef:63:2e:85:29:e5:60:ee:0d:26:ae:0a:
e9:5d:ee:f8:9d:74:88:b0:b4:42:aa:1e:d8:6b:06:
06:04:c3:d5:3e:1d:fa:69:ab:03:c7:6d:5d:c4:ca:
02:71:19:39:9f:ca:9d:56:46:ba:c4:4a:05:eb:38:
aa:ff:bc:7a:66:e0:45:ed:1f:1b:48:7c:69:ac:fd:
dc:ce:26:08:d1:09:79:d6:7a:c8:5c:74:9a:4c:36:
3a:53:2d:dc:13:0d:b0:66:50:76:e0:83:81:61:a8:
d9:1c:d4:2c:7e:0b:56:c2:a9:7e:19:e5:cb:73:76:
8c:bd:2c:6a:d9:70:11:98:8f:94:63:a5:95:34:80:
02:be:cc:3b:ba:38:eb:22:b3:f4:5c:5c:7a:f9:a7:
c0:e0:ca:30:7c:b0:08:63:10:9b:5d:93:35:1e:a9:
13:d3:3e:c7:93:35:d1:e4:ef:9d:c8:e0:95:62:c0:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:C6:54:75:CF:84:AF:16:B5:C5:EB:A8:DE:EC:02:B0:60:44:A5
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/r6XGVHXPhK8WtcXrqN7sArBgRKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:73:60:a6:99:4e:4f:7a:47:b8:5e:6b:78:1e:59:5e:4b:2a:
d6:ec:6a:60:6d:b8:af:94:8f:92:1d:c9:26:09:7b:c3:32:12:
b2:00:dc:73:6c:c2:1e:d0:03:99:be:93:97:3e:d6:7d:6a:9e:
50:d5:86:9b:f1:ea:2a:e6:5e:d3:c7:4d:18:2c:66:2a:21:5a:
e7:50:bc:7a:02:e1:28:11:30:07:03:45:4c:9a:77:50:88:d0:
55:0d:26:37:fc:a4:29:62:50:1e:6c:a1:22:8b:29:ca:61:2e:
2f:62:f2:9d:0e:7a:7b:53:72:9b:b9:dc:9f:fb:e5:97:de:79:
81:3d:85:b3:34:1c:9b:61:97:aa:e5:e4:79:04:d1:e4:74:7b:
e7:de:93:fd:0c:5c:7a:2f:98:0a:25:68:e1:54:78:20:2e:d3:
b5:91:24:ab:5a:31:41:d3:90:42:d9:0a:f5:b0:07:36:a6:7a:
2c:d9:3f:f0:1a:0b:d3:1d:48:f0:2d:a5:33:78:79:db:f1:87:
bb:c3:d5:dc:f4:48:6b:6c:3b:78:e2:3e:2b:9a:69:bd:ca:d7:
9d:68:2f:82:f7:ff:89:18:d8:5b:03:e0:b5:cd:88:92:56:83:
e4:e7:a4:8b:8f:c9:a9:13:db:38:9f:e7:02:5d:ae:41:c3:09:
fc:b7:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:51 2024 by rpki-client on console-ams.rpki-client.org