Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/6XW4JVR9o4VwOGOz87tXUl2o5aw.roa
File: 6XW4JVR9o4VwOGOz87tXUl2o5aw.roa (raw, json)
Hash identifier: a8fJh/zAmalsMQt9zpyTGsdCn6NNvV8KOJKur4NfxXA=
Subject key identifier: E9:75:B8:25:54:7D:A3:85:70:38:63:B3:F3:BB:57:52:5D:A8:E5:AC
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 01856ED4CA467C603DCB8D4B3C3F07047AB5
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/6XW4JVR9o4VwOGOz87tXUl2o5aw.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211448
IP address blocks: 94.176.161.0/24 maxlen: 24
94.176.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Nov 2023 23:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ca:46:7c:60:3d:cb:8d:4b:3c:3f:07:04:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e975b825547da385703863b3f3bb57525da8e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:53:a0:eb:dd:c8:64:c3:0b:4d:a7:3b:24:
92:19:a1:8f:7e:1f:57:5b:cb:fc:60:4f:f5:b6:b1:
42:e1:0d:84:27:ad:d1:7d:ca:14:20:50:24:c1:f6:
5f:d6:ce:a1:de:3b:1b:55:9e:fd:96:20:a8:a9:17:
64:98:67:01:ea:70:71:30:7c:d0:c5:2f:ac:4d:0f:
12:ed:65:3f:f2:4a:58:6c:b0:7e:3b:c1:2f:e4:0d:
5b:98:f0:27:6a:b0:45:f2:8a:16:19:59:47:de:fe:
07:d1:b3:bd:0a:cd:7e:b6:3d:67:7a:2b:82:8f:24:
54:e5:12:87:69:b4:18:69:6d:4c:f3:d1:7f:ef:66:
ca:7c:1a:eb:f0:3b:2e:35:56:3b:3c:1f:1e:97:86:
b4:ba:d2:cd:90:bb:f9:6f:9e:94:f3:19:f8:26:48:
d4:2b:6a:bf:ce:e9:5a:18:37:b9:b4:af:43:56:aa:
04:62:7b:d6:8c:65:44:96:79:bb:5c:65:17:93:c4:
15:3c:af:c9:dd:9e:0d:5c:70:8a:3b:dd:8b:37:48:
09:78:61:72:1f:c7:f6:80:45:d2:1e:5c:38:b9:b2:
b7:11:9b:b3:71:de:d4:a1:b8:79:cb:c8:76:f9:bc:
46:20:1d:79:99:44:e9:03:36:5d:20:f5:4b:3d:2d:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:75:B8:25:54:7D:A3:85:70:38:63:B3:F3:BB:57:52:5D:A8:E5:AC
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/6XW4JVR9o4VwOGOz87tXUl2o5aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.160.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:af:89:f1:ae:dd:88:b4:43:90:12:a7:a8:66:77:97:b3:8c:
df:a8:5b:ef:f8:d7:28:3e:c6:d8:1d:32:b6:ce:39:dc:f4:1f:
c4:8f:60:e4:99:4b:12:a4:5a:2b:d5:6f:5d:3b:98:0f:c0:8f:
b8:ca:12:9a:c9:70:2b:0f:d3:ba:6f:03:51:55:b7:36:40:df:
3b:ff:64:0c:b7:f5:02:eb:3c:d0:23:c8:aa:c5:c1:55:22:56:
15:2c:7a:36:de:d5:84:9b:a9:dd:02:f7:ef:9f:b8:20:6c:f4:
94:13:19:96:15:58:9d:10:56:fe:4f:f6:20:52:d2:58:c4:e2:
f6:d0:85:b3:fd:17:36:09:76:22:2e:d3:45:5b:2e:2c:83:fe:
5b:06:73:66:a5:49:af:f7:01:86:3f:53:bd:a6:45:db:72:92:
4d:ae:2c:94:54:e9:5e:30:e2:2c:3e:d9:16:e8:00:73:c9:2e:
3b:1c:41:ff:64:a1:bb:30:f4:cd:de:0e:cf:44:f2:95:2f:cc:
33:5e:73:40:9d:a4:e3:f3:68:9b:f9:69:45:cd:10:56:fd:9a:
4a:c7:96:0f:93:ef:90:03:1f:6f:bf:10:3c:fd:c1:c6:a3:d4:
b3:b2:11:c0:49:a5:b5:61:a8:40:5b:c4:0a:43:ea:fe:dd:69:
e3:3c:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-fra.rpki-client.org