Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/6vfn0uvZiDtB2AQayOyoOlqVdco.roa
File: 6vfn0uvZiDtB2AQayOyoOlqVdco.roa (raw, json)
Hash identifier: hv5r9GK0T3ufMVB1kdLOT2Y18Gbl3M5O5LHtFO2K/X4=
Subject key identifier: EA:F7:E7:D2:EB:D9:88:3B:41:D8:04:1A:C8:EC:A8:3A:5A:95:75:CA
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 018571279F34DAE2EACFEA7C2D77D27F2F9A
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/6vfn0uvZiDtB2AQayOyoOlqVdco.roa
Signing time: Mon 02 Jan 2023 06:25:00 +0000
ROA not before: Mon 02 Jan 2023 06:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61320
IP address blocks: 192.109.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 14:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9f:34:da:e2:ea:cf:ea:7c:2d:77:d2:7f:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jan 2 06:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf7e7d2ebd9883b41d8041ac8eca83a5a9575ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:19:22:78:25:76:82:87:dd:44:e7:a9:99:
df:ab:f0:63:2b:b3:7f:58:fb:ed:83:ce:77:51:af:
e0:67:07:06:1a:d4:ff:2e:32:d4:3e:f5:a6:b6:0d:
c9:c8:fb:68:5e:d6:2b:9c:9d:ee:71:da:a0:83:10:
30:b1:49:a5:85:d5:7a:3e:a9:f1:6e:d2:10:a7:20:
4a:ac:c8:2c:58:9e:61:07:6e:0d:40:d5:9d:35:a5:
4c:6b:a0:41:52:21:52:90:8b:d2:39:c1:8e:5b:02:
f7:20:9e:a3:ad:da:f9:91:e5:0c:7c:2b:8b:e9:89:
d5:53:25:50:f5:18:40:b0:ed:a0:c7:6b:eb:d3:3e:
be:fd:9d:42:69:46:b4:30:ec:d9:bf:e4:87:0f:d0:
65:62:28:49:94:29:06:0c:ad:a7:54:de:b6:41:e3:
e7:fd:25:e6:a1:83:cf:5a:55:3c:e2:8f:85:53:e5:
bb:f2:92:a4:44:aa:79:ae:10:ec:ce:bd:93:11:6c:
7f:95:50:ef:36:05:4c:ce:4f:d6:6a:64:4e:6b:ab:
0c:57:48:7b:a9:63:2a:b4:24:56:ef:01:60:35:34:
1b:f0:6c:b8:cc:07:19:88:3e:42:b4:27:32:f2:bb:
f0:55:fd:51:e9:74:dc:dc:bd:f4:80:cc:20:2b:69:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:E7:D2:EB:D9:88:3B:41:D8:04:1A:C8:EC:A8:3A:5A:95:75:CA
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/6vfn0uvZiDtB2AQayOyoOlqVdco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.47.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c6:94:41:f1:9e:fa:9a:d2:4b:7d:03:83:6f:99:e6:87:35:
ca:1f:76:41:3b:81:65:69:54:98:9c:74:ee:22:02:b1:10:64:
85:81:2c:2b:46:a7:92:0d:75:2e:73:43:74:e5:3b:7d:6e:b8:
f8:6f:3a:3a:5b:cf:52:98:85:aa:2e:40:ce:bc:80:97:d4:c3:
b6:bf:41:89:6b:ee:21:69:41:10:1e:fb:04:d3:c9:64:12:94:
ff:2e:db:ad:58:69:27:e3:5c:8a:a4:55:94:71:7c:13:7a:e3:
af:08:48:2d:6d:91:f9:48:db:84:25:c0:4b:61:73:3d:52:8e:
6e:aa:84:15:d5:a1:2b:fe:f8:28:f7:f9:3d:8e:3d:08:c5:78:
c2:71:04:34:20:2b:19:c7:f8:e6:79:0b:d3:d7:3c:91:15:af:
1f:e0:f7:9c:e1:9f:8b:83:c6:bd:6d:5a:f8:1f:ed:25:93:ce:
b6:56:b5:8c:70:38:69:3f:67:2e:3e:8c:0f:2b:40:a0:ad:10:
9b:d9:eb:33:ac:e8:6b:f1:41:5c:36:a2:31:b6:c8:d8:5a:89:
f6:a6:19:46:72:20:fa:cb:fc:21:84:5a:9a:3e:e1:a8:cd:25:
e1:b8:53:42:9b:e1:de:90:dd:1d:66:2c:df:6f:5f:7d:1f:0a:
c3:89:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:57 2024 by rpki-client on console-ams.rpki-client.org