Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/6xpR9QgRyUdageSWLb00GfTyW0o.roa
File: 6xpR9QgRyUdageSWLb00GfTyW0o.roa (raw, json)
Hash identifier: mHmZrooGFf3Bfk7Dtg0tfY8+Xha5jxeH2oKBXfVjAis=
Subject key identifier: EB:1A:51:F5:08:11:C9:47:5A:81:E4:96:2D:BD:34:19:F4:F2:5B:4A
Certificate issuer: /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial: 018570FBD4781AEDD97F3080578CF6A57C11
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/6xpR9QgRyUdageSWLb00GfTyW0o.roa
Signing time: Mon 02 Jan 2023 05:37:10 +0000
ROA not before: Mon 02 Jan 2023 05:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198251
IP address blocks: 91.232.240.0/24 maxlen: 24
91.232.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d4:78:1a:ed:d9:7f:30:80:57:8c:f6:a5:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Validity
Not Before: Jan 2 05:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb1a51f50811c9475a81e4962dbd3419f4f25b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:7e:ae:fa:02:4b:2e:a1:be:37:95:20:c6:
06:b2:60:1d:de:e6:f3:f4:6d:57:86:65:e2:8e:61:
e3:85:bc:ba:ec:f6:34:3b:f4:69:61:37:cb:2f:dc:
e2:fd:8e:bc:5a:66:41:34:93:36:76:cf:39:22:0c:
1a:4e:ee:52:38:29:e0:3b:1d:16:e0:46:4e:3d:cf:
61:3a:7c:b0:7a:62:0a:09:c5:f7:8b:2c:4b:7f:24:
e2:b9:95:50:63:81:b0:c2:64:a2:30:5a:03:16:ef:
ed:3c:85:41:53:68:17:b7:1a:03:22:01:1e:ce:aa:
68:8f:f7:ef:80:6c:a1:d3:6c:25:91:1a:57:d3:de:
27:4f:76:da:56:27:76:54:18:3d:c9:4c:d8:d2:81:
ad:f2:cb:21:08:72:1e:66:0e:8d:da:02:c9:07:f8:
9c:d6:90:4b:87:d0:0a:e2:a2:b2:34:45:b0:c7:68:
93:09:1a:fb:ff:ba:d9:64:ea:cf:74:34:66:64:16:
50:12:42:2a:1f:ab:c0:d9:05:a7:15:84:7d:ba:f9:
6e:5a:47:26:c5:cd:eb:2c:d7:50:7d:f7:1a:4e:c0:
f9:21:03:1e:b6:37:c4:00:ea:53:0a:c8:a3:62:6a:
9c:5e:78:12:a5:29:a0:22:83:0d:75:e9:6f:07:47:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:51:F5:08:11:C9:47:5A:81:E4:96:2D:BD:34:19:F4:F2:5B:4A
X509v3 Authority Key Identifier:
keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/6xpR9QgRyUdageSWLb00GfTyW0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.240.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:7d:0c:9c:79:bd:3b:09:88:b8:d3:c5:1e:0b:e3:16:0c:3f:
6b:45:07:fa:30:23:00:a7:ef:dc:d9:ec:7b:f0:b9:e6:0e:5a:
40:99:7b:26:e0:0c:b9:f9:6e:b0:bb:fa:70:3a:83:cd:f1:8b:
4d:53:a8:90:f0:a0:ff:1f:c1:c1:8c:d6:e1:cd:75:f9:0a:f4:
87:23:08:5f:61:f8:f2:87:4a:81:de:9c:b7:a3:b8:de:ba:6a:
a4:e5:ca:0f:97:d7:29:8b:13:12:3f:51:9a:f4:11:79:5d:e9:
3f:8d:b3:e8:ec:85:6f:ac:7b:ff:34:b5:ff:51:b1:b4:bf:7c:
d3:aa:b6:1f:41:0d:f8:0c:eb:44:55:ac:bc:40:2c:d8:79:80:
a7:47:cc:99:c1:c0:a5:70:1b:b9:48:a7:8e:d9:e9:b7:63:50:
6c:e3:8f:c4:6e:28:17:58:38:00:e0:6d:bb:94:f4:94:68:97:
c0:c4:a4:df:9a:68:0f:80:a2:33:b3:80:dd:f5:ec:d1:9d:b8:
d0:56:6f:11:5f:b7:8e:54:9b:3a:e3:03:fa:39:72:a0:7c:a5:
e5:23:c0:9c:16:21:24:ff:c1:47:8d:f0:07:cb:80:51:00:f1:
43:05:39:82:40:59:81:e2:3e:9f:fb:e5:2b:3c:29:3c:ee:53:
b4:03:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:36 2024 by rpki-client on console-ams.rpki-client.org