Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6MWKDlyMyP2yfZvIWg-diAuLVdc.roa
File: 6MWKDlyMyP2yfZvIWg-diAuLVdc.roa (raw, json)
Hash identifier: veySDbStN8XaRb6/b2I/ObENSWy+MKai2Z2SnDJkT1c=
Subject key identifier: E8:C5:8A:0E:5C:8C:C8:FD:B2:7D:9B:C8:5A:0F:9D:88:0B:8B:55:D7
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0185C675FE1AC8ED632DD291CD337EDB7640
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6MWKDlyMyP2yfZvIWg-diAuLVdc.roa
Signing time: Wed 18 Jan 2023 19:58:19 +0000
ROA not before: Wed 18 Jan 2023 19:58:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 193.43.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:75:fe:1a:c8:ed:63:2d:d2:91:cd:33:7e:db:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 18 19:58:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c58a0e5c8cc8fdb27d9bc85a0f9d880b8b55d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:8b:77:3e:32:4f:69:b0:e6:28:3b:06:c9:
70:f4:57:b0:f1:4a:e1:0e:a3:96:b4:df:7e:58:33:
78:28:61:91:ec:03:81:ae:4b:9f:23:45:2a:ef:ce:
8e:53:38:b9:94:92:7b:7e:3b:f3:81:b6:43:71:3a:
bb:0f:08:00:bc:e2:c1:54:cc:94:0e:f9:36:ea:c3:
7c:d4:cc:3b:d2:aa:31:5f:b6:e8:63:d0:11:24:72:
a7:42:af:16:2b:bd:6b:a5:cd:52:a2:3c:2e:21:16:
b4:d0:81:6a:76:7c:1e:b0:59:bb:ac:30:84:ee:8c:
fa:47:bb:b4:c8:2a:4b:96:7d:90:85:95:40:99:83:
49:53:87:f6:6c:4f:a5:f7:ff:09:30:93:61:02:5b:
30:da:c7:ec:2b:2d:ab:1a:02:18:5f:d5:5b:85:55:
c6:23:cb:39:ad:ff:35:d3:fc:24:3d:b9:52:5f:4b:
af:50:c7:ad:53:ab:45:d1:2e:24:e6:4a:69:c8:5c:
83:3b:da:52:14:b9:db:ed:3d:d5:c3:10:a8:f7:da:
2d:99:4c:9d:10:72:42:f5:17:ad:47:39:ed:a3:4b:
53:fa:fb:69:38:4f:5f:55:a4:b9:f3:fd:ba:09:f4:
95:6d:dc:31:a2:8e:3a:de:33:71:04:96:0e:8a:5c:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:8A:0E:5C:8C:C8:FD:B2:7D:9B:C8:5A:0F:9D:88:0B:8B:55:D7
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6MWKDlyMyP2yfZvIWg-diAuLVdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.249.0/24
Signature Algorithm: sha256WithRSAEncryption
11:90:a1:4a:6b:7b:de:44:05:92:dd:91:22:ad:f3:00:7a:79:
58:30:05:e0:03:ee:d8:a0:56:0a:27:17:cf:0a:fd:b2:76:1e:
77:e5:55:ac:2a:19:8f:ba:ec:e2:c0:7e:79:1e:fe:b7:ad:5e:
cc:07:c0:dc:95:af:61:0d:aa:47:e1:67:cc:e5:aa:6b:02:e8:
84:32:89:20:e2:11:01:40:8f:15:14:cb:9d:7e:b6:d2:0f:30:
42:7d:ac:e3:4f:5e:f1:8e:32:aa:89:fe:c6:7c:f7:77:ee:ac:
f8:39:c7:92:56:60:aa:8b:95:77:6d:39:99:2f:9e:e9:06:70:
de:e0:73:91:77:7a:bb:9a:eb:48:54:b9:5f:e3:17:6d:e9:d9:
0e:41:61:97:0c:bf:a4:d5:6a:20:5e:a6:3a:87:86:b2:d1:f8:
3d:23:c1:79:43:62:68:e1:c1:99:52:52:43:20:a2:be:6e:04:
b1:89:2c:15:6c:b6:84:f4:f6:fa:60:d2:b2:02:c2:46:ea:42:
93:a0:b0:84:17:fd:94:d9:03:69:90:42:33:07:3f:55:1b:26:
a5:8c:69:8b:9d:77:64:6c:2a:64:33:b0:e6:16:29:e7:02:81:
81:df:a9:f6:90:81:bc:49:f7:6f:cc:26:08:33:1e:01:d0:ef:
19:27:d7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 00:41:34 2023 by rpki-client on console-ams.rpki-client.org