Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/6t_JTkeT0V_Ojyfm6-NXEkhKTLo.roa
File: 6t_JTkeT0V_Ojyfm6-NXEkhKTLo.roa (raw, json)
Hash identifier: WxsysOedI4mjQvmZXpb+FFieQwd0izEMsPWf/c4DiPA=
Subject key identifier: EA:DF:C9:4E:47:93:D1:5F:CE:8F:27:E6:EB:E3:57:12:48:4A:4C:BA
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 01856D0A94BA885157EAAE821196275E153D
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/6t_JTkeT0V_Ojyfm6-NXEkhKTLo.roa
Signing time: Sun 01 Jan 2023 11:14:48 +0000
ROA not before: Sun 01 Jan 2023 11:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2259
IP address blocks: 147.100.144.0/23 maxlen: 23
147.100.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:94:ba:88:51:57:ea:ae:82:11:96:27:5e:15:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Jan 1 11:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eadfc94e4793d15fce8f27e6ebe35712484a4cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:ea:45:60:c9:19:d3:94:76:47:2c:e2:43:
cd:0e:f5:ad:41:c6:a7:59:a1:bc:3a:8b:dc:ff:6a:
c0:9a:f1:be:18:87:ee:74:d9:03:3d:66:66:d9:e9:
17:68:37:1f:7b:64:75:c6:b9:ab:bd:14:73:01:97:
af:bf:40:33:92:58:6c:9e:c4:3b:dc:e7:d8:37:1b:
47:a6:0b:94:a2:4c:e0:63:f4:02:bb:31:a3:60:36:
46:ef:01:f1:04:31:84:59:2a:06:b9:36:05:cf:0b:
5f:15:b2:6d:34:2e:1f:b0:5b:50:a5:dd:41:c2:de:
ad:05:9c:90:7d:04:1a:44:ac:a8:c8:21:5a:ca:ea:
a9:e2:f1:8b:6c:98:06:a2:c9:eb:54:68:e9:91:ca:
00:59:96:78:b4:7c:71:d6:2d:ab:f8:b2:e5:13:1f:
dd:ff:4a:a7:7e:61:c8:59:bf:d2:dc:14:5b:ec:5f:
ae:a8:3c:5c:ac:1d:38:2a:14:8e:95:8d:bb:7d:8a:
73:b9:97:c5:a2:c4:68:fe:41:8a:75:84:ff:15:0b:
4e:01:25:d5:fb:ff:91:42:19:b1:46:4b:d0:60:1e:
98:36:89:ad:12:3d:02:d4:80:e1:e5:2e:e0:ae:d4:
20:0f:ac:c5:d3:99:f6:21:16:ce:97:bb:14:05:81:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:C9:4E:47:93:D1:5F:CE:8F:27:E6:EB:E3:57:12:48:4A:4C:BA
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/6t_JTkeT0V_Ojyfm6-NXEkhKTLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.100.144.0/23
147.100.188.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c5:7f:28:2c:26:ea:15:92:72:90:0c:b1:64:87:a9:78:d8:
f5:6d:ed:54:e2:e6:e2:1d:95:cc:b3:36:89:55:6d:a5:3a:b6:
16:76:ed:6c:8b:bd:da:71:8e:0c:33:40:2c:3e:20:93:65:56:
a8:f3:44:7d:a2:ad:b6:b7:24:15:4e:83:13:73:bf:2e:5e:21:
2b:02:75:e5:07:80:c0:50:c9:70:fe:32:4e:d7:2c:5d:45:4d:
31:7e:90:66:53:53:4f:53:91:be:9c:eb:60:48:86:e7:d8:65:
c9:8c:ff:70:aa:72:2b:95:13:0d:59:76:ec:16:3e:27:21:57:
da:f9:a5:23:6a:40:28:62:03:84:29:24:8a:13:bc:41:83:aa:
c7:33:5d:0e:9e:15:d5:7b:d8:ec:59:44:15:27:3a:56:3d:91:
c4:53:8e:57:43:e8:83:3a:03:05:7f:4a:f8:ea:18:29:aa:c9:
eb:0a:24:73:1b:01:29:0c:fa:35:8c:bd:83:e7:99:ba:e0:49:
a0:a5:f1:b7:ab:55:7e:99:08:6d:e7:b7:75:a1:81:e3:12:fd:
00:66:0b:67:ad:30:65:8d:d0:01:c7:36:15:30:54:7c:18:8f:
20:c2:99:58:c7:f6:90:1f:7c:9e:1f:60:50:0c:34:46:d9:de:
fa:45:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:57 2024 by rpki-client on console-fra.rpki-client.org