Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6g5ARq0_3r9WRgLR2B-ZwBdoHHw.roa
File: 6g5ARq0_3r9WRgLR2B-ZwBdoHHw.roa (raw, json)
Hash identifier: 0SfXYrpL4QFNLF6keplwbpxYB4FLSGPm9dhFo0DqSNA=
Subject key identifier: EA:0E:40:46:AD:3F:DE:BF:56:46:02:D1:D8:1F:99:C0:17:68:1C:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01887BEEDEAC4C31968E20E77298BDB1CFCA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6g5ARq0_3r9WRgLR2B-ZwBdoHHw.roa
Signing time: Fri 02 Jun 2023 11:47:12 +0000
ROA not before: Fri 02 Jun 2023 11:47:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 62.76.226.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:ee:de:ac:4c:31:96:8e:20:e7:72:98:bd:b1:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 2 11:47:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea0e4046ad3fdebf564602d1d81f99c017681c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:d8:1c:94:4a:80:a6:fa:dc:8a:90:9b:ff:
34:22:dc:cf:59:6f:f2:2f:67:08:20:a9:42:2a:f3:
6e:48:5c:1c:84:9a:d7:37:56:fd:1e:eb:66:38:2d:
ab:35:ab:8d:04:5e:28:27:bd:73:bf:45:f4:e8:49:
1b:42:a8:66:5a:6d:f4:98:df:a6:55:9c:a3:b0:e8:
98:f4:0b:18:fd:af:e3:20:54:2f:29:72:69:a9:40:
53:b7:77:26:82:1e:e0:42:f2:8e:bf:61:64:59:7e:
24:18:1c:8e:b1:55:03:d0:c8:dd:a9:34:63:7e:22:
0c:c2:a1:af:03:a6:70:8e:33:49:69:30:48:5b:0f:
75:be:ed:4b:66:74:cd:06:c1:7e:7f:d2:b5:de:1e:
cb:d6:fe:1f:9c:1e:d8:13:58:f1:32:bb:77:bc:83:
55:bc:d8:12:6e:6e:35:e8:5a:54:a5:74:74:29:6f:
22:aa:1c:23:2b:a1:65:75:4f:5b:6c:39:65:02:38:
c8:d0:82:ec:af:4d:ce:59:69:f6:b4:f1:c6:5b:ca:
66:39:db:69:22:69:78:9e:fe:27:1a:02:20:b9:f8:
17:25:a3:49:0c:f8:74:5d:6b:c2:68:d9:50:85:ea:
16:c9:02:dc:76:77:34:55:da:b9:67:66:15:59:37:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:40:46:AD:3F:DE:BF:56:46:02:D1:D8:1F:99:C0:17:68:1C:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6g5ARq0_3r9WRgLR2B-ZwBdoHHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
194.87.91.0/24
194.87.188.0/24
195.58.56.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b0:8b:a3:0e:7c:84:60:79:5c:b5:7d:3e:8e:08:6b:ea:74:
fd:59:c2:d9:5a:e4:37:1d:9f:a9:23:d3:a0:d6:e7:8c:4f:95:
cd:aa:c8:14:4a:71:df:65:13:c2:d9:4e:ec:4f:90:b1:20:d5:
09:e6:80:a2:43:1c:e1:1e:9e:c2:15:3e:7d:8a:ba:14:f1:5d:
e6:9a:08:2d:c7:6d:a9:a7:22:d5:8b:80:b4:78:a3:a5:87:a7:
6d:ce:15:11:21:b8:80:a9:53:a8:ad:65:0f:f3:34:77:7a:54:
20:c8:cb:a4:ae:2f:4d:45:90:6c:dc:02:c0:35:1e:22:b9:ee:
17:c6:e1:89:5b:33:40:e4:53:8d:a1:2d:3b:81:4d:31:c5:d3:
2b:97:f0:e0:a4:2c:97:ed:b1:cf:f8:91:4f:a4:10:37:79:a0:
c4:6b:02:0f:34:8d:1a:99:17:e4:ac:ad:d6:b3:ad:4f:ca:ea:
2c:1d:91:d6:43:5d:0e:e2:3f:4c:39:80:f1:80:6f:40:e5:01:
6d:06:c5:7c:04:0c:37:ab:a1:eb:ea:7c:6c:0b:70:5b:d5:9e:
39:69:6e:4a:a8:67:24:95:c7:5c:1f:a6:1e:90:cd:9f:d0:b2:
1f:7d:c1:95:53:cf:8e:00:db:e2:7c:a7:b6:4f:bc:e6:63:6d:
e7:e4:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org