Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/6J-4tTccRICav2MH3r1y3KSSDKg.roa
File: 6J-4tTccRICav2MH3r1y3KSSDKg.roa (raw, json)
Hash identifier: /QXgr7nLzeiAE/bpBIOPHN4wXmzrYZoOXKE7sbNyFes=
Subject key identifier: E8:9F:B8:B5:37:1C:44:80:9A:BF:63:07:DE:BD:72:DC:A4:92:0C:A8
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 018B5BAE5FCD2BB9A0F285DFB66873807C94
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/6J-4tTccRICav2MH3r1y3KSSDKg.roa
Signing time: Mon 23 Oct 2023 08:37:16 +0000
ROA not before: Mon 23 Oct 2023 08:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13101
IP address blocks: 95.214.160.0/22 maxlen: 22
185.243.68.0/22 maxlen: 22
89.28.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:ae:5f:cd:2b:b9:a0:f2:85:df:b6:68:73:80:7c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Oct 23 08:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89fb8b5371c44809abf6307debd72dca4920ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:a2:f9:93:bb:4d:2b:95:d6:86:c4:22:03:
0f:66:12:13:0d:3f:23:05:51:06:fa:a0:86:99:77:
81:21:b1:af:83:e1:a6:84:8c:a6:62:83:47:12:47:
8b:c3:89:5d:37:72:53:0e:79:ff:9c:9a:69:e8:ff:
2e:cb:14:b6:4c:bc:9d:30:3b:14:f6:f7:d4:32:6c:
eb:f2:32:d6:69:d3:0d:bf:67:8b:18:a7:ac:f5:1b:
d0:20:68:fd:3e:8a:79:72:31:dd:d6:b9:82:b4:70:
1f:3e:cf:16:5e:0b:48:de:9d:0a:c6:b2:de:71:f5:
43:b1:5c:51:10:0d:79:f9:6a:a6:da:51:55:c5:a4:
33:62:f8:0e:a2:fb:ba:6d:36:40:ee:10:11:14:6e:
ea:82:5e:cc:06:57:a0:c2:fb:af:d2:fc:56:24:40:
c0:03:15:2e:ce:b4:5d:41:7f:10:4b:e1:43:b0:0e:
83:ae:a2:5a:9c:d4:90:7f:c8:34:49:9e:64:a5:46:
77:44:4e:b8:fd:23:8a:2f:26:0c:96:23:47:bd:8d:
81:55:92:1a:6b:d7:e6:fb:1c:4b:61:72:f9:d2:9d:
ad:96:4c:b3:f4:6c:d6:0a:f2:7b:3f:c5:d3:f0:57:
c2:95:18:83:78:14:3c:ad:10:cc:57:ea:b0:9d:7b:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:B8:B5:37:1C:44:80:9A:BF:63:07:DE:BD:72:DC:A4:92:0C:A8
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/6J-4tTccRICav2MH3r1y3KSSDKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.176.0/21
95.214.160.0/22
185.243.68.0/22
Signature Algorithm: sha256WithRSAEncryption
26:78:13:97:e7:d5:21:cc:62:b3:4c:e5:cc:40:9a:21:17:ee:
1c:8a:65:06:c1:25:4f:5c:c0:e3:65:db:61:41:24:87:ac:f0:
17:fe:f1:15:94:de:e5:6c:19:18:6c:56:38:0d:e6:c3:3d:f9:
2f:91:1c:cd:6c:8f:83:b0:cb:40:10:38:7c:16:da:38:50:a6:
bf:72:ba:71:f7:c7:a2:57:21:08:9e:f0:df:d7:5c:00:ad:0b:
53:a2:67:6b:9c:55:52:d9:9b:2f:84:5b:e4:01:08:88:2e:7e:
b7:53:5e:0f:86:67:01:bc:95:a9:ef:d3:a1:e2:eb:d8:da:6f:
4c:1d:75:e3:b1:1d:ba:d1:57:14:18:94:25:38:61:1c:a1:56:
1a:5e:53:ff:88:06:94:49:ee:b0:bb:62:7c:f6:b3:0e:89:22:
0a:6e:29:ce:30:e7:72:33:f0:3d:dc:c8:ed:49:72:39:e2:29:
09:c4:6d:e1:7c:a7:e2:30:87:67:a9:63:37:b8:2a:ca:37:f5:
dc:d4:04:31:95:98:ed:97:08:d0:c9:85:07:a2:07:73:2f:da:
9e:ea:25:e2:c8:73:12:04:96:6e:dc:cb:e1:f3:17:3e:49:68:
ef:2f:5f:31:aa:0c:1d:c7:49:d3:13:31:72:64:ed:e1:01:2a:
bd:22:90:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:59 2024 by rpki-client on console-ams.rpki-client.org