Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/6XnZuNPfkK3ELyaiTmVQAubEVnU.roa
File: 6XnZuNPfkK3ELyaiTmVQAubEVnU.roa (raw, json)
Hash identifier: Rn65vIEgn/Y21kyuW6hj/Pf9SgHpecIbbtsmqVdM17I=
Subject key identifier: E9:79:D9:B8:D3:DF:90:AD:C4:2F:26:A2:4E:65:50:02:E6:C4:56:75
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 018794AE927F8408DA89B0677889CDF10104
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/6XnZuNPfkK3ELyaiTmVQAubEVnU.roa
Signing time: Tue 18 Apr 2023 14:04:41 +0000
ROA not before: Tue 18 Apr 2023 14:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 147.189.19.0/24 maxlen: 24
147.189.20.0/24 maxlen: 24
147.189.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:ae:92:7f:84:08:da:89:b0:67:78:89:cd:f1:01:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Apr 18 14:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e979d9b8d3df90adc42f26a24e655002e6c45675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:93:06:28:9c:33:8e:45:44:e5:4c:16:cb:
0d:71:04:fa:5a:17:3b:dc:fe:96:e4:6a:71:65:3c:
01:75:83:d0:e5:1f:05:03:87:16:f8:94:c4:68:7f:
b0:cb:ab:4c:96:4d:4e:f3:9b:ac:9e:ed:15:7b:6c:
b7:db:01:dd:ab:db:78:a4:e8:2c:d5:a0:d1:1b:b3:
40:aa:82:29:c4:15:97:ee:44:dc:ae:ec:78:42:4a:
80:06:12:ec:7a:e6:0d:3c:2d:1a:87:ce:50:fd:c8:
13:cf:5a:43:cb:11:9d:69:2a:db:6e:a2:bb:cd:4e:
bb:15:be:22:4e:47:b1:a7:e0:dc:d0:22:ab:ac:dc:
05:dd:18:05:60:4d:9f:4e:11:3e:8c:d8:5a:30:32:
31:9d:fb:19:e7:01:79:cd:eb:c3:6d:f8:fd:27:ec:
0f:50:9e:a3:25:67:80:bb:f8:32:8d:75:ce:1f:32:
46:29:e5:c3:ac:ac:4e:0f:a8:8a:8a:6f:31:5f:f5:
9f:f9:30:f0:e9:d9:e1:4e:c6:de:a7:1b:4a:14:1f:
6f:6e:9d:9d:89:00:8c:11:9f:50:5e:72:c0:47:12:
e4:fd:45:bf:7b:77:2e:8c:14:dc:e1:2c:72:22:6c:
b8:1c:69:27:08:d2:d4:46:78:27:19:c9:48:9c:e3:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:D9:B8:D3:DF:90:AD:C4:2F:26:A2:4E:65:50:02:E6:C4:56:75
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/6XnZuNPfkK3ELyaiTmVQAubEVnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.18.0-147.189.20.255
Signature Algorithm: sha256WithRSAEncryption
3c:87:a7:42:e3:22:7b:e0:fb:5d:c2:78:5b:9a:55:5e:18:9e:
d4:2d:cd:3e:29:79:c2:f5:74:ef:d4:87:ca:c9:78:a0:ae:83:
f7:71:47:57:35:0f:c1:40:fd:25:d7:7f:3a:1a:54:b6:f4:2f:
96:7f:37:5b:7d:ac:e1:99:c1:d7:e2:bb:66:21:b3:04:fd:b2:
62:1a:7e:e3:ba:95:ee:d1:ec:20:00:48:b6:38:21:b9:fd:7e:
37:12:68:dc:87:fb:48:65:c9:1d:2a:9a:e2:79:93:17:32:1a:
ae:3b:00:67:ea:a3:ba:82:aa:2a:5b:bc:70:5f:fa:ff:5e:d5:
dc:61:c8:ab:3a:c0:f3:5a:82:5a:8e:53:c7:55:0d:00:3a:d6:
27:a0:1b:92:a8:49:b1:c0:24:48:fb:cd:c6:94:a3:c0:b1:8f:
1c:37:1e:56:83:76:a1:b6:5b:be:a6:e3:a2:ee:30:0d:9a:a5:
ed:09:dc:95:5f:9f:40:5d:8b:a2:e5:6a:b4:8f:94:04:ba:29:
35:66:c3:8a:d8:0b:4c:82:bc:a0:af:97:fd:51:bd:15:58:32:
47:87:a9:21:50:1d:f6:22:e2:e5:d5:7d:41:3b:f4:99:33:56:
6f:dc:0c:0b:ec:1c:d7:49:95:8b:87:05:09:d5:e4:5a:ea:57:
23:4f:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org