Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/6YfT53VTsRM7ZTB_nJMoA-yczjE.roa
File: 6YfT53VTsRM7ZTB_nJMoA-yczjE.roa (raw, json)
Hash identifier: DslgUiuVEd0o4Auw+Tj6GZrAttBgv501bCCEqh/Fm/E=
Subject key identifier: E9:87:D3:E7:75:53:B1:13:3B:65:30:7F:9C:93:28:03:EC:9C:CE:31
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 01856DD43D4A8E97F48CE2B9E64B471B9059
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/6YfT53VTsRM7ZTB_nJMoA-yczjE.roa
Signing time: Sun 01 Jan 2023 14:55:03 +0000
ROA not before: Sun 01 Jan 2023 14:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201841
IP address blocks: 195.146.135.0/24 maxlen: 24
195.146.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:3d:4a:8e:97:f4:8c:e2:b9:e6:4b:47:1b:90:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jan 1 14:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e987d3e77553b1133b65307f9c932803ec9cce31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:24:2b:a1:88:a9:43:e8:7f:fa:7f:a9:85:
c5:ba:58:c6:f9:11:ec:7c:ea:ff:d2:ad:ab:c3:f8:
cd:1f:f0:12:f0:78:74:32:8f:73:38:e2:74:1f:d5:
b2:8b:d8:63:9a:9c:ca:db:df:b8:2e:11:32:f9:c5:
7f:ec:8e:aa:9e:c1:8e:42:23:34:77:4b:87:53:2c:
fe:68:33:41:bc:f5:bd:0e:6f:1f:1a:8f:f9:33:8b:
30:28:63:6d:c3:f3:ab:49:56:1d:35:a0:19:eb:08:
d2:ce:e0:81:b0:35:dc:6f:92:35:d4:0a:1c:b6:30:
b1:8b:83:1b:16:db:f1:f7:98:86:ab:c9:b4:f4:f4:
b1:6a:c7:d6:b5:63:eb:46:0b:53:0f:f1:35:e7:2c:
39:1f:e1:ac:fc:51:1e:f7:78:c0:fa:3b:b4:73:b0:
3d:49:7d:14:96:0d:5a:99:26:2b:25:8b:3b:b4:f7:
7b:72:6f:c6:ee:e0:15:f5:96:9f:38:0c:24:7f:1d:
59:f2:77:a6:78:38:1b:d1:ad:45:6f:6e:34:79:cb:
e1:3d:8d:19:df:f2:59:6c:0d:cd:3c:b4:51:61:01:
1e:a6:de:e4:d5:81:03:91:85:56:ab:6b:be:d0:f5:
2e:1d:d9:71:5a:92:c2:e2:3a:79:9b:64:40:dd:3f:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:D3:E7:75:53:B1:13:3B:65:30:7F:9C:93:28:03:EC:9C:CE:31
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/6YfT53VTsRM7ZTB_nJMoA-yczjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.135.0/24
195.146.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ad:25:20:a1:69:f8:c3:a6:03:7d:b5:2f:66:b0:e5:70:0e:
d2:a2:a8:20:c0:b0:6e:ed:18:8c:5c:47:04:77:ab:1f:7a:b1:
3d:d0:df:e4:49:f7:af:35:57:49:48:1a:37:7b:11:af:4e:32:
7d:0a:96:70:e0:47:1d:90:3b:1c:35:f3:9d:46:aa:4a:29:7d:
08:08:97:90:d8:81:48:04:e8:30:8a:a5:da:f5:90:e2:e2:6f:
9f:bd:d1:73:81:9a:14:65:39:bf:e0:73:2a:34:6d:08:2f:9c:
e1:0a:ba:11:25:3e:54:ae:94:e0:bd:a3:45:b4:ba:59:df:7f:
09:4c:31:a6:ea:5e:cb:a2:4a:21:81:50:d7:0b:51:e7:4e:55:
a9:1b:03:59:4c:d0:ef:48:27:b6:fc:f4:c0:3a:6f:c4:66:d4:
ec:e0:31:50:fa:cc:86:29:5d:bc:55:ce:4e:f7:3a:b7:f5:7a:
85:2e:46:df:63:c3:53:55:8d:3a:4d:c6:4e:29:57:cc:00:fb:
c9:5a:58:3e:c7:dc:07:76:15:89:78:8b:98:7d:00:30:cf:ce:
e9:bc:d9:1b:67:bb:7b:f7:93:76:e4:48:8f:e7:47:72:76:23:
38:1f:cb:4f:43:6a:a0:e8:3b:1c:c0:7b:61:0e:b5:b7:a1:6b:
60:20:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:45 2024 by rpki-client on console-fra.rpki-client.org