Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6ZQtiUIDbUYVviz_JlPlhbGJgrQ.roa
File: 6ZQtiUIDbUYVviz_JlPlhbGJgrQ.roa (raw, json)
Hash identifier: 50mip3p8amflQab6DXPkB2Ql0X02ntqhDQaJQewIyg8=
Subject key identifier: E9:94:2D:89:42:03:6D:46:15:BE:2C:FF:26:53:E5:85:B1:89:82:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B940CEAB00696147C32ED84689818F0E8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6ZQtiUIDbUYVviz_JlPlhbGJgrQ.roa
Signing time: Fri 03 Nov 2023 07:19:16 +0000
ROA not before: Fri 03 Nov 2023 07:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:0c:ea:b0:06:96:14:7c:32:ed:84:68:98:18:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 07:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9942d8942036d4615be2cff2653e585b18982b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:6b:b0:f4:00:af:c3:78:54:50:ac:c6:f6:
84:da:b3:59:b7:78:c0:47:c0:9f:1f:97:46:55:25:
14:49:5f:53:0d:d8:c9:52:f2:83:8c:e8:e2:16:31:
0f:4a:26:9a:dc:e9:6d:17:d6:35:b5:77:94:c8:cf:
61:4a:fb:94:37:ff:3b:f0:82:ba:2e:0c:61:40:ff:
0c:c1:8c:5d:e4:12:7a:7a:84:6e:e2:51:e7:d3:d7:
77:2e:ac:60:37:97:41:f0:29:51:49:f8:8c:99:63:
1e:57:c2:f7:ea:d3:b4:91:33:31:68:dd:8b:52:99:
51:87:92:29:98:67:23:c2:a3:c3:4a:d3:4f:5b:87:
fb:6e:6d:a7:aa:3c:36:41:cc:07:7a:de:70:ce:84:
05:84:1a:40:59:66:1b:6c:20:29:b0:41:e2:df:a0:
52:a0:53:49:eb:5e:66:d2:bc:d5:f8:43:f3:ac:df:
1a:06:ec:13:3d:c1:d6:00:9b:4a:7f:85:79:0f:92:
84:d7:38:dd:ab:16:7f:2d:e7:22:69:c6:04:a8:a3:
7a:52:29:0e:2a:6d:0f:17:cd:55:0d:a1:f1:f3:e8:
d8:d7:fb:f9:5a:71:42:a5:45:18:0b:78:93:87:70:
dc:d3:6b:c4:29:b5:74:7e:69:be:7a:f3:f3:5a:21:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:2D:89:42:03:6D:46:15:BE:2C:FF:26:53:E5:85:B1:89:82:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6ZQtiUIDbUYVviz_JlPlhbGJgrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.84.0/24
109.206.237.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
97:16:f9:67:45:35:b4:5c:92:0f:90:5c:ac:e4:b4:eb:c7:d3:
85:cb:bf:a8:e5:8f:3a:eb:78:af:6a:3b:12:8b:32:8f:af:56:
96:cb:70:63:b7:4c:98:59:86:2d:23:c8:0e:ad:34:04:34:35:
03:f1:98:38:c5:44:b0:f6:35:10:1a:61:89:64:40:2f:41:db:
16:95:62:fd:8d:76:f2:14:10:8d:fe:17:49:ee:59:18:d3:eb:
91:a2:55:f8:cd:17:8c:c7:01:da:a6:da:f7:78:0b:e8:46:7a:
5c:3b:34:17:22:1d:49:3a:58:45:b4:9e:2f:dd:e3:db:fa:1e:
37:15:44:8c:85:79:46:37:5a:87:9c:fd:5e:c7:71:ca:e3:06:
d3:ce:bd:37:25:90:fd:ae:09:1c:12:7f:24:49:24:b4:6d:f7:
8c:b8:f6:86:da:7e:6e:6b:3c:5f:4d:41:69:1e:35:e2:30:f2:
a0:0d:36:fd:54:c9:d8:b3:03:37:c1:1a:21:31:79:2c:f4:da:
44:bd:9d:b3:82:95:10:e8:69:3e:4a:57:fa:28:f0:74:5f:3a:
b1:3a:88:68:69:41:b3:11:84:b4:4f:42:41:43:05:ea:4e:24:
cf:1c:ee:77:c0:18:f5:d3:5b:17:0e:f6:2c:35:5c:8b:dc:b3:
af:d0:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 18:04:10 2023 by rpki-client on console-ams.rpki-client.org