Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6xhyqwYcP2gzmB7ypI6EUFPU7VE.roa
File: 6xhyqwYcP2gzmB7ypI6EUFPU7VE.roa (raw, json)
Hash identifier: DhLTOz5T7s0NR/XgI+DT1KWJfjH0k4aeSzimYBywRKE=
Subject key identifier: EB:18:72:AB:06:1C:3F:68:33:98:1E:F2:A4:8E:84:50:53:D4:ED:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01882EFA47D70F5F03A62D2D90AD6D59689F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6xhyqwYcP2gzmB7ypI6EUFPU7VE.roa
Signing time: Thu 18 May 2023 13:08:54 +0000
ROA not before: Thu 18 May 2023 13:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 09:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:fa:47:d7:0f:5f:03:a6:2d:2d:90:ad:6d:59:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 18 13:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb1872ab061c3f6833981ef2a48e845053d4ed51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:8a:0c:f4:be:fd:08:39:46:59:02:2a:4a:
c6:c1:c7:cc:56:10:49:55:23:83:2e:f0:84:51:1f:
2a:b6:4a:21:55:aa:37:02:23:d4:8a:c5:74:19:ed:
a1:77:11:fb:b6:6b:ad:81:36:0d:a8:7c:90:f3:1c:
97:c3:80:13:20:a3:c0:f9:85:a7:0f:f4:ec:29:c3:
8d:73:43:c1:bb:83:89:4e:44:62:03:6e:cc:e7:78:
a4:cc:95:d0:cc:59:b4:04:c5:bb:7e:ad:89:e0:8a:
80:5e:8d:67:57:70:02:d4:a8:6c:f7:64:68:0c:b4:
3b:5a:f6:02:0e:fe:de:d9:ce:db:8b:9a:55:b7:c1:
0d:f6:f9:f5:6d:c7:2d:24:a6:6e:b9:53:c2:27:78:
d8:62:e9:e8:a9:89:e0:c2:51:9b:3f:5c:2f:e5:9b:
b2:6e:c9:44:41:22:fb:d0:80:c5:c6:95:49:86:6a:
70:67:45:51:17:4e:cd:8b:b8:b4:d7:07:6d:0e:c4:
39:e7:6f:4f:f1:e1:21:41:4e:a4:ae:24:50:bb:4b:
a8:1c:a9:58:a4:a2:72:e7:fd:a1:7e:8a:06:b3:f9:
9a:06:a6:e8:d6:1a:5b:ba:63:b1:6f:69:e1:dd:c0:
fb:55:a5:9b:9e:c2:a1:60:6a:b6:3c:c0:c5:62:61:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:72:AB:06:1C:3F:68:33:98:1E:F2:A4:8E:84:50:53:D4:ED:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6xhyqwYcP2gzmB7ypI6EUFPU7VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
45.9.157.0/24
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c0:67:23:61:4f:1a:35:93:58:ae:68:eb:42:1c:51:5d:12:
4e:fb:af:81:72:cc:31:e8:d7:59:79:bd:6e:8d:8f:63:79:1a:
fb:05:e9:5c:fb:42:d4:fd:04:ca:45:b5:9c:98:35:e8:bf:83:
1e:fd:4a:51:61:9f:49:39:89:a4:9f:96:c1:72:04:11:ff:ad:
e2:2e:b4:b8:f3:1d:36:bd:81:fd:7b:76:c7:5b:8c:b5:57:bb:
c9:4d:4d:2e:b9:42:55:24:6f:66:93:63:70:94:f9:fc:d1:45:
db:2f:13:74:39:d0:7d:25:2f:e0:9e:a0:5c:94:28:19:9a:ac:
c4:04:8b:b3:b1:5c:39:de:1a:88:df:17:d7:5b:99:52:b8:4d:
88:62:02:23:0e:e4:f7:b2:84:30:11:e0:97:56:e2:58:0e:c3:
e3:50:b2:c0:ac:df:23:72:e7:7c:9c:4e:a0:2c:aa:3b:f7:d7:
c9:ca:cd:21:75:0b:89:b7:75:be:9f:57:24:5d:0a:28:57:57:
96:4c:67:f9:05:29:31:de:47:5f:25:88:8a:a7:00:5c:d8:1e:
cd:1c:bc:6a:3f:8f:2d:44:c3:f0:41:f0:19:5f:18:98:46:3d:
e1:05:61:5a:14:38:90:30:6d:68:e0:9b:92:8d:78:0b:47:9d:
3c:69:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:59 2024 by rpki-client on console-fra.rpki-client.org