Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6z7xqM8_HmLuO0usrliEfr8aQ-U.roa
File: 6z7xqM8_HmLuO0usrliEfr8aQ-U.roa (raw, json)
Hash identifier: zMAQA+5BkLwh6AUM/eKvNWuxu0JSHJiU8Zska0msK1A=
Subject key identifier: EB:3E:F1:A8:CF:3F:1E:62:EE:3B:4B:AC:AE:58:84:7E:BF:1A:43:E5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019090D0761B4AFCA60F0025DB5E3D871704
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6z7xqM8_HmLuO0usrliEfr8aQ-U.roa
Signing time: Mon 08 Jul 2024 05:28:19 +0000
ROA not before: Mon 08 Jul 2024 05:28:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 91.92.27.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
185.221.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 14:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:90:d0:76:1b:4a:fc:a6:0f:00:25:db:5e:3d:87:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 05:28:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3ef1a8cf3f1e62ee3b4bacae58847ebf1a43e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:bf:dd:48:7a:e7:be:30:88:38:3b:ec:29:
fc:ed:bd:1b:c5:fc:e0:d9:21:bd:88:a4:a4:95:44:
51:f4:6a:e8:f2:f1:e4:f5:c2:24:04:57:bd:62:22:
92:77:71:f6:43:5f:d1:c9:06:3a:a6:2e:83:77:0c:
58:73:e5:10:01:89:15:f7:0f:e0:51:4c:a6:93:a5:
df:8c:31:34:8d:a7:78:d9:3d:40:03:bc:81:e7:f7:
55:9b:d7:2f:d6:b7:db:7c:f3:c6:2a:c4:96:dc:0f:
85:3a:17:fc:5c:b1:70:d1:9f:cc:e7:21:3b:c7:a5:
dc:ad:07:c0:d8:39:fe:e1:04:ea:eb:ac:76:9c:42:
40:5a:9d:d3:19:7d:fd:f8:36:1b:bc:a0:9c:5a:82:
94:b8:2f:5d:60:d8:1e:81:c8:ea:ea:88:d2:13:91:
4f:23:ff:36:1a:f9:83:5b:d2:13:b0:48:23:36:6d:
ae:94:04:db:59:0b:eb:e9:76:3d:d9:ac:f5:55:47:
3f:da:3e:8e:4a:ff:37:bf:36:93:0b:d9:f3:82:43:
94:8c:7e:97:07:a5:45:71:92:16:94:f5:8f:6e:16:
77:2a:81:bf:bc:7a:0f:aa:d1:c3:c7:dc:ca:05:87:
5f:b7:10:5f:60:ea:50:62:62:c0:95:83:46:16:8a:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3E:F1:A8:CF:3F:1E:62:EE:3B:4B:AC:AE:58:84:7E:BF:1A:43:E5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6z7xqM8_HmLuO0usrliEfr8aQ-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.27.0/24
94.156.238.0/24
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a4:5e:b1:ff:5c:72:5a:72:78:7e:ea:6f:e4:88:7d:a0:f0:
19:67:d8:8b:06:fb:66:ca:c0:e1:58:df:95:79:8a:fd:69:ac:
7e:a8:a9:de:9c:02:06:56:e7:92:e4:6a:ca:1e:33:6b:de:e7:
9d:12:b0:c4:86:e2:e0:ac:8f:a7:07:84:a4:70:77:66:6f:2c:
0f:ba:36:56:d4:37:51:8d:80:37:dd:a9:de:1d:41:36:20:c1:
63:a7:68:fa:c3:3c:39:0e:d7:12:ef:2a:7e:23:26:4b:9d:f4:
14:dc:94:fa:10:ba:59:d8:b4:c2:79:5b:f3:94:55:0c:88:73:
e7:8b:4b:84:07:66:95:90:20:35:d2:07:43:e6:21:d6:31:a4:
78:97:80:f2:88:34:13:f7:ea:4a:65:32:15:46:84:e0:7d:71:
50:e4:f0:e1:c6:ed:1c:ee:32:19:9a:95:11:96:7c:35:0e:ef:
1c:df:72:20:e2:ab:94:d8:5c:ab:92:fe:51:1b:4c:38:b0:55:
d0:b4:b8:eb:32:b2:43:76:47:73:4e:47:ea:17:22:94:93:0e:
bc:db:19:3a:15:da:65:e9:0e:6d:34:91:f4:90:ec:d5:f8:6d:
ed:6e:b2:05:00:40:79:25:e4:29:14:cb:e3:37:3c:6a:58:b5:
95:49:6d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:03:39 2024 by rpki-client on console-ams.rpki-client.org