Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/6waQNdxD9muMj1z6ZTzqX2cOP_4.roa
File: 6waQNdxD9muMj1z6ZTzqX2cOP_4.roa (raw, json)
Hash identifier: dxwcVnQRjT0u1XgLGK3wAakg3eUrm4UGdERM/uqiD7M=
Subject key identifier: EB:06:90:35:DC:43:F6:6B:8C:8F:5C:FA:65:3C:EA:5F:67:0E:3F:FE
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 0185707065A95283CCA6AA4E0AD54C851CE6
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/6waQNdxD9muMj1z6ZTzqX2cOP_4.roa
Signing time: Mon 02 Jan 2023 03:04:52 +0000
ROA not before: Mon 02 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59497
IP address blocks: 194.44.90.0/24 maxlen: 24
194.44.97.0/24 maxlen: 24
194.44.96.0/24 maxlen: 24
194.44.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:65:a9:52:83:cc:a6:aa:4e:0a:d5:4c:85:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb069035dc43f66b8c8f5cfa653cea5f670e3ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:3d:07:0f:e4:c1:fc:fd:17:92:dc:85:c7:
d4:00:ba:17:b2:26:d6:e9:a1:ce:4a:67:cd:84:ce:
80:53:4a:d8:73:24:cd:7a:17:03:c8:01:04:2c:9d:
a1:a1:39:fc:03:ad:78:e9:c8:24:46:b4:44:1c:e7:
9e:16:90:35:6c:ca:7c:e9:35:da:d7:af:1d:f1:f0:
86:76:4b:be:b0:26:7a:f9:1d:69:01:4a:52:3b:c3:
c0:aa:0b:a8:d2:7b:7b:4a:41:1e:bd:72:b4:77:24:
47:1d:fd:4d:62:0d:47:51:ec:84:4b:4c:56:8a:19:
d5:e0:7c:53:14:1f:49:a6:ad:38:44:fe:63:2f:d7:
fd:7d:34:08:b1:d7:4e:78:32:8c:f6:09:bf:7c:83:
d4:bb:7c:f1:f7:22:b2:fa:e4:74:6e:3c:d4:d2:ec:
d5:38:ca:54:2f:30:cc:47:1c:6a:60:b7:96:58:a7:
42:fc:75:81:34:13:9a:95:7c:06:fe:03:3d:0b:ed:
87:32:6a:f1:b8:94:7e:be:2d:9a:95:b8:20:ef:29:
b0:57:d1:bf:7e:9c:5e:c0:8e:d2:97:70:fc:5d:97:
ae:8e:70:40:68:ca:a7:92:e3:ad:93:12:6e:f9:72:
37:e2:ed:26:1a:bc:d8:6e:2d:c2:9d:bb:dc:8e:a1:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:90:35:DC:43:F6:6B:8C:8F:5C:FA:65:3C:EA:5F:67:0E:3F:FE
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/6waQNdxD9muMj1z6ZTzqX2cOP_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.90.0/24
194.44.96.0/23
194.44.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:73:74:b4:b0:29:62:ca:21:5e:cb:96:e7:9a:5c:1b:e7:a2:
ad:f0:79:42:41:07:2b:51:fb:43:49:dc:9c:1b:5f:f5:f7:38:
f5:17:5d:ec:78:6d:b0:a1:02:d5:35:09:5d:9b:69:dc:cf:a2:
09:62:72:c6:09:84:ec:8c:47:6b:c0:5e:a1:20:8f:33:bd:7f:
c8:f3:ab:8d:e6:31:04:ec:cd:08:36:72:73:05:ba:d3:e9:da:
ea:dc:fc:88:ce:2d:cb:1b:20:bc:6f:a5:ee:85:4c:58:e4:81:
12:3c:cd:b0:48:87:79:95:a2:32:06:4a:4e:4d:4a:12:0b:bc:
ca:04:7b:dd:21:33:ec:f7:bf:3f:09:28:c9:12:8c:d6:c4:02:
db:74:72:61:71:f5:f9:74:bd:be:38:1c:a4:d8:d1:05:5e:0d:
05:00:d2:a6:3a:59:7e:f6:e7:3c:ec:04:0a:8d:1d:14:25:df:
1d:f5:ba:71:32:c7:e2:02:69:b8:04:e4:01:4b:84:15:2c:79:
cc:7b:ca:eb:71:df:b9:c9:fb:12:00:ed:56:6f:7b:84:73:eb:
26:19:9b:2f:a9:66:a9:53:69:73:64:a5:85:37:6a:94:95:00:
a6:ce:26:3a:64:31:5d:c3:6e:cf:52:33:af:b5:26:f3:d1:6f:
99:f9:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org