Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/I_6veExTR5cHxviLSC2X3p6YFpQ.roa
File: I_6veExTR5cHxviLSC2X3p6YFpQ.roa (raw, json)
Hash identifier: u8xK/6ojfYChMuR8773htn86KvUrgjg4TcZhBFNniQQ=
Subject key identifier: 23:FE:AF:78:4C:53:47:97:07:C6:F8:8B:48:2D:97:DE:9E:98:16:94
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0186FE598EC39C47C9C15E0F42CD0CC942D9
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/I_6veExTR5cHxviLSC2X3p6YFpQ.roa
Signing time: Mon 20 Mar 2023 09:28:47 +0000
ROA not before: Mon 20 Mar 2023 09:28:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209493
IP address blocks: 193.109.136.0/24 maxlen: 24
45.141.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:59:8e:c3:9c:47:c9:c1:5e:0f:42:cd:0c:c9:42:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 20 09:28:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23feaf784c53479707c6f88b482d97de9e981694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:bd:99:da:b0:ad:a2:87:b7:04:97:82:67:
e8:db:be:ed:47:b5:f8:81:c2:10:f7:b2:bb:0e:ff:
b0:aa:d5:6a:bc:51:bc:e7:5c:da:76:9c:8e:44:af:
93:aa:a1:70:a5:fe:81:a9:9a:c6:6f:d6:ac:cb:3d:
b3:7e:f0:37:58:09:24:15:f9:5e:7a:7e:64:1d:c5:
67:a6:41:a2:e3:c2:49:5a:ca:d8:e0:d3:84:16:52:
3f:3a:08:48:26:14:c2:70:89:9a:64:21:52:57:ba:
2e:4e:aa:d5:3d:f0:b1:cf:ad:b4:c3:ff:b6:5b:05:
80:a3:0f:ad:be:d5:49:4f:18:c6:08:7b:7d:3c:6f:
c2:6c:d4:92:99:14:39:1c:30:68:97:48:25:61:45:
70:b5:64:7f:92:a4:15:fe:d5:57:40:64:94:5d:4f:
55:03:52:c1:23:c5:f5:90:53:fd:67:cb:c8:a9:42:
c3:b0:b8:2c:80:76:f5:e2:84:49:8a:27:0a:e2:07:
4a:f8:60:f6:f4:65:76:16:9d:0c:61:44:59:99:95:
ed:73:6f:11:b8:35:7e:2a:cb:3c:aa:78:5d:b0:8d:
85:05:4d:c8:69:8a:cf:ec:78:73:72:87:09:92:b3:
be:84:87:80:43:28:bc:14:a8:8d:59:1e:30:22:de:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FE:AF:78:4C:53:47:97:07:C6:F8:8B:48:2D:97:DE:9E:98:16:94
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/I_6veExTR5cHxviLSC2X3p6YFpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.61.0/24
193.109.136.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a0:f1:74:c7:29:fd:8a:90:d9:a3:ac:bd:85:32:47:b2:16:
b9:fe:9c:15:1a:82:6b:34:4d:c3:9b:ad:e7:bf:4e:5f:af:bc:
cc:2c:47:57:a1:30:0f:5c:65:d2:d0:0b:f3:e9:6b:f4:54:ba:
b3:72:eb:73:59:ca:7a:30:fc:f9:65:ba:ae:e2:d5:cd:6e:22:
3c:d7:79:fd:86:80:fa:ad:38:a8:7b:23:db:ad:20:67:17:b1:
a1:88:55:a2:14:5e:95:fa:a5:99:80:94:ef:a6:81:e5:a9:73:
72:43:da:e4:1d:aa:15:48:4c:d1:96:2c:af:cb:7e:e4:32:c8:
06:a6:3b:7d:09:b3:5a:4e:b9:95:b7:5e:b5:78:b8:de:09:0c:
69:c5:6f:e9:8f:e8:6a:78:ab:12:e5:cd:57:db:9a:c8:5e:51:
7d:bb:7a:cf:01:f9:b7:5d:0b:db:c5:06:74:ec:eb:45:3c:5b:
bc:3c:7b:19:eb:06:0b:77:d0:fb:c5:21:6a:5b:65:b0:fc:99:
a0:43:69:a6:ad:24:71:ea:a4:67:6c:91:5a:a9:60:4a:47:ab:
e3:f2:db:fc:94:3c:22:c1:74:ee:57:b8:68:5e:17:72:90:20:
73:27:4d:ed:d8:79:b6:ff:11:78:dd:5c:14:8c:49:c4:d0:62:
77:b3:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org