Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/Ywq3c5DLt6XfZP-otGfOmJK3xTc.roa
File: Ywq3c5DLt6XfZP-otGfOmJK3xTc.roa (raw, json)
Hash identifier: R2fYhKr0B7Jq/uWeUP7GiwnvHa4QHZNtvw5BQTF49Uk=
Subject key identifier: 63:0A:B7:73:90:CB:B7:A5:DF:64:FF:A8:B4:67:CE:98:92:B7:C5:37
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 018CC3B694BB8AD78DAA674110A7B4256EB1
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/Ywq3c5DLt6XfZP-otGfOmJK3xTc.roa
Signing time: Mon 01 Jan 2024 06:29:31 +0000
ROA not before: Mon 01 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210626
IP address blocks: 91.242.247.0/24 maxlen: 24
2a11:af40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 15:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:94:bb:8a:d7:8d:aa:67:41:10:a7:b4:25:6e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630ab77390cbb7a5df64ffa8b467ce9892b7c537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:11:81:e6:63:c8:21:14:45:33:19:e9:93:
0d:61:02:a2:4e:1e:d8:a4:bb:53:0d:59:e7:69:93:
b3:8d:5f:a5:6f:8f:0e:63:7d:a3:72:b6:cd:f3:65:
fd:a3:3b:f4:27:9f:b5:78:0e:65:89:18:27:d1:d0:
df:45:ee:59:bd:c9:8d:75:3e:31:ac:ce:5e:3a:46:
45:65:2f:e0:62:28:8f:97:9c:0d:e4:7d:0c:1f:b9:
a5:da:04:e1:7d:61:c8:c5:01:00:a8:46:4a:d8:0a:
05:6c:83:b5:b2:42:d9:73:5e:93:ef:74:b3:99:b7:
d3:a8:2d:12:a9:01:58:4e:d7:2c:40:42:af:0a:33:
48:4b:c2:1f:10:51:d5:82:d5:c0:9e:9e:20:af:09:
a4:e3:3d:9d:aa:d2:2a:5b:ff:bd:c3:f8:3b:fc:85:
02:2e:9c:43:90:a0:1b:7c:da:e3:d6:93:42:e0:9f:
5f:83:1d:1d:3d:e2:ce:70:ba:2c:3f:ee:fd:e5:b3:
62:80:58:d5:6d:95:b3:33:f0:86:9f:dd:b3:49:f9:
1b:7b:b5:6d:39:67:87:8a:75:02:ad:53:7f:50:33:
ae:e3:f4:9a:f8:bd:06:54:7e:69:a4:62:b1:0e:e9:
fe:e3:08:9a:0b:d1:cf:35:8f:68:5b:b2:ef:5c:be:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:B7:73:90:CB:B7:A5:DF:64:FF:A8:B4:67:CE:98:92:B7:C5:37
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/Ywq3c5DLt6XfZP-otGfOmJK3xTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.247.0/24
IPv6:
2a11:af40::/29
Signature Algorithm: sha256WithRSAEncryption
35:96:82:3a:4b:02:da:7c:7f:28:e6:05:5b:ff:73:da:97:6b:
82:cd:8c:b4:3a:ff:dc:61:d2:40:88:a0:a7:02:8a:da:5d:65:
3e:a1:e4:80:d5:90:21:38:65:fe:b5:81:65:33:38:5e:e1:26:
a9:0f:fe:47:4b:15:e6:78:27:8e:35:74:7c:da:e0:f8:42:93:
3a:0b:0a:98:df:23:95:06:5e:43:68:77:78:df:a4:58:b9:58:
fd:a2:94:1a:58:ab:1e:e6:2f:60:87:16:73:e0:e0:db:a1:62:
ca:a3:e4:97:c5:24:94:3e:09:93:56:74:d6:cf:fc:ec:f7:cd:
33:7b:9c:1b:f6:a1:36:6f:15:4a:8d:1b:26:7c:29:5c:79:2e:
da:cb:96:13:b8:87:fe:57:cb:28:dc:98:df:fc:40:23:45:d2:
88:f4:dc:bb:20:33:64:af:82:98:a1:2a:52:c5:76:96:8c:86:
72:76:57:e8:b0:07:7a:d0:0d:17:e2:9d:d1:91:12:8c:21:20:
0b:19:e7:28:d2:72:66:28:23:99:80:4b:5a:9b:b5:74:86:6b:
0f:27:7d:bc:50:a9:75:d8:1d:dd:d9:92:f5:04:7d:82:8a:d4:
50:64:f2:a2:52:67:0d:83:a1:f8:62:ab:3d:04:64:84:0d:04:
ba:ba:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:31 2024 by rpki-client on console-fra.rpki-client.org