Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/6Q80E5ZLf2_mdGWoCjI3uUqPyv0.roa
File: 6Q80E5ZLf2_mdGWoCjI3uUqPyv0.roa (raw, json)
Hash identifier: J2r6b4nhURVvV3ooUnv7pfI9rICkjESK8ULBL6Mi0JI=
Subject key identifier: E9:0F:34:13:96:4B:7F:6F:E6:74:65:A8:0A:32:37:B9:4A:8F:CA:FD
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 01856CF846B3EABD8E40FE7D8143548F026B
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/6Q80E5ZLf2_mdGWoCjI3uUqPyv0.roa
Signing time: Sun 01 Jan 2023 10:54:48 +0000
ROA not before: Sun 01 Jan 2023 10:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12731
IP address blocks: 45.130.192.0/23 maxlen: 23
2a0e:57c0:800::/38 maxlen: 38
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:46:b3:ea:bd:8e:40:fe:7d:81:43:54:8f:02:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Jan 1 10:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e90f3413964b7f6fe67465a80a3237b94a8fcafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:71:2e:7b:0d:9a:18:17:f0:14:33:dc:cf:
1c:02:d6:95:5e:5d:a0:bd:ca:cd:c5:eb:1f:96:2c:
c5:3f:45:cd:4f:ce:32:3e:0f:91:22:e5:88:a7:be:
3b:2e:c1:06:10:d7:fc:f8:29:2b:1c:65:50:71:f7:
1c:95:cd:e8:da:91:79:6a:37:43:b2:62:a8:2d:13:
75:fe:c9:25:42:3d:b0:a9:b1:ad:c4:b0:55:9a:8d:
f2:8b:42:ef:ab:8a:b1:e4:f5:99:9d:2e:be:eb:3c:
a5:24:18:84:89:dd:f5:a2:d4:73:80:6d:40:af:c8:
d9:df:f7:14:77:97:3a:20:6c:ad:d6:9b:c8:d1:61:
a0:b5:a2:cc:3c:c2:a3:82:bf:2c:b4:20:b2:4d:ab:
3f:e3:25:fb:b7:a5:91:0f:02:25:73:5f:c5:1d:26:
3d:c1:af:f5:66:36:47:54:00:60:7a:f5:62:e0:b6:
32:21:a5:6b:51:cb:d2:96:27:e8:4e:6b:23:11:e6:
51:c6:4c:3f:db:c0:aa:07:95:c8:8f:db:fc:a1:62:
80:4b:32:46:e9:fb:c8:6d:c5:64:e2:96:93:a6:4f:
2e:4f:bc:3f:47:e1:e9:b6:f1:f1:2d:d0:7e:60:a9:
48:f5:83:63:90:10:41:da:8d:51:f6:43:cb:3b:4f:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:34:13:96:4B:7F:6F:E6:74:65:A8:0A:32:37:B9:4A:8F:CA:FD
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/6Q80E5ZLf2_mdGWoCjI3uUqPyv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.192.0/23
IPv6:
2a0e:57c0:800::/38
Signature Algorithm: sha256WithRSAEncryption
a0:c5:37:3b:80:dc:44:5b:61:26:f1:ea:49:15:ee:7e:4a:79:
0e:84:ee:ed:0d:cb:79:33:a6:b5:97:c8:1c:c0:8f:08:e1:15:
7e:e9:f1:34:f8:25:9f:c5:50:39:17:2a:6f:8e:0c:2a:e1:ba:
09:6d:86:af:e1:85:21:5e:d5:72:91:0f:27:00:3b:4e:3e:b3:
d9:13:20:0c:36:9b:e0:26:7c:6f:21:9d:93:71:7e:ac:16:d6:
d3:5b:6a:1a:33:ce:70:d7:16:5c:db:cb:d9:6a:7f:43:77:56:
a1:68:d9:62:fe:e2:e8:d9:ae:0e:87:53:23:b3:ee:9f:a8:60:
d0:5e:62:0a:8b:4d:a2:f6:10:98:6c:54:13:78:5c:28:df:e8:
d9:93:e8:a6:7c:c0:82:e1:54:6c:b3:53:1f:33:a5:b6:1e:39:
be:ab:7b:88:4d:57:ef:ab:4e:8b:f8:ae:14:52:a6:ae:4d:5b:
02:c3:59:bf:d0:76:a1:55:e2:85:58:44:5d:18:c7:53:37:e2:
88:0d:96:6c:5b:9e:9e:a0:dc:78:cc:33:81:58:c4:d9:94:f5:
99:9a:be:cc:0e:04:0b:9e:69:4d:43:1b:ec:11:63:bd:a3:9f:
8a:dd:a7:7d:9b:33:f6:e9:10:9d:b6:b6:08:49:3e:d3:49:c5:
dd:d5:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:42 2024 by rpki-client on console-fra.rpki-client.org