Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6AtRP0VWZQO4_ZNzET0d1beLDRk.roa
File: 6AtRP0VWZQO4_ZNzET0d1beLDRk.roa (raw, json)
Hash identifier: eWO7aZctSUAiQyYBxY8BJiC/OPB0pIBfGhb07V6OrGw=
Subject key identifier: E8:0B:51:3F:45:56:65:03:B8:FD:93:73:11:3D:1D:D5:B7:8B:0D:19
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 0188E2DAD550795E711EE69847208BD18577
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6AtRP0VWZQO4_ZNzET0d1beLDRk.roa
Signing time: Thu 22 Jun 2023 11:26:12 +0000
ROA not before: Thu 22 Jun 2023 11:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1887
IP address blocks: 148.81.13.0/24 maxlen: 24
195.187.64.0/18 maxlen: 18
148.81.0.0/16 maxlen: 16
2a00:1488::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 Jun 2023 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:da:d5:50:79:5e:71:1e:e6:98:47:20:8b:d1:85:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jun 22 11:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80b513f45566503b8fd9373113d1dd5b78b0d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:eb:12:bb:d1:01:a0:29:18:4c:15:c4:48:
95:1b:6b:8c:89:9d:42:50:e8:8d:ca:54:31:db:e4:
e0:6d:e2:cc:4b:1e:8c:a1:50:7f:9c:79:91:d8:da:
be:9a:2e:44:1e:cb:81:fc:28:23:4b:80:b1:60:08:
fa:15:ec:5e:81:94:33:05:25:e2:d1:e8:40:78:33:
d5:89:b0:4b:62:99:b1:63:76:7b:45:97:e6:d1:14:
f2:8b:d1:e3:fb:ca:b2:3d:af:54:30:9f:59:39:4b:
64:85:0b:5c:f2:0c:23:72:b7:b8:cd:51:b6:4a:6c:
51:47:fc:d8:4d:41:6d:f1:fe:ac:b9:e9:f0:ad:cf:
3e:23:8b:dc:58:6a:1d:91:e3:a2:11:9f:b0:2d:69:
bb:d1:32:11:27:b1:14:9b:e4:f3:09:5f:5e:85:29:
9c:c1:b8:f1:52:b6:07:1d:da:25:cb:c5:fa:31:df:
52:af:c4:14:28:5a:bf:4a:51:02:16:e3:c8:6c:41:
f5:c8:61:88:c7:da:a2:60:1f:8c:65:c5:46:c1:3a:
24:13:75:1a:51:3b:9c:9f:8c:cf:cf:0b:bf:b2:5c:
31:21:ff:0b:e8:bd:1e:5b:5e:a4:27:99:46:44:e5:
9e:e4:43:11:b8:4a:3b:8a:61:ba:6e:a7:1b:f6:f8:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:51:3F:45:56:65:03:B8:FD:93:73:11:3D:1D:D5:B7:8B:0D:19
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6AtRP0VWZQO4_ZNzET0d1beLDRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.0.0/16
195.187.64.0/18
IPv6:
2a00:1488::/32
Signature Algorithm: sha256WithRSAEncryption
50:51:5c:00:6e:90:98:e8:08:f2:af:8c:dc:01:39:a0:66:b5:
e3:3e:05:b7:b4:20:54:3d:e3:35:de:23:c1:92:ae:71:f0:f3:
c3:79:b9:a7:95:d5:38:01:f2:d4:ea:f9:d4:42:40:34:2b:32:
d4:35:9f:42:78:32:a2:54:0b:db:25:55:01:b6:14:18:db:00:
0d:b0:b2:4d:b3:c5:eb:ae:b4:76:88:94:0e:37:c7:23:7e:ab:
68:6a:41:7d:38:4a:a5:39:d8:e2:02:bd:17:33:ec:ee:19:a2:
e8:6f:38:84:99:a5:7b:d9:bb:17:23:bd:76:51:2e:ae:df:2f:
f5:a8:8c:90:68:61:29:b2:86:a5:5b:99:b5:75:6c:7f:ac:fe:
ff:15:a6:05:2c:16:51:b2:50:02:82:a9:0c:0f:28:1b:0a:dd:
d2:1e:b1:a5:e5:b5:61:d0:ca:50:cf:c1:9f:bf:3b:49:36:69:
c0:a0:ec:d4:0b:8b:bb:0e:4e:0f:1b:39:74:fc:96:9b:13:7e:
cf:54:5b:b6:95:f7:06:09:4d:a0:3e:04:ae:87:e7:38:94:26:
10:c7:37:bf:8b:73:b3:0c:c5:e1:85:dd:01:89:7b:59:d6:15:
69:f6:1e:4d:c1:4c:c4:3d:0e:c9:d6:4d:06:79:f8:d4:9d:7d:
37:5e:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org