Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/6ZCWH9-02S9SQ88RpIpUQKawUEw.roa
File: 6ZCWH9-02S9SQ88RpIpUQKawUEw.roa (raw, json)
Hash identifier: C2z2uD4DFmzyUk5SGYA2y4MgAIz9TEnF52i2LeIk5yc=
Subject key identifier: E9:90:96:1F:DF:B4:D9:2F:52:43:CF:11:A4:8A:54:40:A6:B0:50:4C
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 0188238AA7E2FECCD20B6C0E4E9E5C531D1A
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/6ZCWH9-02S9SQ88RpIpUQKawUEw.roa
Signing time: Tue 16 May 2023 07:51:09 +0000
ROA not before: Tue 16 May 2023 07:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.209.228.0/24 maxlen: 24
45.151.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 08:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:8a:a7:e2:fe:cc:d2:0b:6c:0e:4e:9e:5c:53:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: May 16 07:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e990961fdfb4d92f5243cf11a48a5440a6b0504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:f1:71:95:c6:db:f4:27:63:12:3c:25:ef:
2b:84:29:39:72:3c:56:56:fd:91:a1:0a:fa:4b:1b:
ed:42:fe:00:4b:93:e7:19:5b:06:7a:f3:51:5d:cd:
7b:53:54:65:71:5e:4a:c3:a7:36:77:7e:0e:1f:6d:
6e:eb:ef:58:25:11:58:7b:ed:4b:38:4a:22:42:e6:
f0:59:74:4f:7b:14:d6:9a:ac:d0:38:8a:39:84:b2:
11:47:79:2b:d7:b1:70:fd:1e:5a:27:aa:2d:ad:bb:
70:a4:f1:da:d6:88:db:c5:c5:d3:d7:72:fb:32:ea:
62:02:fd:10:81:ce:f5:59:36:18:1e:f1:e6:fe:d9:
c1:cb:93:5e:a1:a2:d1:94:6c:c7:78:f5:12:b7:47:
32:a5:7c:f6:56:2a:da:19:5b:98:89:d1:c0:b4:67:
55:f6:a3:02:14:d9:28:a9:eb:63:71:04:0f:ae:93:
25:d0:10:16:98:63:8f:98:d8:c6:c8:7e:dc:6f:8d:
89:f1:12:8b:54:19:7c:32:af:ad:d7:8b:f4:cd:fa:
c6:95:58:29:f0:29:68:05:72:94:c9:b7:b8:d8:5b:
8c:03:61:f2:cc:48:a1:0a:30:e0:b9:98:5a:ba:71:
37:cd:b6:ab:2f:4b:78:44:de:3f:e7:6d:ba:0f:fc:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:90:96:1F:DF:B4:D9:2F:52:43:CF:11:A4:8A:54:40:A6:B0:50:4C
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/6ZCWH9-02S9SQ88RpIpUQKawUEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
91.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2c:15:e2:c8:29:f7:0d:20:08:b7:d4:dd:42:d4:b1:cf:3e:
6d:11:17:b5:64:b0:c4:5e:f8:29:0c:20:c6:3d:b3:eb:c3:0a:
3f:86:45:de:e4:0a:4f:46:6c:cd:76:a7:21:12:88:fd:1a:2d:
ea:9b:bc:c7:55:84:e5:7f:b6:db:0b:e9:33:1d:8a:a1:e2:d9:
f2:f0:b7:69:a1:02:a1:95:8d:35:c7:85:74:54:db:5d:e1:eb:
73:80:3f:c8:d3:4b:ae:95:ec:6f:b4:e1:48:36:c8:a6:c1:e5:
47:2e:b3:eb:e5:58:6c:15:d5:c3:45:31:66:81:99:1d:c1:6b:
a5:f7:10:bd:97:f5:b5:b6:76:e2:1e:2b:af:e0:20:24:d0:32:
68:7b:36:1b:43:ad:66:1d:6b:95:3a:76:70:32:1f:dc:48:0d:
de:86:1a:13:b5:21:b4:ef:7d:02:f9:62:81:f2:e3:29:8b:ff:
38:c5:0b:3b:bf:e3:b4:0d:e7:f3:71:c9:0a:75:e3:8d:0c:74:
8f:c2:0f:1c:7c:b3:69:68:56:51:b0:a1:95:c7:84:0d:05:ce:
1b:d5:2c:7c:20:84:50:ad:4b:45:5a:b2:3a:b4:d5:aa:78:f2:
03:ce:b1:e4:d7:da:d0:9b:38:37:46:d3:ba:e8:59:6b:8a:46:
a4:12:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org