Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6BS50VW7pwOQYYFarMvZ7BObrbM.roa
File: 6BS50VW7pwOQYYFarMvZ7BObrbM.roa (raw, json)
Hash identifier: pZwEd5263G1tgTHk+M12XP4ZnomSfVm9Y9VD6rNIB8g=
Subject key identifier: E8:14:B9:D1:55:BB:A7:03:90:61:81:5A:AC:CB:D9:EC:13:9B:AD:B3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F1512D88AEAB43DB13046258CDFE92E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6BS50VW7pwOQYYFarMvZ7BObrbM.roa
Signing time: Sun 01 Jan 2023 20:45:30 +0000
ROA not before: Sun 01 Jan 2023 20:45:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212816
IP address blocks: 194.102.186.0/24 maxlen: 24
194.102.184.0/24 maxlen: 24
194.102.184.0/22 maxlen: 22
194.102.185.0/24 maxlen: 24
194.102.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 07:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:12:d8:8a:ea:b4:3d:b1:30:46:25:8c:df:e9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e814b9d155bba7039061815aaccbd9ec139badb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:3b:ba:c4:98:ba:00:c5:46:38:6b:09:80:
52:4f:f6:c9:3c:a2:e3:a8:b5:4d:d8:20:44:60:18:
06:02:8c:76:f4:fc:9b:80:c3:d4:07:4a:2e:f0:c4:
72:35:7e:26:9e:4b:69:52:72:d1:fa:e2:11:03:81:
77:3b:fe:98:a4:81:55:2f:18:79:1d:bc:46:af:7e:
96:95:2a:42:8e:29:cc:61:63:be:6d:dc:95:b5:3a:
0e:83:46:77:00:a6:02:6a:25:02:ab:cb:41:ac:60:
66:de:9d:f0:65:68:9f:8b:27:7e:a5:80:fc:74:a8:
40:a6:9d:41:f4:60:6d:f7:8c:71:d7:a3:64:cf:dc:
47:c8:2f:9f:e7:f7:cd:a3:c6:db:94:be:0c:6f:ba:
1f:6b:86:3f:20:53:aa:06:20:b5:80:1c:a5:aa:e0:
f5:5f:f5:6b:8f:7c:4f:0d:57:38:36:a6:75:f1:ea:
45:b6:c0:6a:30:05:f1:71:ae:f3:2a:04:c8:6a:62:
8d:7c:40:d9:dc:a1:1d:aa:f3:a2:44:1e:bb:5a:2a:
89:b4:68:1d:85:35:da:74:30:ff:2b:c6:c0:6e:f9:
ac:97:29:d7:6e:15:d8:4f:5a:18:a8:33:75:d1:05:
50:1e:46:32:e3:54:ac:e6:c4:74:7e:84:0c:45:6d:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:B9:D1:55:BB:A7:03:90:61:81:5A:AC:CB:D9:EC:13:9B:AD:B3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6BS50VW7pwOQYYFarMvZ7BObrbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.184.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d9:26:09:92:0a:56:a7:da:54:ca:ed:e1:b9:f7:5c:72:8a:
0e:82:74:58:8e:81:1c:d4:c1:97:89:49:8e:4c:60:ce:5b:cc:
e8:20:c4:0e:ee:67:b6:e3:d6:64:fd:c6:f1:6c:83:96:ad:d6:
d4:2f:0d:97:6e:20:d2:8a:47:44:2a:bd:ac:5e:8b:58:61:39:
48:07:12:20:ad:ad:25:da:45:61:c0:a6:ee:95:b0:a0:92:63:
94:f7:3e:bf:6c:d5:36:ef:1e:2c:e0:43:8c:07:1e:97:40:98:
92:17:66:fc:6b:77:a6:1e:88:1a:ee:e3:13:b1:33:59:66:c1:
29:e7:bf:29:c0:5b:9e:c0:4e:3a:b0:18:f8:e5:88:fc:81:ee:
08:90:f9:ea:4e:57:50:6d:d4:c8:bf:39:5e:9a:9d:8b:2c:e5:
05:c2:f2:33:f3:ba:74:8e:c3:b3:58:39:c5:fb:bb:2b:c3:f1:
4c:33:97:0b:54:0b:e6:45:aa:fc:16:ab:35:fc:9c:e6:2f:eb:
1e:f8:fc:b0:31:f7:15:d8:df:9d:20:1e:62:d9:8b:a5:b3:80:
ad:35:31:b8:bb:ac:59:57:c7:f1:db:a3:37:47:e8:a2:67:d1:
75:8d:fe:69:d8:dc:1d:6a:08:0f:09:ea:c4:4e:6d:a9:bb:be:
83:2c:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org