Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/6fcub3PmVFTT6XNgexyMXQEXXnM.roa
File: 6fcub3PmVFTT6XNgexyMXQEXXnM.roa (raw, json)
Hash identifier: tpLoQLT5V3yr3oQICjvkebyWpMcux9RDT5/ZTNuMV3Q=
Subject key identifier: E9:F7:2E:6F:73:E6:54:54:D3:E9:73:60:7B:1C:8C:5D:01:17:5E:73
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 01879A96E79F05612AF3EAFC9082139F4EA8
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/6fcub3PmVFTT6XNgexyMXQEXXnM.roa
Signing time: Wed 19 Apr 2023 17:36:33 +0000
ROA not before: Wed 19 Apr 2023 17:36:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 176.65.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 13:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:96:e7:9f:05:61:2a:f3:ea:fc:90:82:13:9f:4e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Apr 19 17:36:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9f72e6f73e65454d3e973607b1c8c5d01175e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:3e:a8:a9:fe:bc:8d:c5:86:b3:01:8a:a9:
1d:ef:e7:f7:16:a3:d6:35:14:8f:73:54:d0:7e:27:
d1:48:ac:d6:88:01:f8:78:a7:07:43:08:e3:63:d5:
d8:db:18:b5:83:8a:06:d3:5f:80:86:d5:6a:78:41:
c1:98:07:33:e4:3d:a2:0d:99:23:70:4e:ff:23:a5:
5a:f7:45:96:14:b4:8a:28:3a:33:d0:d6:81:80:46:
08:57:72:c1:7d:53:aa:2c:af:07:ee:60:a3:14:0a:
17:63:9e:af:1c:23:74:1e:77:d2:ef:95:6e:51:a4:
7e:b5:6d:92:ba:31:7c:49:f8:8c:76:ca:1f:bd:4a:
52:21:0e:75:d4:0c:f5:2b:9e:19:11:fb:d1:9f:af:
c9:a0:d7:21:dd:23:a7:f7:36:51:b5:8b:92:a7:7f:
a5:ed:a6:21:18:8e:7d:c3:48:fb:84:a4:bb:ed:16:
b3:a4:7e:b3:1d:64:65:d9:e5:cf:cd:6c:a1:d4:9c:
55:9d:08:f3:f5:46:e2:b9:ed:17:87:6e:46:1f:aa:
a2:b8:d8:d9:db:3c:6e:11:cb:43:2b:53:89:ab:eb:
a9:0a:6c:2f:71:0a:fb:40:f5:15:7c:bd:f7:cd:7d:
e8:bf:76:ba:91:5e:a8:b0:58:b6:7f:ce:09:eb:2d:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:2E:6F:73:E6:54:54:D3:E9:73:60:7B:1C:8C:5D:01:17:5E:73
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/6fcub3PmVFTT6XNgexyMXQEXXnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.140.0/24
Signature Algorithm: sha256WithRSAEncryption
58:55:f2:08:35:f2:30:f5:b3:6b:fa:2f:25:20:6e:d8:1b:54:
47:19:38:d8:7a:02:7f:8b:dd:47:94:65:e2:86:78:08:5c:e0:
03:b2:c2:2b:7f:e2:83:1f:68:cc:6e:29:42:d5:72:fa:75:06:
f5:6b:c3:7e:a4:9e:84:c2:b5:e0:a0:05:0d:01:3d:09:f4:32:
e1:9f:e0:79:eb:f2:78:f1:0f:8e:3e:d1:b2:ba:b9:f9:e7:bd:
47:33:37:ce:e1:75:74:60:b5:45:40:a3:4b:50:df:5c:b1:fe:
f7:6d:9b:e2:96:9b:68:19:30:a2:31:5f:df:27:85:4b:45:7e:
10:6f:5d:77:21:3a:39:56:97:97:6a:9a:fd:8c:21:4e:9d:1e:
bb:23:0f:b6:33:47:f8:07:a6:b3:3e:01:fe:c3:ec:3d:2a:31:
34:c8:4b:63:26:fc:24:71:50:c1:92:42:a6:c5:16:50:a0:50:
0a:4b:08:ce:06:7e:94:42:f6:00:ca:3d:82:b6:08:51:e5:54:
b5:d3:03:26:88:07:8b:30:86:f9:8b:65:3d:5d:bd:dd:a6:c8:
f9:bf:d4:e4:df:1b:1f:07:ea:b4:18:d3:33:06:18:70:b3:e9:
e9:43:d3:d2:8c:c0:6f:8d:15:3a:73:6c:4b:5e:c5:2d:59:b1:
55:3e:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:40 2024 by rpki-client on console-fra.rpki-client.org