Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/6zkIXZ1ja5B-DThcxIRMEIHp0Hw.roa
File: 6zkIXZ1ja5B-DThcxIRMEIHp0Hw.roa (raw, json)
Hash identifier: vTAa+6YCBCbD0DJ+e9vdTkrXUPuXDZ2Mgorjw5BpVRY=
Subject key identifier: EB:39:08:5D:9D:63:6B:90:7E:0D:38:5C:C4:84:4C:10:81:E9:D0:7C
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0187E0BA10C095AB2215CFC70E4A35B32315
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/6zkIXZ1ja5B-DThcxIRMEIHp0Hw.roa
Signing time: Wed 03 May 2023 08:28:23 +0000
ROA not before: Wed 03 May 2023 08:28:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49455
IP address blocks: 82.194.192.0/19 maxlen: 19
109.108.192.0/19 maxlen: 19
46.249.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 03 May 2023 09:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:ba:10:c0:95:ab:22:15:cf:c7:0e:4a:35:b3:23:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 3 08:28:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb39085d9d636b907e0d385cc4844c1081e9d07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:86:9d:92:89:bd:9b:94:2a:d1:8f:f7:50:
b9:9d:2e:53:99:3c:44:f0:8a:87:7b:ab:8f:bb:8b:
5d:a9:59:21:8e:a7:9a:d7:b2:7d:7c:d7:e6:82:ef:
1f:91:10:e0:b6:68:45:ab:17:eb:4c:0f:32:59:47:
bf:6a:4c:c0:91:c4:2d:4e:2f:2f:08:ed:6e:54:e9:
3f:de:eb:92:d6:36:b1:d2:3a:25:b3:ca:27:ff:e1:
be:74:4f:51:41:60:6b:ce:b7:4f:53:14:06:11:ad:
0d:a2:f3:02:3a:e2:96:bc:be:96:5d:4e:c8:8c:c2:
67:34:7a:b0:f5:f0:10:12:66:6f:67:30:97:14:4f:
c0:14:83:58:dd:8a:66:14:cb:2e:49:d7:0e:02:e7:
29:99:2b:bb:e7:7c:dd:bd:38:f6:84:00:7d:aa:31:
81:36:14:f8:91:89:cb:d2:75:4b:8a:3f:62:b1:b3:
02:2e:3a:26:46:2f:2a:83:a0:ca:18:12:57:c8:83:
aa:28:9d:48:b9:4f:8c:cb:df:d4:ae:80:94:89:9c:
99:f9:63:9c:65:a3:ca:4c:64:0f:68:77:60:5a:a9:
2d:59:da:da:d6:ac:55:f2:0c:4b:97:ac:52:4f:80:
52:49:6a:91:f2:6c:bd:33:75:b5:53:d4:76:74:92:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:08:5D:9D:63:6B:90:7E:0D:38:5C:C4:84:4C:10:81:E9:D0:7C
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/6zkIXZ1ja5B-DThcxIRMEIHp0Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
82.194.192.0/19
109.108.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:7d:e6:4a:85:be:12:97:c0:51:9f:28:df:3e:d0:71:d0:7c:
8a:87:04:f6:d9:97:e8:26:cd:4a:27:ce:b3:82:37:59:f6:71:
34:7c:ae:ca:50:3f:7b:05:f4:cc:a8:a7:9e:7f:95:c1:0e:97:
4b:b9:f9:d2:18:a6:4e:08:c7:c5:10:a5:a6:62:07:14:be:d9:
78:5d:29:45:2b:7c:f4:bc:eb:3e:63:fb:bf:91:29:1e:eb:cc:
d8:4a:6e:85:ea:66:aa:cc:68:fb:d0:a9:91:31:99:53:97:91:
c5:f1:60:f5:7d:24:9a:b8:42:96:15:47:61:21:a8:db:08:56:
27:cf:a0:c3:45:25:11:60:c9:70:20:5d:98:1d:45:ee:f1:ee:
c4:fe:56:cc:46:4e:b8:10:32:20:0f:bc:66:40:c1:f7:79:45:
df:0f:c5:54:ff:ba:d7:e4:b1:cb:c8:48:3f:a1:24:41:ef:b8:
d6:19:25:2a:23:15:8b:db:1e:05:a1:f8:7c:a9:7d:7d:f8:6a:
04:0d:75:86:92:c0:d0:59:52:57:45:1b:85:0d:ea:e5:c5:97:
fa:df:ab:32:13:0f:50:33:82:64:8b:11:5f:60:c8:10:e8:9f:
48:b0:cc:99:8b:31:ef:85:e0:c1:82:20:ee:29:92:52:db:e3:
e9:e2:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org