Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/6T2zOyNasSRuUy1D_9jgFpEke_0.roa
File: 6T2zOyNasSRuUy1D_9jgFpEke_0.roa (raw, json)
Hash identifier: ry1CXLeJP+eEWJXx29QU+uSrAQfnRvse+N1RbcoZ5WA=
Subject key identifier: E9:3D:B3:3B:23:5A:B1:24:6E:53:2D:43:FF:D8:E0:16:91:24:7B:FD
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 018AC36DF2BD3730D40A390B852E864D5D77
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/6T2zOyNasSRuUy1D_9jgFpEke_0.roa
Signing time: Sat 23 Sep 2023 19:04:37 +0000
ROA not before: Sat 23 Sep 2023 19:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203011
IP address blocks: 193.28.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:6d:f2:bd:37:30:d4:0a:39:0b:85:2e:86:4d:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Sep 23 19:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93db33b235ab1246e532d43ffd8e01691247bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:d9:b6:8c:86:56:c8:6f:6a:1e:d5:02:9f:
8f:84:fd:53:09:a8:16:72:9f:34:76:5a:a8:d4:a7:
4b:a4:50:9c:a4:72:af:7f:9e:a3:f8:05:42:93:49:
34:78:66:75:0b:c1:37:5f:73:9c:1c:9e:fd:d1:c4:
be:70:99:60:6b:59:7e:de:db:37:3b:1c:f8:79:bb:
35:91:95:5e:f2:f8:df:06:2d:27:90:56:73:ba:60:
53:6b:6c:da:d4:8f:60:55:4e:7d:0f:5b:f7:9e:6a:
36:8d:04:64:ab:d6:fe:86:22:be:e6:82:09:0f:b3:
9e:43:44:f0:03:23:2a:4e:d8:ab:ee:54:78:f7:3a:
a6:7b:19:89:4a:45:34:74:bd:fe:c0:93:36:03:16:
f2:a9:68:26:98:2a:16:9b:3f:47:f8:52:b2:b0:19:
36:03:9e:79:62:34:91:9b:cd:27:2b:4c:c4:01:63:
f5:92:2b:a1:55:7a:79:ab:66:cc:d7:8b:82:49:35:
d6:8c:4b:1b:9a:cc:1e:8f:54:97:76:60:00:b8:57:
f4:c6:73:9d:03:4e:05:dc:3e:12:b1:a0:ef:46:3c:
8e:bd:cc:f1:9e:81:61:84:05:16:ea:e7:3b:32:e4:
9f:82:64:66:e4:af:66:cb:27:5b:5e:c7:29:cf:86:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:B3:3B:23:5A:B1:24:6E:53:2D:43:FF:D8:E0:16:91:24:7B:FD
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/6T2zOyNasSRuUy1D_9jgFpEke_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.176.0/24
Signature Algorithm: sha256WithRSAEncryption
79:34:d5:05:5a:9e:2e:e9:32:09:41:14:a6:a9:22:32:a9:84:
fe:33:90:ad:10:e8:74:1f:cb:31:88:af:88:9d:be:26:4c:8a:
0a:15:50:96:4c:49:40:44:42:33:22:10:95:4b:4e:e6:d6:65:
34:90:9b:f4:09:da:5b:d1:0d:32:09:05:ef:bf:b3:2d:d7:f8:
0e:df:99:27:b3:ab:cb:dd:c7:19:d0:f5:44:3c:7e:69:ca:87:
a9:3a:0c:8b:2f:75:0a:a9:66:fd:14:33:9a:74:c3:ec:3d:70:
7f:6a:14:a0:1e:d8:e6:69:e0:c0:10:b1:ee:de:50:63:ac:9b:
69:de:77:60:3d:ae:41:2d:1a:cf:93:77:2c:42:9f:89:f9:a6:
a7:a5:b4:66:bf:48:2d:3a:d7:75:04:35:46:85:06:1d:ed:4f:
9a:4f:e8:fc:cf:64:ff:7b:05:2b:bd:72:bd:fa:7d:72:c4:cd:
81:04:41:47:fc:48:85:95:f9:ae:7b:7d:b0:3b:9c:0f:14:64:
12:08:e5:f8:6f:55:86:23:03:03:89:ea:ac:81:c8:19:2d:7a:
3d:48:28:78:5a:0c:ff:9a:12:6d:23:84:50:43:e4:87:77:46:
66:c2:ae:09:4d:46:2c:fb:54:ab:e9:b8:09:67:a7:8b:d7:38:
ac:fd:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:47 2024 by rpki-client on console-fra.rpki-client.org