Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/6wHWSxtHev9lmtDoLbCxMgW_XYU.roa
File: 6wHWSxtHev9lmtDoLbCxMgW_XYU.roa (raw, json)
Hash identifier: GFlpgEWYLbbtY8zz3Wi+HketWe6j4XCoQhTpZ6pvLrs=
Subject key identifier: EB:01:D6:4B:1B:47:7A:FF:65:9A:D0:E8:2D:B0:B1:32:05:BF:5D:85
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 018649902D694D9B23DBBB06F28799FC809D
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/6wHWSxtHev9lmtDoLbCxMgW_XYU.roa
Signing time: Mon 13 Feb 2023 06:57:10 +0000
ROA not before: Mon 13 Feb 2023 06:57:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205209
IP address blocks: 185.223.0.0/22 maxlen: 22
141.226.250.0/23 maxlen: 23
2a0d:2800::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:90:2d:69:4d:9b:23:db:bb:06:f2:87:99:fc:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Feb 13 06:57:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb01d64b1b477aff659ad0e82db0b13205bf5d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:35:6f:32:02:3d:e9:96:7a:ff:c6:32:a7:
63:21:1b:13:a5:ca:eb:e8:55:12:01:81:0e:26:39:
34:d3:a4:d7:08:37:9b:eb:ca:f8:4c:a1:3e:bc:07:
da:1f:b5:a7:e2:af:28:9c:18:b5:a4:b7:67:72:9a:
c3:04:38:d1:12:7d:e4:02:ed:2c:3a:f6:7b:1f:69:
65:93:0f:97:d6:34:de:22:22:ef:27:1f:97:d6:d2:
e5:6f:89:78:8c:e0:7b:bd:09:09:6a:75:4e:58:11:
a1:6f:81:35:60:0e:cc:24:8b:db:d0:27:e5:e0:34:
e1:03:3b:df:17:3e:d0:8f:d8:4d:5c:84:5e:90:a0:
c3:5b:dc:37:8b:70:b3:09:7d:2f:a4:d9:38:11:0a:
cf:cd:ea:55:35:7a:c3:3f:3f:ec:00:ae:05:3e:9a:
81:58:1b:1b:58:40:36:87:5a:a5:b4:f0:cb:0b:89:
f0:84:52:4e:0f:3c:c9:50:ed:65:e8:26:60:3a:b0:
7b:39:d8:b9:a1:28:f2:79:51:25:3e:ae:f5:d6:dd:
bb:08:2e:56:a6:5f:0c:56:35:be:66:7b:d8:dc:5c:
52:bf:21:c4:78:70:e9:7c:c2:d1:54:5a:97:6a:3c:
33:1d:79:d3:63:e6:ed:d5:60:0b:19:a2:a5:4e:3a:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:D6:4B:1B:47:7A:FF:65:9A:D0:E8:2D:B0:B1:32:05:BF:5D:85
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/6wHWSxtHev9lmtDoLbCxMgW_XYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.250.0/23
185.223.0.0/22
IPv6:
2a0d:2800::/29
Signature Algorithm: sha256WithRSAEncryption
84:66:de:2a:43:37:21:4e:e4:9a:6d:aa:c6:d2:7a:0d:d7:fa:
5b:51:a3:80:69:6f:b8:85:e0:3d:77:61:b9:c4:29:5b:ec:ef:
29:bc:66:11:d4:52:be:32:b6:91:e5:25:c4:87:b3:00:96:89:
41:ac:a3:5d:75:89:71:c9:5e:48:30:d2:a2:4f:2c:0c:79:53:
93:f1:9e:05:7f:57:39:44:ff:d5:55:62:0f:1f:bd:39:f4:7c:
48:90:18:34:74:90:95:7c:15:5c:29:cd:d6:43:00:dc:1d:48:
bb:09:6b:2b:e6:56:73:0f:8e:64:77:cd:2e:6f:a8:49:ec:e0:
b3:34:eb:c3:c6:02:fe:62:07:a1:17:60:a9:c6:e2:32:e1:c6:
ed:fa:22:4a:b5:fa:6c:00:09:24:71:9b:8c:3d:d1:16:b0:b1:
9d:9c:43:65:ab:e5:52:92:ed:c3:11:99:6f:df:66:4f:b5:a6:
88:4e:68:79:58:2b:86:0d:87:79:7b:8c:8f:fc:69:7d:9e:00:
36:b9:ef:37:b7:54:04:1c:d3:24:4f:7e:6e:cc:38:22:b7:65:
2a:2d:00:a8:3b:e3:8a:ed:37:e2:57:0c:5c:f2:98:df:1b:3b:
16:56:b6:82:0d:09:7d:0e:b8:b5:fa:3b:16:e0:dd:e5:3c:94:
a1:9b:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org