Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/yAziI_9pKLgaJyBWpFgZ1AVtn7w.roa
File: yAziI_9pKLgaJyBWpFgZ1AVtn7w.roa (raw, json)
Hash identifier: 8rrDH7o3F7QcfcTbVdAP1NcXUxVrHBquqY2KG8xZKt8=
Subject key identifier: C8:0C:E2:23:FF:69:28:B8:1A:27:20:56:A4:58:19:D4:05:6D:9F:BC
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 018CCA96E2246B94F6210CEBA810E0ABAA76
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/yAziI_9pKLgaJyBWpFgZ1AVtn7w.roa
Signing time: Tue 02 Jan 2024 14:32:15 +0000
ROA not before: Tue 02 Jan 2024 14:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.8.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 09:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:e2:24:6b:94:f6:21:0c:eb:a8:10:e0:ab:aa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Jan 2 14:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c80ce223ff6928b81a272056a45819d4056d9fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:33:ad:e4:10:89:b1:1b:02:e1:8c:78:e3:
ef:48:b4:b6:89:d6:54:d9:8b:8b:2c:6d:f7:61:38:
37:9c:86:f7:6d:07:ac:55:62:71:83:f8:d9:02:de:
94:7f:63:e5:0c:e1:94:9a:8e:ff:94:94:9a:e0:cf:
50:3d:2b:b7:9d:68:48:80:95:73:b8:04:e7:69:12:
4e:35:ce:c4:7b:ae:b4:fa:84:85:8a:20:c2:b5:ff:
0b:8e:f3:8b:41:c7:63:b3:bf:23:de:07:7a:1f:79:
8a:0a:d3:30:05:5f:23:0b:50:71:c8:11:a7:6f:58:
e6:d2:f0:40:28:05:ad:d4:8e:5c:13:19:06:47:09:
5b:b4:c9:f0:1e:85:b3:c2:4a:c1:56:23:01:84:ce:
04:13:a6:91:51:83:1b:7e:e0:0f:34:2f:ca:8f:17:
2e:f5:e2:38:22:94:4e:44:12:41:a2:b9:02:41:0a:
49:60:82:82:79:e7:71:a1:15:8c:28:53:9e:ef:b2:
fe:f3:5e:38:1b:41:f2:d0:a5:01:6c:6e:49:5a:0e:
94:ac:6c:ac:66:d6:c5:c3:f3:a3:5c:17:8e:0e:d0:
19:4c:22:64:21:b7:ba:ef:88:13:fe:7b:65:02:c9:
c1:45:d7:75:1f:ed:23:a5:03:af:e5:c4:a7:81:e5:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0C:E2:23:FF:69:28:B8:1A:27:20:56:A4:58:19:D4:05:6D:9F:BC
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/yAziI_9pKLgaJyBWpFgZ1AVtn7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.170.0/24
Signature Algorithm: sha256WithRSAEncryption
40:23:80:55:38:ed:59:88:c8:c7:79:1f:f9:39:5a:5d:89:fd:
6a:a0:e6:ee:20:c9:22:28:26:d5:21:ba:8f:e7:ce:96:6e:b4:
3c:17:83:28:21:e1:df:96:8a:9d:29:cd:9b:34:65:03:26:2d:
4e:69:06:9a:57:5e:ed:59:75:3d:2a:24:13:f8:09:d0:ca:d2:
24:5b:53:bd:7e:7e:14:8b:65:3d:c9:ff:17:11:c7:cc:6f:ac:
bf:3e:69:8a:f5:7e:89:35:62:49:9d:27:49:2e:f1:76:5e:cd:
1a:c2:8d:57:80:a0:8d:f2:bf:9a:4e:09:86:83:a2:27:e7:60:
35:2c:6b:93:91:03:cc:8d:f8:15:22:04:36:61:cc:e6:d2:2f:
79:ca:48:13:fc:27:73:8b:0d:ad:03:d5:1f:60:67:8b:58:de:
ce:fa:cd:6e:69:87:ed:46:0f:a9:4e:11:ef:94:a3:29:11:34:
81:9c:ae:e4:f3:6f:88:62:13:4a:66:61:75:16:17:1a:3d:ad:
f4:80:1c:9c:b3:b6:a3:80:2e:a1:26:bf:5e:59:df:1e:a0:09:
9d:02:da:db:66:d7:77:ec:ca:b1:98:2a:d7:02:74:9a:d9:b2:
48:9f:a1:6c:47:81:ac:d3:37:4d:1b:f3:46:fa:00:6d:62:14:
14:1a:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:27 2024 by rpki-client on console-fra.rpki-client.org