Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6n9i-jojGxh94XEGMXxzCER1aqI.roa
File: 6n9i-jojGxh94XEGMXxzCER1aqI.roa (raw, json)
Hash identifier: A5IdJRgmE+5YmnJifSartKGw+sDYjB12cUeZWLUZxu4=
Subject key identifier: EA:7F:62:FA:3A:23:1B:18:7D:E1:71:06:31:7C:73:08:44:75:6A:A2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246FB6EF78DC934C4FC9D005BFBA83E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6n9i-jojGxh94XEGMXxzCER1aqI.roa
Signing time: Mon 02 Jan 2023 11:38:52 +0000
ROA not before: Mon 02 Jan 2023 11:38:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 5.8.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fb:6e:f7:8d:c9:34:c4:fc:9d:00:5b:fb:a8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea7f62fa3a231b187de17106317c730844756aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:54:e6:2a:40:f8:31:62:4d:26:09:f2:f0:
07:29:ef:e0:9b:83:24:1a:02:a1:4d:d3:0c:01:3a:
8c:49:e7:95:8a:c4:cb:cd:f8:d9:32:b1:df:cc:fa:
b5:cf:c6:cb:ed:90:0c:61:35:aa:76:52:31:84:95:
86:ce:c6:02:8f:37:38:8e:65:2e:72:ff:87:9b:e1:
84:02:24:c7:fa:58:fc:f4:3e:99:50:22:a8:2f:45:
52:7a:8e:1b:cf:b5:a5:4c:ac:00:da:c9:7a:ce:90:
54:21:92:9a:61:77:28:80:2c:ed:9c:b6:fc:25:94:
c6:05:b2:30:31:24:18:35:0b:f7:a3:96:00:f4:44:
8a:f8:47:cc:31:c8:71:4b:55:d8:6a:11:e6:d6:58:
2b:f0:70:79:cc:21:36:1a:6f:1d:6b:53:d9:11:19:
b4:39:0d:c6:b0:a5:1c:82:6b:e1:28:8e:3f:58:16:
2c:8c:bf:cc:f3:76:ca:3c:dd:b6:b2:28:59:5b:33:
35:54:7a:a7:29:ba:73:ca:09:67:3e:d9:eb:fa:90:
f4:51:3b:70:a1:44:3b:63:72:38:e0:97:a1:c5:c6:
4b:1c:6b:ae:58:a4:65:2f:e9:ae:c3:6a:e6:3d:fe:
49:6b:48:a4:d6:8a:87:7e:b0:3c:78:5e:6a:70:72:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:62:FA:3A:23:1B:18:7D:E1:71:06:31:7C:73:08:44:75:6A:A2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6n9i-jojGxh94XEGMXxzCER1aqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.19.0/24
Signature Algorithm: sha256WithRSAEncryption
89:84:79:9a:28:11:1c:6b:c8:c9:e1:88:d4:f1:cd:19:7a:56:
e0:7b:df:a4:bc:85:de:25:70:25:46:4a:ed:b5:3c:bd:fa:87:
fc:a8:fe:e9:0e:f4:db:5a:ac:23:f1:d3:5e:54:9b:92:c5:3e:
0d:46:6c:5b:85:aa:84:00:66:c3:1a:41:74:ea:f4:fa:9e:87:
d3:ba:1a:2b:2d:6e:03:04:90:ba:bc:41:95:a0:db:3c:c2:95:
a8:ea:b0:3a:58:63:03:7f:2d:eb:27:83:60:45:9e:28:df:c2:
88:0c:b5:5b:90:6e:ad:ce:43:ca:8b:87:f2:83:6e:b9:aa:b4:
55:b3:b1:8a:9f:40:93:06:9b:bf:d2:2d:ce:3b:ab:c9:b4:c5:
8e:46:0a:b7:d9:e8:7b:11:82:ae:f8:c6:10:da:5b:80:17:7e:
f2:83:94:4e:1d:e8:b6:ca:61:28:da:69:50:ee:d9:a9:d2:43:
b3:c1:c9:24:aa:bf:74:70:25:8f:34:52:33:50:a7:b1:85:c2:
e3:b4:5c:c2:4c:ea:1a:fa:43:1f:c7:09:82:07:6c:00:34:09:
89:90:fa:99:82:6c:2b:2f:bf:f7:4c:45:86:92:37:72:9c:38:
36:35:1b:81:51:c0:94:a5:5d:5a:81:72:62:df:45:0b:88:05:
e0:6a:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org