Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/6JFdbhgdhDrkS_FUPPZtxmnw8PA.roa
File: 6JFdbhgdhDrkS_FUPPZtxmnw8PA.roa (raw, json)
Hash identifier: xIITd5v9McbgFjnV4/W5Qt1qto4DrMm/0t5GruLUkhU=
Subject key identifier: E8:91:5D:6E:18:1D:84:3A:E4:4B:F1:54:3C:F6:6D:C6:69:F0:F0:F0
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 01857142CF3D49AF17C00ED963EC7291FD38
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/6JFdbhgdhDrkS_FUPPZtxmnw8PA.roa
Signing time: Mon 02 Jan 2023 06:54:41 +0000
ROA not before: Mon 02 Jan 2023 06:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 192.41.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:cf:3d:49:af:17:c0:0e:d9:63:ec:72:91:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Jan 2 06:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8915d6e181d843ae44bf1543cf66dc669f0f0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:f5:21:7c:12:28:18:b7:58:00:3c:dd:91:
af:a9:fd:44:5d:2c:5c:ba:8c:c1:72:c9:1e:69:20:
aa:49:06:8a:16:a3:6a:48:ce:95:7c:0b:63:59:1f:
e9:60:01:97:91:15:61:ee:95:71:e2:77:8e:07:51:
fc:dd:75:05:80:1c:72:c5:a4:d7:8c:88:2c:51:c4:
2e:f2:69:f1:e7:9d:e6:86:8c:06:7b:8a:0c:2b:44:
4f:5a:73:b4:c7:72:ac:c1:33:83:95:a4:c6:76:bd:
d1:07:ef:83:e0:18:5f:7d:d7:38:7f:96:71:1a:26:
80:64:f8:d8:9f:71:5a:a4:d6:a6:c0:d5:d6:6c:bc:
7d:10:1e:43:11:a1:1d:26:3a:ab:b1:8b:7c:e1:7f:
1c:98:4a:fc:c4:a0:05:3f:d4:97:4b:3b:7c:25:bc:
a8:de:29:b9:0b:2e:e1:28:25:ac:db:b4:5a:7f:87:
97:cd:6a:a0:69:b3:48:f3:00:ad:82:08:b9:81:50:
53:f1:f9:2c:03:d2:6b:02:40:ba:44:9b:ba:46:e6:
71:6b:f1:ff:ff:58:f2:47:d0:8f:e6:25:cd:a3:40:
0a:57:c2:38:ab:b9:e4:90:c6:d6:79:2a:2a:64:d2:
b1:57:e1:d4:0e:7c:38:41:96:11:94:d4:ea:7e:6f:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:5D:6E:18:1D:84:3A:E4:4B:F1:54:3C:F6:6D:C6:69:F0:F0:F0
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/6JFdbhgdhDrkS_FUPPZtxmnw8PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.41.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8c:3f:f5:7b:00:b7:17:08:5a:3d:ec:c3:37:48:7d:f0:3b:
ad:4a:15:19:57:c9:23:71:c5:b0:5d:12:00:69:54:12:a8:4c:
d5:79:f6:61:14:31:12:de:61:4d:34:0c:33:9c:89:38:a6:2f:
cd:3a:17:a7:5d:b5:ca:8a:33:ba:a8:8d:4b:73:fa:de:d0:99:
3e:55:f6:bd:d1:e2:3e:0a:2f:31:c2:8a:eb:da:ca:58:dc:b2:
59:fe:c1:8a:4c:65:e5:0f:fd:ca:53:28:a7:f8:44:13:b9:93:
e5:35:03:6c:87:fe:9d:df:c0:e3:02:1d:86:58:92:00:8d:8f:
db:55:ac:df:e2:a4:2b:80:8c:80:c7:0e:aa:5f:09:44:66:fe:
c5:01:49:e1:46:1e:8d:96:a9:9d:c2:f5:fe:d6:20:c7:9f:b8:
31:a1:ba:f4:00:d1:ee:7f:84:f3:27:ca:ed:66:6e:f0:66:ab:
a5:3b:ff:10:04:e5:67:1b:71:c5:40:a3:e0:4a:eb:39:55:b9:
4b:a9:dd:b0:73:86:bd:26:3a:b9:c7:02:eb:1c:e5:8a:f4:35:
31:b2:91:bd:6c:7c:17:8a:cf:7a:5a:c3:bf:0d:20:c4:6d:67:
39:28:9b:f0:e2:94:dd:24:f5:5c:4c:cd:78:26:c4:d8:aa:c3:
0f:33:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:03 2024 by rpki-client on console-ams.rpki-client.org