Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/6D-sngAGA5LGytA3ZEBHxyzJitg.roa
File: 6D-sngAGA5LGytA3ZEBHxyzJitg.roa (raw, json)
Hash identifier: KccoxVZUW+D+8Yn14F4JLx1QzdS7WqAGgME4QAdXTvQ=
Subject key identifier: E8:3F:AC:9E:00:06:03:92:C6:CA:D0:37:64:40:47:C7:2C:C9:8A:D8
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139AD2FF29F36D673958985D0EA96D3
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/6D-sngAGA5LGytA3ZEBHxyzJitg.roa
Signing time: Mon 02 Jan 2023 06:44:43 +0000
ROA not before: Mon 02 Jan 2023 06:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202658
IP address blocks: 213.232.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ad:2f:f2:9f:36:d6:73:95:89:85:d0:ea:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e83fac9e00060392c6cad037644047c72cc98ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:a5:cb:8a:d8:94:0a:70:95:24:ab:c5:f5:
25:1e:8b:7d:af:f1:e1:ae:41:54:c4:75:e9:1e:59:
20:4f:2d:73:11:50:1c:2d:24:58:e0:57:46:2e:79:
58:ab:a5:70:bd:ce:7e:d0:16:18:9e:09:cd:b3:de:
bf:f5:4d:93:83:ca:36:11:24:d1:57:4e:c1:c5:9e:
0f:41:be:80:37:a1:4e:80:27:4b:23:0a:db:56:1a:
0a:c0:ec:ec:fb:2f:c6:ba:bf:72:7b:e6:0b:a7:42:
70:b8:c8:86:c4:b3:c7:1f:ba:5a:d1:51:64:12:0b:
c1:03:dd:ce:7f:b9:3c:ec:34:d8:be:e0:34:a5:0a:
ea:a2:99:fa:ed:93:a5:17:3a:0f:2f:e9:e0:87:90:
3b:5b:5f:41:ea:23:95:e0:3b:f4:42:ec:9b:ea:3d:
9b:dc:fe:67:ba:54:8c:8d:68:2a:fc:a4:3b:a9:8c:
2b:70:b4:fe:af:d3:b9:f6:27:4e:58:5e:ba:be:35:
f9:03:76:4b:8d:50:c0:64:d3:0b:ab:47:54:a6:40:
cc:f5:1d:25:30:4c:e0:4f:30:bd:3b:e9:2c:ef:28:
47:61:58:52:fc:5d:27:79:50:1d:13:7a:75:90:e2:
68:f0:a3:3f:79:f7:a4:ff:9a:0f:88:8f:af:c8:b6:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:AC:9E:00:06:03:92:C6:CA:D0:37:64:40:47:C7:2C:C9:8A:D8
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/6D-sngAGA5LGytA3ZEBHxyzJitg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:81:e5:e2:59:2d:ae:d7:a2:23:86:96:6c:f2:84:32:81:46:
8e:0f:fe:21:21:54:9d:8b:fc:47:5f:39:f8:49:38:db:c9:c1:
19:d9:aa:53:32:6f:72:7b:80:fd:f7:6a:59:85:75:6c:14:f6:
c9:23:0e:da:d4:b0:30:7e:67:e3:76:1f:2e:dc:ea:0c:e7:a5:
ec:a0:f6:58:1b:1d:47:ae:44:9a:18:db:23:b3:40:94:30:19:
b3:f9:ef:f3:45:dd:fa:6f:44:5a:6a:73:3e:0f:43:86:f8:f1:
c4:87:1c:22:5f:32:81:2b:5f:70:f1:47:21:09:e2:26:e5:43:
40:e4:83:15:3e:53:80:6d:b4:2a:ec:85:9b:6f:7f:fd:0b:24:
33:8f:e1:97:3a:25:a6:88:33:fe:7f:90:4b:0b:74:f4:b7:7f:
e6:28:7c:8e:ae:ba:98:7f:b0:42:7e:28:6a:7e:13:bf:7f:9d:
0e:61:73:d2:5e:d1:dd:39:1b:c7:d4:a9:28:22:02:9a:81:1e:
f3:8d:fc:ee:87:37:4c:37:8e:34:a9:f8:e1:e6:36:73:24:cd:
59:a3:3d:b8:21:08:0b:57:d3:b1:db:fb:48:45:39:ef:97:54:
c9:7e:e9:0a:29:58:d0:40:f0:4e:e1:e6:2f:70:b4:65:4a:32:
a9:09:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org