Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/6UUw9Pg-llaSB4hVESrE02Y9VmE.roa
File: 6UUw9Pg-llaSB4hVESrE02Y9VmE.roa (raw, json)
Hash identifier: tvjlOdKj7RUV+fnscJTnl3ZCumxil7uvXeEIaIyd52Y=
Subject key identifier: E9:45:30:F4:F8:3E:96:56:92:07:88:55:11:2A:C4:D3:66:3D:56:61
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018E1199940289D9B92FDCB25C56BC335559
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/6UUw9Pg-llaSB4hVESrE02Y9VmE.roa
Signing time: Wed 06 Mar 2024 02:31:01 +0000
ROA not before: Wed 06 Mar 2024 02:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 185.202.100.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 11:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:11:99:94:02:89:d9:b9:2f:dc:b2:5c:56:bc:33:55:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Mar 6 02:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94530f4f83e965692078855112ac4d3663d5661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:87:5a:fb:85:02:0a:1a:02:54:d5:07:1a:
2d:e2:ec:d2:a2:ef:90:df:4f:bb:d3:34:1d:e2:a4:
40:02:06:ac:76:4c:53:0b:b2:78:25:a3:59:3d:4b:
b4:91:fc:64:dc:72:47:94:5d:18:6e:bc:51:67:a6:
98:f4:37:67:0c:a0:1d:ca:c2:c9:65:08:4c:9c:18:
e5:46:9c:bc:46:99:40:12:09:a7:1e:48:c6:b7:65:
bf:7e:6d:10:5e:d2:a8:5b:66:ee:ca:ad:1c:6d:87:
e0:03:bb:7f:f0:d6:97:73:52:1a:e7:09:c7:cb:31:
17:90:0f:0c:57:86:e7:28:7e:8e:2c:b5:33:92:5a:
4b:b6:11:93:60:79:8a:01:71:ad:f1:92:9e:ec:0a:
36:e7:32:66:dd:3d:cf:44:f9:29:84:b6:3e:1d:6e:
09:a1:ee:87:4d:a2:ac:8e:61:95:7a:fe:42:03:4b:
8a:13:fa:f3:93:15:cf:af:4c:09:ca:a9:40:a0:25:
e8:6f:08:20:52:93:e2:65:6f:b8:71:87:ad:70:63:
e1:c6:40:97:0d:2d:27:db:cc:00:d9:1f:2c:a8:5b:
f3:38:8b:9c:77:e2:67:15:90:78:c2:f5:41:80:59:
b7:8d:8d:c9:af:99:02:08:47:08:df:d0:9f:2a:4e:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:30:F4:F8:3E:96:56:92:07:88:55:11:2A:C4:D3:66:3D:56:61
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/6UUw9Pg-llaSB4hVESrE02Y9VmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
185.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:67:ea:6c:52:1f:6e:4a:a8:b4:a2:63:a4:04:22:f6:fa:92:
bf:2a:50:ad:a4:fa:fd:75:cc:16:64:63:50:a7:c9:d7:c3:08:
19:e3:4c:60:03:cd:ff:16:a4:65:0b:5f:5e:09:1b:ef:ee:d5:
2a:3a:6f:a3:47:ed:17:8f:c5:d2:27:82:27:bd:ed:e9:7f:2a:
1f:8b:f4:99:06:a4:a5:81:7d:aa:d7:3f:8c:cc:2f:a9:fd:e2:
75:ac:ab:44:ec:3e:1a:8b:9d:a1:cb:d1:5a:9c:b8:f7:7a:0e:
e5:f6:8f:4f:31:e0:cc:6f:54:87:12:0b:6c:ee:15:60:fb:0e:
6f:f8:3e:a2:7b:38:ff:d1:20:6a:04:88:d6:c5:ca:33:6c:62:
3a:82:3e:35:f5:1e:df:f4:25:f3:13:8a:79:6a:62:7a:fe:de:
73:74:97:a0:22:a8:4c:97:ee:fe:4b:43:57:42:be:51:ae:a5:
ff:aa:a8:f5:b0:6d:14:85:7b:19:8a:6a:1b:48:4b:f3:b4:08:
fb:a3:51:22:5d:aa:d8:e0:10:2c:14:7a:01:7b:1c:5a:cf:5f:
95:26:d4:74:b8:86:8b:13:eb:22:a5:7b:3c:25:15:0b:5e:99:
e0:c5:25:42:3d:f6:3b:53:b5:fa:2d:ee:c7:b3:77:83:bd:4e:
fc:2d:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org