Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/m6sPnmnNI6LP-_BftPWywYj9MMw.roa
File: m6sPnmnNI6LP-_BftPWywYj9MMw.roa (raw, json)
Hash identifier: tU3h4EyfDrjeg84gooZ1G3pyG9FV++SMOezVKEFwojw=
Subject key identifier: 9B:AB:0F:9E:69:CD:23:A2:CF:FB:F0:5F:B4:F5:B2:C1:88:FD:30:CC
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 018D1F32F8C859746069ACB02A635E2066B7
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/m6sPnmnNI6LP-_BftPWywYj9MMw.roa
Signing time: Fri 19 Jan 2024 00:50:50 +0000
ROA not before: Fri 19 Jan 2024 00:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.9.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 21:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1f:32:f8:c8:59:74:60:69:ac:b0:2a:63:5e:20:66:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 19 00:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bab0f9e69cd23a2cffbf05fb4f5b2c188fd30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:a8:6a:9c:21:b5:34:ac:0f:dc:1b:1f:20:
ef:ad:a7:7e:6b:af:4b:cb:16:dc:4b:66:59:07:a7:
04:15:41:f6:86:43:70:c6:89:0c:86:50:8c:33:b2:
ec:97:f3:eb:61:8c:0b:38:98:fe:8a:62:4b:0c:ff:
10:1b:57:0b:42:ac:b1:b1:a6:7b:67:57:7e:83:66:
2d:1d:ed:b2:9f:6d:f8:9b:a0:6c:09:3f:89:56:a4:
91:bf:67:cd:18:cd:80:6f:dc:28:33:2a:b7:0f:f6:
88:37:4d:4e:71:94:96:b8:25:8f:f9:47:11:8e:26:
3b:38:8e:8b:db:9d:b1:57:43:fb:af:c4:97:14:75:
71:47:02:d9:26:56:83:28:01:e9:f6:c8:53:e2:3f:
c0:a6:a9:f9:a1:52:2f:19:c3:0f:fe:eb:93:1c:a2:
fb:d1:17:0b:7c:af:e6:c3:7d:c5:55:79:1a:c4:29:
90:5a:f9:85:bd:f0:e3:6d:68:f4:ed:9d:6a:18:f9:
e1:3c:10:49:e5:9b:20:0a:60:81:1e:9a:a1:6f:87:
9b:a4:a2:07:ef:a0:16:23:3d:7f:41:ba:5b:27:15:
26:59:02:e7:06:b3:4e:df:9a:90:1a:e8:11:fe:a6:
2e:8c:0f:32:9c:b1:ce:eb:f0:32:c1:8a:2e:ad:76:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:0F:9E:69:CD:23:A2:CF:FB:F0:5F:B4:F5:B2:C1:88:FD:30:CC
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/m6sPnmnNI6LP-_BftPWywYj9MMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.116.0/24
Signature Algorithm: sha256WithRSAEncryption
29:54:c2:30:83:30:1d:8e:df:fb:37:63:5f:98:c4:17:4a:96:
30:e4:1f:a9:29:ea:88:66:25:b1:c3:1d:e9:85:4b:ec:4c:b4:
90:50:fb:38:94:4f:31:1a:21:7f:f0:f6:01:74:58:1e:44:ff:
63:1f:45:48:4b:38:01:9d:04:cb:cc:83:95:55:a2:f3:03:ab:
5c:92:56:80:db:b0:3c:49:e6:ce:65:af:b5:f7:3d:1a:e0:72:
84:40:8f:4f:d7:ca:cd:50:aa:f8:6e:ee:67:5e:89:3b:81:9e:
7d:12:d4:4c:db:58:dc:48:3c:d2:68:1a:77:09:29:f0:65:8e:
ac:83:14:74:32:ad:65:43:31:7d:0a:66:fa:4d:ca:ae:1e:f9:
50:39:75:30:3e:57:37:e8:d8:0c:06:ab:63:49:8e:20:11:68:
d1:54:49:01:9c:bc:02:78:10:b0:c4:b7:4a:6c:19:94:f7:e7:
0c:1c:1a:99:fc:ef:94:bb:72:af:22:2e:17:70:49:9e:b3:5b:
bb:e5:1c:2a:60:d2:b7:6a:f6:17:4c:71:03:ac:02:96:2c:25:
47:e4:3f:56:3b:b8:72:2b:8b:06:0a:13:1f:20:f6:0b:74:1b:
43:15:81:80:d1:aa:50:60:b1:95:9e:7b:2c:cb:e1:0c:7c:ea:
3f:89:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org