Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/6iynPRdbII0sjrJ0pLtys32KDcc.roa
File: 6iynPRdbII0sjrJ0pLtys32KDcc.roa (raw, json)
Hash identifier: Z9K0+gCP9Wnu6AybI+nuRBSxO6XiQ4JzEbdkT3lD5Ec=
Subject key identifier: EA:2C:A7:3D:17:5B:20:8D:2C:8E:B2:74:A4:BB:72:B3:7D:8A:0D:C7
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0189EFFE766B73130DDFDE1E28676216418D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/6iynPRdbII0sjrJ0pLtys32KDcc.roa
Signing time: Sun 13 Aug 2023 17:42:58 +0000
ROA not before: Sun 13 Aug 2023 17:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210912
IP address blocks: 185.104.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 06:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:fe:76:6b:73:13:0d:df:de:1e:28:67:62:16:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 13 17:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea2ca73d175b208d2c8eb274a4bb72b37d8a0dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:d0:03:ce:97:46:38:9d:5c:21:c0:35:c6:
6b:3f:4d:aa:1b:28:1a:67:f7:e4:99:10:65:d4:c8:
5b:fe:65:04:33:66:92:0d:f9:7b:b8:51:44:7b:bc:
ba:24:d4:1f:24:06:0b:91:07:ab:bf:8e:36:32:fc:
a3:41:1c:9b:52:a3:f9:ff:b7:f3:87:77:11:64:61:
94:bb:99:50:8f:63:55:6c:e2:0f:4b:a5:20:b5:07:
13:ef:57:04:12:34:e4:c7:fd:e8:4d:45:91:8e:47:
d0:6c:48:be:8f:02:9c:ff:ba:1e:f2:d1:f9:12:e7:
f9:d3:63:0e:80:fa:08:e3:b2:60:22:26:c8:8c:02:
73:1c:a3:d8:c7:a6:64:a7:9b:08:6b:fc:30:ff:2c:
7a:4a:98:a8:e0:91:b6:8a:82:31:3e:1b:1c:fe:02:
c6:92:59:95:d2:ff:1e:05:ce:17:77:56:15:4b:d5:
93:df:d8:3c:bb:35:09:95:80:40:56:3c:87:03:22:
79:a2:4e:d5:a7:6a:99:8b:69:3c:33:05:9f:2d:cd:
35:73:17:01:a3:27:b1:5b:90:02:4d:a3:95:0c:80:
ca:60:48:9c:60:ea:f4:4a:02:2c:79:dc:30:da:f7:
41:25:1c:26:93:00:8d:7a:61:e5:95:ed:5c:b8:df:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:A7:3D:17:5B:20:8D:2C:8E:B2:74:A4:BB:72:B3:7D:8A:0D:C7
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/6iynPRdbII0sjrJ0pLtys32KDcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:22:29:74:b4:12:a0:d9:6d:90:98:66:bf:5e:3c:7c:29:d1:
b6:ab:49:8a:37:2c:d7:f4:8d:7a:ec:4b:c7:9b:61:21:6e:9b:
aa:75:00:b3:da:b5:85:64:26:31:cf:e2:51:a6:c8:19:3e:ef:
17:c1:12:a2:d7:94:6f:a9:2e:f3:66:2e:32:38:6c:c9:86:70:
99:85:25:50:8a:6d:10:b4:50:5a:48:01:c5:ba:5c:a5:aa:3b:
b1:af:0a:ca:aa:14:16:2c:2a:46:c3:2e:50:ba:f9:4f:62:fb:
b2:70:ee:c0:9d:dd:e7:86:74:39:55:bb:6c:c0:f2:91:b4:b1:
d5:55:6d:de:9d:d2:03:18:d9:1c:55:eb:c4:2b:aa:5e:b7:bd:
86:13:1a:de:0a:dd:af:31:15:c7:ab:f2:e5:fc:70:09:ac:ce:
8e:d2:dc:c3:27:b1:32:f4:45:63:22:ca:1e:c0:a8:d6:c1:51:
b5:52:29:a0:bb:27:a9:df:7b:00:ed:9b:2b:41:b7:b0:ff:76:
ef:48:af:46:ab:33:85:40:f9:4d:85:82:92:fa:65:32:dd:8f:
3e:46:ce:c9:46:4c:ab:42:4c:66:dc:b5:c4:ac:0a:a9:16:ec:
c7:ae:25:a7:0b:51:79:24:2e:5a:b7:26:cd:64:c8:54:de:91:
e2:5c:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org