Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/6Gyl2YkmMJMW_nJWp9eGYBvZ7x0.roa
File: 6Gyl2YkmMJMW_nJWp9eGYBvZ7x0.roa (raw, json)
Hash identifier: Wkz1Bmy3vZVHIk4Q2jb7DOooE0Yv/fLGpUQQE0gOzvo=
Subject key identifier: E8:6C:A5:D9:89:26:30:93:16:FE:72:56:A7:D7:86:60:1B:D9:EF:1D
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 018B3C77529A7C51E831F1FA95B5BAE16DD1
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/6Gyl2YkmMJMW_nJWp9eGYBvZ7x0.roa
Signing time: Tue 17 Oct 2023 07:08:54 +0000
ROA not before: Tue 17 Oct 2023 07:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57070
IP address blocks: 146.0.16.0/21 maxlen: 24
185.200.248.0/22 maxlen: 24
2a0a:bac0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:77:52:9a:7c:51:e8:31:f1:fa:95:b5:ba:e1:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Oct 17 07:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e86ca5d98926309316fe7256a7d786601bd9ef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:14:3b:1e:c3:ff:be:07:f6:58:eb:9b:09:
32:d3:a1:4c:28:63:83:99:54:9a:cc:d6:9a:6b:6d:
25:6e:64:31:0d:5c:49:d5:6a:e7:5a:4f:b7:d9:35:
f8:d5:b8:57:96:19:c9:f7:4f:1f:c9:04:7f:02:ac:
c3:83:8d:b2:8b:9f:d9:b3:91:4b:94:0a:c2:3e:2f:
72:2f:df:00:ca:47:6c:a3:a2:b0:52:ab:6b:8a:3f:
01:89:0e:48:d6:f8:76:b4:2d:10:7f:69:a2:99:4b:
d6:47:f1:cf:65:0f:c0:c6:cd:25:f5:38:34:3e:cf:
1a:77:1a:68:23:b9:28:d8:43:07:14:96:1b:47:83:
75:e3:35:c6:7f:07:2e:c7:99:48:cd:59:a5:83:85:
bc:56:9c:61:18:49:a2:74:7c:41:b7:1a:ac:88:0d:
69:98:5e:8c:f3:28:25:d1:81:9e:f7:1b:fb:10:8f:
4b:3f:b8:c0:d9:57:9c:07:c6:12:e0:4d:51:48:77:
5d:7d:52:9d:21:61:d7:bb:1f:74:2e:af:ea:99:1d:
5f:a4:5b:1b:69:2e:84:9f:83:93:80:c0:eb:08:5c:
ad:e4:6f:e0:86:52:3d:d7:c3:94:87:bf:71:f7:00:
4d:3f:f5:91:9f:9f:84:82:c7:66:b8:91:86:97:06:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:A5:D9:89:26:30:93:16:FE:72:56:A7:D7:86:60:1B:D9:EF:1D
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/6Gyl2YkmMJMW_nJWp9eGYBvZ7x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.16.0/21
185.200.248.0/22
IPv6:
2a0a:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
e8:f4:da:a9:03:57:9d:c4:c0:de:09:76:16:3f:67:7f:32:33:
65:22:ce:84:e7:dc:65:29:c2:24:5b:9a:81:87:a6:ab:fc:f9:
c1:0c:e1:7d:24:73:74:23:a8:f0:be:4e:e8:09:39:92:c9:c8:
36:5c:25:0e:07:cd:e7:6f:47:f9:c8:14:3a:16:ff:97:35:4d:
26:c4:5e:56:2f:e2:bb:f7:71:9b:97:6a:a0:da:3a:29:d2:31:
07:01:c1:eb:d6:c7:4e:57:0f:93:c6:34:89:e6:f4:2d:dc:3c:
2f:be:68:ea:e9:f1:c1:c5:6b:98:0e:22:e9:c0:19:89:cf:b0:
5f:ea:c4:ba:67:47:93:20:47:7c:f2:91:b0:a1:d6:1e:14:e2:
4a:b2:c4:32:be:a9:56:6c:a8:61:93:08:68:eb:8e:75:9a:b9:
b8:50:9d:67:b1:37:b2:bc:eb:eb:91:50:c1:e4:9c:4b:a9:e1:
2c:d6:27:ec:3e:cc:33:a7:13:f3:0c:95:9d:1a:b4:7a:3e:a9:
8d:2f:fc:2b:f1:a3:01:f1:09:0a:b1:0f:bc:3b:6d:d4:55:97:
5e:7c:27:61:9f:68:f6:88:00:49:be:81:a9:5a:d9:96:b8:84:
95:93:81:12:5e:1b:0c:79:8e:58:d2:55:b3:ef:85:38:60:57:
c5:1d:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:56 2024 by rpki-client on console-ams.rpki-client.org