Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6EvsPlsdNZ3cWGXS1dswTG06VEg.roa
File: 6EvsPlsdNZ3cWGXS1dswTG06VEg.roa (raw, json)
Hash identifier: c5SJQDZvQuIGZGBbhqicLoPoAUqYj3Z87pGrRE27ZRA=
Subject key identifier: E8:4B:EC:3E:5B:1D:35:9D:DC:58:65:D2:D5:DB:30:4C:6D:3A:54:48
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018570028FA7E1D9759A92968E1ED3C0DE51
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6EvsPlsdNZ3cWGXS1dswTG06VEg.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61105
IP address blocks: 91.243.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 11:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8f:a7:e1:d9:75:9a:92:96:8e:1e:d3:c0:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84bec3e5b1d359ddc5865d2d5db304c6d3a5448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:f7:4e:5d:fa:45:00:70:66:ad:3b:7c:ef:
0a:d3:12:2b:77:94:bc:13:d1:d7:f0:d9:1c:df:c0:
23:11:82:e5:fb:4c:6c:6f:dc:2b:fb:47:74:69:ad:
af:23:b7:c5:c9:c1:75:e9:42:1b:8a:0d:4e:b7:ec:
51:e4:d1:9c:05:43:ec:1f:4c:bd:80:55:88:7c:99:
f1:6e:92:7c:a0:65:07:d9:a8:8e:5c:a1:75:09:d9:
bb:d9:43:6c:86:ab:7f:0b:ce:96:1b:a5:e0:3c:ad:
a2:e3:c0:6e:b7:98:6a:70:ce:f1:29:de:3e:6a:8c:
cf:ae:76:1d:cc:bf:36:36:4b:6f:45:15:44:e4:54:
77:bd:bb:3c:8d:72:fe:44:ec:b4:26:93:07:4c:55:
f3:a3:83:6e:96:75:29:d8:84:a7:58:f2:93:cd:5e:
45:09:bc:29:3a:86:17:31:9c:19:fd:a0:bc:dc:74:
ff:be:9e:22:3e:77:85:54:9f:ab:1a:bc:75:40:86:
14:22:cd:fb:5f:a0:44:e5:50:c4:c1:3e:f8:f7:e8:
0a:26:3d:a5:67:eb:e9:a6:54:96:f7:4d:6f:18:41:
6a:a6:65:4e:d0:19:4e:9d:bd:c4:0c:bd:92:1e:a1:
e6:03:97:d6:82:1c:e8:be:22:69:bb:b8:98:28:3b:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:EC:3E:5B:1D:35:9D:DC:58:65:D2:D5:DB:30:4C:6D:3A:54:48
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/6EvsPlsdNZ3cWGXS1dswTG06VEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.177.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ab:eb:14:d8:3d:84:d8:f2:af:8f:5c:f4:44:e8:a0:a1:a5:
76:11:c8:0a:0c:e5:80:79:76:d0:4c:1f:ca:fe:b5:c6:4a:28:
90:b8:d7:c0:dd:92:d1:60:20:09:4f:c3:83:b3:69:aa:ae:da:
ec:ad:93:39:56:a8:17:be:83:89:dd:19:e2:75:c3:00:b3:53:
a8:b8:ca:48:3e:ce:73:3f:91:b0:ee:5c:15:2a:86:76:7a:94:
08:02:fc:5b:a6:74:48:9f:59:12:d4:60:35:5e:44:9c:af:c2:
30:0f:f8:fc:63:0c:62:77:8d:ef:dd:d6:65:5f:c1:3a:b4:69:
0a:3b:9a:1a:b9:92:e5:07:fd:28:d0:3e:0d:97:4b:35:0d:c9:
7d:69:91:2b:7d:fb:0e:1e:31:63:cd:0f:59:3f:8b:b7:b2:df:
b9:97:fb:16:39:b6:ef:e0:de:c1:53:05:53:a5:cc:f8:48:20:
9c:de:9d:35:39:fb:83:68:0c:f7:c6:5a:ab:97:8a:cc:4c:d2:
ec:91:93:0c:6f:a8:cb:8b:29:b2:6c:68:cb:d0:c9:28:ed:e7:
54:86:00:a7:51:fe:94:b1:91:06:40:f0:63:0d:6d:32:09:98:
8a:1f:06:cb:99:7e:87:e5:ea:8f:bb:ae:3f:8e:1e:13:57:ce:
cc:de:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org