Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6WbYSN7853xAA8-X7e89raF1vD0.roa
File: 6WbYSN7853xAA8-X7e89raF1vD0.roa (raw, json)
Hash identifier: g9ChBDoRSXGgktigeJc7mCpd/+DUpLHo5kREZd6WPhw=
Subject key identifier: E9:66:D8:48:DE:FC:E7:7C:40:03:CF:97:ED:EF:3D:AD:A1:75:BC:3D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01918DF9C8FE0BAE3EF4323983114B5EF56C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6WbYSN7853xAA8-X7e89raF1vD0.roa
Signing time: Mon 26 Aug 2024 09:17:22 +0000
ROA not before: Mon 26 Aug 2024 09:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 213.209.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 19:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:f9:c8:fe:0b:ae:3e:f4:32:39:83:11:4b:5e:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 26 09:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e966d848defce77c4003cf97edef3dada175bc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:ec:3a:8b:55:03:3e:14:74:77:d1:53:6c:
bc:38:8c:19:c4:25:fd:90:ee:64:a2:f8:29:6c:05:
f2:29:d3:60:0e:0d:09:1e:ed:d4:df:f9:20:88:b3:
d5:f1:18:5c:9b:e1:ae:90:6a:63:5d:15:81:9f:3a:
dd:cf:6c:9d:27:5f:f6:c1:34:9f:66:53:20:55:7a:
b8:14:10:7a:e8:d1:7c:82:8b:ff:d8:fe:95:e2:40:
97:3a:5e:33:96:a9:52:43:61:08:af:89:67:73:34:
e4:dc:60:71:20:00:9d:ba:4c:c9:8c:16:d2:8e:d0:
74:14:fb:3e:cb:94:63:c5:49:70:08:82:4e:03:ff:
b5:43:d9:46:79:76:9e:10:56:a2:76:57:79:0c:3e:
cd:ab:19:bc:3d:38:fa:4b:f7:95:19:2f:25:ce:c2:
58:e3:70:05:a1:83:81:fe:0e:de:f1:8c:cc:8f:22:
e7:fd:c1:20:25:ac:46:a7:7f:7e:1a:c0:c5:f8:d1:
23:23:d7:68:b3:77:79:b5:0a:a1:e2:1b:4a:1d:d8:
5a:b6:69:1d:99:c6:c5:a4:e5:c7:15:6b:c8:49:4d:
d4:2a:83:bd:e6:73:bf:ea:37:57:3c:8a:96:c0:62:
1c:d5:80:fe:7b:41:55:19:9f:f9:e5:1f:9a:a6:88:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:D8:48:DE:FC:E7:7C:40:03:CF:97:ED:EF:3D:AD:A1:75:BC:3D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6WbYSN7853xAA8-X7e89raF1vD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:fa:bb:7d:57:2e:d6:03:5a:23:87:0d:af:97:52:8c:00:d2:
41:7a:3c:a7:12:ec:f9:4b:13:0f:c9:57:04:19:41:0c:f5:33:
31:4a:d8:36:c6:cb:81:f6:8f:5a:d8:7c:8c:9b:1b:7f:61:11:
6a:97:45:04:42:a3:e1:1b:42:8e:33:38:c8:e0:6b:7a:b5:d1:
71:31:d4:81:74:49:b3:97:57:09:22:82:73:c1:08:31:13:73:
09:9e:60:12:96:54:17:f1:1d:67:39:4b:59:97:10:cb:89:f3:
ec:89:9c:3b:46:91:cb:b1:1a:3b:b7:17:01:aa:4e:74:8d:bc:
51:bd:06:41:5d:ba:ec:37:02:a0:cc:b9:46:0c:5c:0c:a4:0f:
6b:58:74:6c:ab:07:19:86:9c:bf:aa:a0:41:6c:f6:22:42:d2:
ff:6a:c6:b9:0e:ca:78:06:d3:0f:a4:a2:da:1e:ad:b3:6b:34:
cb:ae:bf:fe:82:cd:a6:d1:fc:56:85:26:a9:0a:43:b7:62:39:
6a:af:3b:46:95:de:da:4a:4f:5d:42:e2:80:80:36:a4:4b:5e:
77:84:e4:53:6b:83:f9:73:cf:4a:2e:38:65:30:a6:c6:af:98:
cf:81:00:f2:ec:ff:59:17:74:f4:e5:a5:ee:b4:55:78:d6:8f:
17:24:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 22:17:47 2024 by rpki-client on console-ams.rpki-client.org