Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/6BwhA0ayIRZh44o8q1herJXz3eY.roa
File: 6BwhA0ayIRZh44o8q1herJXz3eY.roa (raw, json)
Hash identifier: 93FO90hIBIUeEhSi2ZuHDdgGKcgb2nnhF99mq7ZMVRg=
Subject key identifier: E8:1C:21:03:46:B2:21:16:61:E3:8A:3C:AB:58:5E:AC:95:F3:DD:E6
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 018A1E1EF61116D14900EAB3C4BB1C7316CC
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/6BwhA0ayIRZh44o8q1herJXz3eY.roa
Signing time: Tue 22 Aug 2023 16:41:00 +0000
ROA not before: Tue 22 Aug 2023 16:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8342
IP address blocks: 195.158.224.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:1e:f6:11:16:d1:49:00:ea:b3:c4:bb:1c:73:16:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Aug 22 16:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81c210346b2211661e38a3cab585eac95f3dde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:fe:51:51:2c:48:a4:07:4d:0e:35:87:8a:
05:2d:8c:6e:ca:b0:6b:43:1f:0f:c3:b3:b3:c9:25:
3a:24:f9:62:29:f6:11:8c:73:e4:4e:54:11:9d:36:
4d:a2:95:0a:e2:f8:83:49:bb:66:5e:e2:82:8a:6c:
41:d9:82:f6:2f:30:10:e6:e2:d8:a8:ef:e7:30:f9:
1d:4f:61:20:c4:c9:e6:45:92:36:10:a7:a1:d1:3d:
57:a9:aa:36:bc:24:65:ca:e6:d8:74:6e:1c:ad:9f:
25:2e:78:0d:09:42:f8:6a:a5:68:eb:76:23:dd:23:
e1:2d:cd:fc:35:cc:54:52:d9:8b:67:d1:20:95:53:
97:14:3c:04:38:1b:49:3f:8a:a0:e4:52:95:2d:96:
11:44:77:96:cb:8b:69:eb:80:63:6f:6f:e4:15:04:
15:86:6f:04:bf:76:a1:3d:3a:d1:61:8b:75:8e:10:
6f:41:e9:e9:72:75:87:db:46:67:0f:f1:6d:29:3e:
4e:53:e7:88:25:e0:42:83:57:fe:d8:c4:65:d7:ff:
c6:a6:02:e0:5c:07:e8:d1:11:0d:65:c7:b5:a4:7d:
6a:52:b2:45:2b:a9:8b:92:c5:b1:29:67:92:4b:ef:
f7:f4:ee:e6:ab:1a:a1:72:11:0c:8c:ea:3a:c3:bb:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:21:03:46:B2:21:16:61:E3:8A:3C:AB:58:5E:AC:95:F3:DD:E6
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/6BwhA0ayIRZh44o8q1herJXz3eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.224.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b6:1a:26:59:20:c3:9b:02:76:2b:08:ab:b3:55:90:8e:2d:
43:b0:f4:01:70:c5:65:2f:81:65:13:e1:0b:eb:b1:ca:ac:54:
99:c5:95:ee:df:91:4a:33:2f:8a:3e:3e:14:51:dc:1f:e6:76:
40:73:ad:61:24:7e:be:d7:a7:f4:cd:a9:0e:60:1d:7e:4c:c5:
e1:42:d2:3b:cb:15:44:77:8d:6a:3b:ac:ac:e3:eb:58:6e:4a:
58:a6:35:e8:6c:72:18:52:5a:7e:f6:2e:a8:ca:57:b0:55:af:
fe:c2:03:fe:a8:42:28:86:fa:40:43:39:bb:5f:11:d9:ed:2c:
bc:38:8b:cd:11:36:d1:76:ea:d8:aa:c3:13:bf:a4:6f:35:e3:
d7:97:c0:79:04:39:b5:22:b4:6e:63:e3:15:21:63:72:3a:61:
b7:55:44:b7:b8:f7:df:cd:da:9f:20:cc:30:6a:ed:19:d1:ae:
f2:a0:71:0a:df:8e:25:d0:0d:2d:48:ae:de:5f:fd:53:f3:87:
c0:b8:a8:06:a9:9b:c4:ec:36:21:98:e0:9e:af:0e:2f:64:80:
7e:87:35:59:e1:07:ea:fc:42:66:69:0d:80:31:72:76:35:05:
d6:cd:d9:1b:b1:3a:54:a9:d6:08:5b:bb:68:05:ca:e7:31:e6:
df:07:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 11:21:58 2023 by rpki-client on console-fra.rpki-client.org