Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/6Ix8ls6qBd_h_FgvBNDikNXSW6M.roa
File: 6Ix8ls6qBd_h_FgvBNDikNXSW6M.roa (raw, json)
Hash identifier: wet1ONlP2br764rfYg4po66kNnE9f9K6Lgj3G444qo0=
Subject key identifier: E8:8C:7C:96:CE:AA:05:DF:E1:FC:58:2F:04:D0:E2:90:D5:D2:5B:A3
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 0185BCDA9D3C2C619287AA85DECA0EE8D2B1
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/6Ix8ls6qBd_h_FgvBNDikNXSW6M.roa
Signing time: Mon 16 Jan 2023 23:12:01 +0000
ROA not before: Mon 16 Jan 2023 23:12:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201879
IP address blocks: 91.199.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:da:9d:3c:2c:61:92:87:aa:85:de:ca:0e:e8:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Jan 16 23:12:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e88c7c96ceaa05dfe1fc582f04d0e290d5d25ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:d0:91:0c:90:38:a8:a8:6f:c7:05:c7:da:
5d:2c:e0:5b:05:0e:4d:78:b6:de:11:75:0d:db:39:
13:5b:2a:c8:58:bd:2d:4f:b3:0f:c8:05:6c:a0:45:
e5:0a:a4:58:ec:1b:69:96:1c:58:d2:c2:7f:92:ae:
ed:75:d8:eb:3d:af:29:ca:82:23:6d:fa:12:62:40:
e4:46:8a:e3:38:15:90:1e:e4:25:32:c2:cf:d9:8c:
5a:de:34:73:0a:75:bd:3d:ba:bc:8c:f7:b7:09:86:
eb:2e:96:d0:c6:42:01:28:e6:7e:40:b9:67:4e:00:
15:29:0f:d5:b4:e6:43:71:29:cc:3d:2b:b4:0f:d3:
fc:87:de:a2:71:d5:d5:0a:f6:e6:7b:35:5f:ab:01:
bf:1b:00:30:6b:d4:ca:8d:66:df:96:5c:e8:b0:e9:
23:32:f2:3c:c8:6a:34:aa:4b:4c:17:81:0e:63:8a:
72:d3:e5:30:7e:25:79:ac:8e:6b:18:ad:0d:b3:4a:
dd:8a:cd:e4:c6:c2:9d:5e:f8:32:db:8a:c5:35:a3:
9e:02:1d:f5:e2:80:e3:e1:5a:04:64:5a:f0:c4:79:
c0:42:dd:c1:82:25:b5:2d:7b:66:dd:01:77:ab:dd:
f3:62:f6:18:97:93:43:b6:45:e1:d7:27:77:54:ab:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8C:7C:96:CE:AA:05:DF:E1:FC:58:2F:04:D0:E2:90:D5:D2:5B:A3
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/6Ix8ls6qBd_h_FgvBNDikNXSW6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.116.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0c:9a:1b:68:f1:e8:10:3e:2e:9c:b9:15:c0:51:93:7e:73:
d9:84:ef:b1:41:a3:b4:0e:6f:5e:36:e3:9c:c7:72:97:a5:6d:
64:16:92:96:5d:a1:b3:5b:ba:6c:7e:b3:3b:b1:e7:b9:9d:1c:
69:5c:3e:36:bd:24:1c:90:a7:87:e0:bb:aa:37:1c:e8:49:65:
2d:77:b2:fb:22:c6:14:10:64:55:59:67:8c:2f:14:fe:51:ca:
b1:33:bb:c5:d1:bf:30:02:fb:18:d9:ad:39:73:10:37:f8:48:
42:23:fa:a8:b2:0d:61:a0:56:56:9e:bb:36:9b:e1:66:c0:bc:
3b:74:ca:72:87:fe:fc:ba:5d:59:3f:fe:58:8a:c5:0f:ec:76:
3b:8f:ff:ff:29:21:7f:d0:16:71:d7:ae:95:d6:61:93:25:30:
e1:3d:cd:90:d3:e0:cd:49:91:eb:62:b4:24:45:1d:fe:41:97:
5a:cf:82:70:84:a6:7d:6e:df:dd:02:ce:24:db:91:bd:c0:34:
8b:f1:91:8c:92:03:ad:97:01:71:63:70:6a:32:52:de:20:7b:
09:9b:12:6d:06:27:81:cf:26:9d:24:8a:9d:87:68:82:44:be:
91:55:7c:32:59:e0:a2:02:8d:88:6c:ba:1f:ac:f9:1d:3b:6a:
00:23:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:36 2024 by rpki-client on console-fra.rpki-client.org