Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6l-8165J7LDE-Y8KMW48ByDpfb0.roa
File: 6l-8165J7LDE-Y8KMW48ByDpfb0.roa (raw, json)
Hash identifier: BbmELXaR7Ha4p+clh4uzx2gDnaG2Ye/ufUo7RsFx+II=
Subject key identifier: EA:5F:BC:D7:AE:49:EC:B0:C4:F9:8F:0A:31:6E:3C:07:20:E9:7D:BD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A9B225E89E63414FF90A71C18936C9E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6l-8165J7LDE-Y8KMW48ByDpfb0.roa
Signing time: Sat 25 Mar 2023 21:09:47 +0000
ROA not before: Sat 25 Mar 2023 21:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12129
IP address blocks: 37.221.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:9b:22:5e:89:e6:34:14:ff:90:a7:1c:18:93:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 21:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea5fbcd7ae49ecb0c4f98f0a316e3c0720e97dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:0c:d4:b1:d5:91:92:a8:4f:3f:c1:ce:07:
bf:d5:4e:6c:ae:4a:c0:d1:56:00:68:92:95:10:bb:
54:32:a3:82:16:58:62:1e:e9:06:1d:b8:99:25:b4:
ac:e8:bf:02:1b:59:df:1a:92:21:b0:8e:80:17:c6:
8b:39:d0:dd:c4:20:2e:cb:2b:29:0b:75:52:85:7f:
75:da:ac:ca:a5:02:e5:70:df:b8:e9:95:0d:5f:88:
a7:b0:34:98:61:6e:4d:70:38:e7:8d:d5:85:0c:70:
ad:fe:2b:2a:39:82:6d:9f:bf:a7:72:d0:d6:e1:27:
de:66:54:4e:f1:e8:78:ab:fc:ae:01:31:62:60:40:
da:bc:33:ec:55:f4:27:2c:05:fe:e0:d2:3e:3d:66:
7d:98:df:47:ca:ed:13:0b:6d:65:08:c6:23:00:61:
94:5f:34:f3:ec:9c:2d:dd:6f:a6:f8:2c:15:a7:16:
a5:b7:a0:e5:c9:d4:db:c5:5f:5f:78:eb:dd:78:45:
82:b1:c1:ff:b2:68:79:8a:32:6c:f0:f2:00:3e:f0:
06:89:f6:76:e6:36:c8:b4:d5:ea:16:7d:78:ba:6c:
40:68:c8:e5:08:13:c4:d8:7e:ab:7e:1e:c0:05:8f:
76:1f:b8:17:d6:1c:10:b1:56:3e:a3:4a:a8:73:55:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:BC:D7:AE:49:EC:B0:C4:F9:8F:0A:31:6E:3C:07:20:E9:7D:BD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6l-8165J7LDE-Y8KMW48ByDpfb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.109.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f9:5e:1f:18:7f:ab:4b:44:1f:5d:00:c9:86:85:57:8c:aa:
69:f3:2d:df:88:95:d8:7e:88:47:7f:77:ca:33:9a:db:a2:27:
f9:01:c1:59:c3:da:9d:d1:6b:f6:67:31:8e:dd:d5:f5:a5:4e:
c7:15:3f:ed:6d:15:c1:92:d6:43:c6:a1:3f:58:c3:5b:56:36:
68:b3:48:50:65:ae:2a:6c:c8:f4:71:db:24:97:1f:f6:98:dd:
bb:bc:6f:9d:f7:96:45:7e:64:5b:d6:cc:ca:76:1b:15:1f:3c:
e9:12:1c:a5:17:65:34:db:7b:57:fc:ed:16:7f:86:a5:c5:d5:
61:0c:2e:3b:bf:09:33:5b:47:cb:3b:e8:de:d7:65:23:2a:fb:
43:d0:f2:c8:05:80:3b:4a:cc:9c:02:57:16:af:82:e5:b2:b3:
a1:cb:a3:5c:16:9a:73:99:d9:08:54:7b:bb:22:4c:9c:d3:0b:
d9:41:bb:ec:9a:71:f0:3e:48:b1:08:6f:38:d0:9a:a3:ec:d6:
16:0e:0b:a6:b8:0d:f0:a9:f2:56:97:d3:5d:08:c0:a5:97:20:
11:f2:b4:65:d8:06:d7:ae:3e:54:1d:9a:72:23:18:f7:e3:fa:
fd:db:b8:a4:11:b3:4c:5a:ac:d8:2a:58:e9:dd:e1:db:3d:32:
15:31:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org