Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/6WIkbg9PDU_gk4jw5zQcDhQx8bQ.roa
File: 6WIkbg9PDU_gk4jw5zQcDhQx8bQ.roa (raw, json)
Hash identifier: BT6ICcW2quH7wMK/zNoiJPgFbSyE/lCWeHY1fbPZWgQ=
Subject key identifier: E9:62:24:6E:0F:4F:0D:4F:E0:93:88:F0:E7:34:1C:0E:14:31:F1:B4
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01856F79A117F74283D577DEB5B7CA72DD6D
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/6WIkbg9PDU_gk4jw5zQcDhQx8bQ.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9127
IP address blocks: 195.182.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a1:17:f7:42:83:d5:77:de:b5:b7:ca:72:dd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e962246e0f4f0d4fe09388f0e7341c0e1431f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:dd:ff:5e:ba:ba:d1:af:43:71:11:93:b7:
55:4f:ab:12:ce:4d:7e:44:98:66:ed:ff:6c:c3:ef:
b4:18:ab:b1:05:fc:c8:08:18:42:91:67:4c:f5:e2:
71:45:3d:1e:d0:9f:97:8f:30:c2:ed:a7:ad:b9:17:
d3:02:c9:fa:e3:20:d9:b3:a2:7a:74:e7:f9:45:e1:
9c:d2:fb:18:b9:07:0f:5c:52:b0:94:1e:9f:da:d5:
ac:e3:77:97:81:11:dc:09:44:84:cc:98:88:be:f0:
e7:83:14:29:ba:18:de:fd:c6:a6:5e:9f:a9:cd:c7:
a1:c2:20:e0:d1:71:e9:1f:f1:eb:3a:02:3b:39:a7:
42:a8:9c:4d:e2:20:11:63:25:65:9e:4f:8d:4e:a1:
95:19:b0:86:00:2a:93:d1:17:aa:b4:89:f3:3d:1f:
ed:02:23:ea:02:50:8a:21:cc:79:d9:01:45:61:d1:
8a:3d:1a:54:43:bb:ec:13:3a:55:76:ec:3c:24:9b:
15:d5:9d:d5:24:3f:ef:ce:4b:7e:e6:3f:32:69:8b:
ae:e5:a1:84:82:91:a1:4e:9f:e9:01:2b:17:2b:20:
06:ff:a3:a1:1a:5c:c1:47:ab:ba:7e:d2:7e:4a:62:
58:c0:79:84:8c:6b:4b:b6:39:f9:6e:97:64:a7:5b:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:24:6E:0F:4F:0D:4F:E0:93:88:F0:E7:34:1C:0E:14:31:F1:B4
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/6WIkbg9PDU_gk4jw5zQcDhQx8bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.41.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ec:58:94:0a:ba:0f:71:f0:b1:09:c0:1e:30:b1:6f:18:37:
11:c3:ce:71:76:85:cb:d4:c3:08:d9:3a:0c:3e:61:2d:4e:57:
98:62:ec:b0:36:50:d6:9f:3b:61:08:0e:54:30:70:f2:1f:b4:
ba:08:53:1c:6f:b5:a0:22:01:76:02:2a:16:c4:94:ea:2a:ea:
68:f8:02:ab:e5:e5:08:c9:78:34:55:39:7a:c7:08:47:5d:1a:
22:07:3e:77:3c:b0:6a:96:9f:c3:43:51:1e:3c:e1:9f:44:86:
ca:a3:6c:57:81:ba:89:6a:57:c7:6d:27:0b:88:90:ef:7a:ca:
fe:20:68:2e:67:3c:c0:a2:3c:5c:b8:56:3c:04:e1:62:90:34:
3d:27:a1:33:a5:0e:8b:7a:ac:30:cf:f7:21:bb:3f:9b:92:89:
7c:43:57:f0:9e:b9:2d:b9:f5:26:93:2b:0d:18:6b:c3:4d:34:
bf:cf:78:10:2d:bb:f3:6b:70:5f:ef:4f:ea:be:ba:02:87:73:
46:78:1e:c3:0c:8a:22:bf:05:bb:37:81:ec:1c:5b:97:84:3e:
a6:42:fb:0e:c7:85:b2:8a:1e:ea:8b:ea:ec:14:22:9e:49:88:
1d:c1:d1:fe:ac:51:63:e0:ff:c5:20:ab:c5:9a:04:d3:1a:93:
8f:85:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:24 2024 by rpki-client on console-fra.rpki-client.org