Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6STCobElpVD-4VXJIYG9-RxTRHM.roa
File: 6STCobElpVD-4VXJIYG9-RxTRHM.roa (raw, json)
Hash identifier: a82I37jJw8rfHB2s/jkn18+/kIzTOs9YDdyriIAf+uE=
Subject key identifier: E9:24:C2:A1:B1:25:A5:50:FE:E1:55:C9:21:81:BD:F9:1C:53:44:73
Certificate issuer: /CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Certificate serial: 01856B6E8788945BE9A8B4D07C05F75E2137
Authority key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6STCobElpVD-4VXJIYG9-RxTRHM.roa
Signing time: Sun 01 Jan 2023 03:44:43 +0000
ROA not before: Sun 01 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21500
IP address blocks: 194.54.186.0/24 maxlen: 24
194.54.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:87:88:94:5b:e9:a8:b4:d0:7c:05:f7:5e:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Validity
Not Before: Jan 1 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e924c2a1b125a550fee155c92181bdf91c534473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:dd:8e:30:cd:1a:1e:09:9e:57:04:6d:4f:
10:ac:21:87:e7:d6:fc:6e:f8:e6:cc:ea:05:c4:3e:
39:21:ba:86:d2:12:22:bc:36:89:fb:da:91:b1:8a:
0c:be:7c:34:e9:41:c7:6c:25:8c:4a:a5:0d:be:c1:
78:b3:bf:46:64:76:6a:08:c9:0f:41:e4:01:c0:e0:
65:2d:0c:d0:c3:30:14:89:e5:ab:cb:33:dd:8d:49:
b9:dd:b2:84:9a:fc:0c:40:81:46:af:22:1a:53:fb:
76:de:ab:ac:ab:0c:53:96:5d:a8:f9:b6:d3:6f:c7:
c0:7c:8f:65:9d:8a:e6:6f:9c:c7:1e:86:ae:15:f5:
56:38:4d:d7:ea:9d:f2:55:9f:3d:bd:f6:c3:58:0c:
77:cc:87:e3:be:1d:33:b1:d7:42:25:18:e7:d0:41:
2c:c0:2a:ce:e2:7c:57:bb:28:d2:a0:38:d7:4d:8a:
c3:f6:34:2a:d1:e7:76:11:b5:11:e5:18:e3:c7:94:
2d:69:96:fe:29:60:43:6e:6d:ec:f8:b8:88:10:f1:
5d:e6:64:8c:86:e4:4e:fd:6a:8d:10:e1:46:07:4a:
c1:f3:44:1f:bd:6c:75:04:7b:fb:81:7c:77:45:c0:
cc:5d:f3:28:82:11:5c:6f:79:53:2e:48:73:e4:87:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:C2:A1:B1:25:A5:50:FE:E1:55:C9:21:81:BD:F9:1C:53:44:73
X509v3 Authority Key Identifier:
keyid:E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6STCobElpVD-4VXJIYG9-RxTRHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.186.0/23
Signature Algorithm: sha256WithRSAEncryption
97:d1:e5:56:09:b6:89:ce:dd:fb:5c:63:92:1a:55:15:ef:88:
87:d7:b0:15:27:45:61:ba:d4:13:2b:9d:69:bd:70:84:f9:71:
b2:62:2e:d4:33:ca:a9:48:b0:90:e7:4d:74:54:99:83:5a:a2:
6a:1e:17:e7:43:3b:b5:72:82:a0:8b:3d:69:d9:90:10:a7:14:
2a:0a:17:55:d4:c7:c9:d7:db:80:6b:02:5e:11:48:c2:b6:28:
21:85:34:10:5c:45:85:70:d2:c4:91:bc:40:65:ef:4d:bc:5f:
34:67:a4:b4:1e:7e:2a:f4:c7:55:ba:38:49:c6:af:7b:0b:ac:
bc:f1:8d:b3:ce:43:6f:93:23:5d:3e:bc:4a:76:3a:c7:03:bb:
0c:c7:6d:30:a2:31:1c:4d:57:68:4e:6c:97:67:94:80:94:a9:
0e:00:0f:f3:35:0f:1b:09:f9:38:5e:77:ce:39:55:fc:57:89:
5c:ca:6c:0e:a2:40:f9:f9:80:a5:5a:aa:9d:a9:d7:30:27:6a:
e3:df:34:07:a5:84:02:ba:07:f9:e1:19:09:30:6e:8a:45:55:
ce:98:4f:49:49:af:c3:b1:85:97:cb:cc:3c:74:83:00:cf:da:
c5:b4:ed:3c:79:27:10:c7:dd:99:45:fd:49:35:bb:f2:2a:8e:
d1:70:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:52 2024 by rpki-client on console-fra.rpki-client.org