Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/b_lE6zeiFt9i5WOmgLrlHUhKrfs.roa
File: b_lE6zeiFt9i5WOmgLrlHUhKrfs.roa (raw, json)
Hash identifier: hR+OxdtdOAT2HCieHMQfKW0iytvs+ZaOO32Y9vnTXuc=
Subject key identifier: 6F:F9:44:EB:37:A2:16:DF:62:E5:63:A6:80:BA:E5:1D:48:4A:AD:FB
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 01856C0A5C857CF7F991003081280E07F541
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/b_lE6zeiFt9i5WOmgLrlHUhKrfs.roa
Signing time: Sun 01 Jan 2023 06:34:56 +0000
ROA not before: Sun 01 Jan 2023 06:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8758
IP address blocks: 193.73.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:5c:85:7c:f7:f9:91:00:30:81:28:0e:07:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jan 1 06:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ff944eb37a216df62e563a680bae51d484aadfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:e1:e9:08:49:c4:c9:18:76:60:fc:1e:4b:
6a:a2:30:3f:72:c9:ed:31:0b:5c:2a:18:55:e3:a5:
89:d7:45:cd:47:8d:c6:af:87:40:a6:2b:7b:37:55:
15:4e:8c:6f:e9:38:59:ff:ea:71:33:3f:b7:66:26:
37:b6:e9:f6:80:bd:f1:c0:b5:a9:95:ea:a7:f1:ff:
a8:d3:88:35:76:eb:bc:cf:d8:55:17:93:ae:7b:29:
ee:5f:2c:5c:70:2b:a8:14:0e:15:e6:9c:c6:90:27:
e4:d7:6a:54:75:0c:72:f8:48:7e:8a:90:43:55:49:
a6:9f:af:af:a6:a8:09:8c:b9:02:99:34:ba:b2:28:
06:09:3b:31:60:f9:e6:60:2f:a9:88:e7:33:0a:44:
ed:e4:69:64:5c:e3:3d:8c:45:2f:1d:42:95:8f:22:
06:1a:63:ce:81:88:53:96:3b:97:9f:81:56:ab:e0:
c3:11:6d:73:32:d5:98:16:42:3d:86:a9:b0:dc:37:
8c:9e:65:f1:9a:90:26:f1:38:b8:6c:23:f7:e2:ab:
5f:ae:b6:ba:a4:31:a8:5f:58:82:a4:67:94:67:82:
1b:4b:40:cc:fd:71:34:4f:e6:ad:cc:40:03:64:af:
b8:e2:83:19:c6:5f:73:b2:10:1f:52:eb:9b:03:9b:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:44:EB:37:A2:16:DF:62:E5:63:A6:80:BA:E5:1D:48:4A:AD:FB
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/b_lE6zeiFt9i5WOmgLrlHUhKrfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.211.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a5:9b:6e:7a:7a:9e:bb:91:ac:4b:3e:38:ab:08:23:7b:0b:
fe:a5:74:cf:4f:63:86:ee:90:78:46:cb:8d:ab:5d:7a:9a:f8:
78:93:41:fd:68:12:35:3c:a2:96:cb:f7:b1:a6:56:63:5f:95:
0d:e5:bd:7d:7e:3e:04:e2:25:45:28:60:fb:24:6d:86:ac:bb:
69:c2:da:3e:99:b8:7f:9a:d5:44:37:c0:2b:ff:14:40:0e:25:
5f:8c:cb:31:48:be:5c:85:c2:62:48:4c:28:cf:8b:bb:b4:24:
7a:9e:f5:f3:bc:43:89:67:01:0b:1d:a0:3e:10:f7:e1:a4:89:
da:e3:2e:d4:d0:7e:a4:55:f1:73:ed:10:ba:a3:2c:e3:75:0a:
7e:22:d1:fa:bd:fd:5b:b6:ba:bb:31:92:47:85:cb:cf:1e:89:
53:ea:24:57:65:5b:0c:7c:90:ee:df:9e:cb:dc:32:81:18:d0:
13:2b:06:4e:7c:1a:5d:6f:c5:42:5f:4f:36:7c:76:e7:5b:f2:
1b:b9:4e:70:ef:75:5e:aa:64:2b:37:64:9f:a2:e0:9f:cc:c1:
0a:40:5a:77:12:03:d1:f9:6c:24:09:6c:27:70:d6:06:ab:80:
9d:58:53:68:ef:99:5e:99:6c:39:14:f6:1b:2f:cc:01:8c:1d:
3f:ad:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org