Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6xt-a_IcB33m_bLDtUKgQ138pAU.roa
File: 6xt-a_IcB33m_bLDtUKgQ138pAU.roa (raw, json)
Hash identifier: KEfzAMlnKOzEUiWelLoimYrYQMcu0J9adezy/dPHL3A=
Subject key identifier: EB:1B:7E:6B:F2:1C:07:7D:E6:FD:B2:C3:B5:42:A0:43:5D:FC:A4:05
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018ADF91A9B053BC312BEBC7DC54C5579EC2
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6xt-a_IcB33m_bLDtUKgQ138pAU.roa
Signing time: Fri 29 Sep 2023 06:12:59 +0000
ROA not before: Fri 29 Sep 2023 06:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:91:a9:b0:53:bc:31:2b:eb:c7:dc:54:c5:57:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Sep 29 06:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb1b7e6bf21c077de6fdb2c3b542a0435dfca405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:91:c7:f0:d4:23:02:8f:06:e9:24:3d:50:
3b:cd:20:e9:dd:6a:74:cb:b2:97:31:15:23:b9:50:
30:d9:65:db:7c:24:0b:9a:de:e3:b5:a9:f3:1f:a7:
23:22:36:07:8a:25:ab:16:8b:77:ae:4d:ea:b4:34:
5a:39:72:da:50:69:2b:f8:0e:7c:66:22:04:fe:38:
99:b7:07:fb:a1:04:8c:d9:58:58:67:f0:5b:b0:d9:
c3:dd:19:a8:03:90:10:2f:7e:96:83:4e:db:80:43:
60:ae:cc:ec:ce:a5:62:58:44:d9:ef:71:af:e4:6b:
53:3a:8c:43:f2:7d:da:7b:ed:95:37:46:76:c4:0f:
87:6c:c3:a9:b9:c3:2f:6f:5f:e2:1d:bb:81:d7:a3:
f6:d4:6e:0f:ae:f0:da:b8:f9:c9:c2:c5:5f:1e:a5:
23:22:47:06:ea:e3:3c:56:5c:b9:54:f8:3a:dd:cd:
ce:61:b7:ed:26:d3:d6:95:78:c6:a0:5d:9f:72:3c:
89:db:f5:83:28:01:7a:5b:cf:78:b2:35:5d:e5:b6:
8a:5a:43:a8:c6:79:70:98:fa:53:7e:17:5e:6a:22:
8e:0f:ac:8f:cf:79:05:0d:7a:fc:ad:c9:71:9f:e3:
59:4f:d5:67:30:dc:96:61:db:b2:e6:47:ae:8d:13:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:7E:6B:F2:1C:07:7D:E6:FD:B2:C3:B5:42:A0:43:5D:FC:A4:05
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6xt-a_IcB33m_bLDtUKgQ138pAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
93:f4:7d:96:6d:c3:dc:48:35:6b:ed:7a:b3:1d:8c:2c:54:52:
1d:9f:77:39:78:47:e0:84:30:cc:ba:af:f2:f8:7b:8e:94:3e:
a4:f3:af:97:b5:3f:4e:51:90:72:c3:d3:8c:3a:8b:50:3a:da:
5c:c9:b4:a2:d9:cf:e2:21:b6:56:bf:f7:39:3d:d8:c2:47:a4:
71:de:76:1e:eb:c1:7a:1d:af:ad:35:f9:e9:b7:4b:7e:5c:0a:
67:ef:9d:2e:ad:64:2a:07:73:ff:76:4d:22:69:ba:c3:ff:a2:
62:a8:42:e5:52:f3:7c:1f:87:4f:a5:5e:ac:8c:95:bf:3d:92:
4a:f8:d4:17:87:c3:be:ed:c1:d8:ea:ab:1a:5c:17:a1:1c:5a:
b2:74:c9:58:e1:58:d8:ed:ef:d9:14:34:93:f2:8d:16:80:ca:
c9:0f:23:77:ee:28:4c:68:93:d1:fe:8c:92:f9:00:60:5a:c0:
08:c6:15:d6:b8:d8:8b:90:92:db:c6:fa:22:8c:35:ae:30:c2:
ba:6d:6d:ec:45:87:32:4e:45:42:2a:64:b0:45:fa:e0:a2:4e:
9b:d4:0c:96:37:73:66:51:3b:45:29:f7:8a:62:7a:82:b6:ec:
f4:b3:97:b0:c8:05:0a:8a:f2:54:2b:c3:e8:21:1d:62:8c:70:
25:ee:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 08:45:26 2023 by rpki-client on console-ams.rpki-client.org