Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/M6P9dLlITo1TfdQxGFIr4iXT1b0.roa
File: M6P9dLlITo1TfdQxGFIr4iXT1b0.roa (raw, json)
Hash identifier: 8M9G8hVQDLrNP6sqlaY5KBXy8KRl4Cx8/3CrI684Lr0=
Subject key identifier: 33:A3:FD:74:B9:48:4E:8D:53:7D:D4:31:18:52:2B:E2:25:D3:D5:BD
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01856C5CA319AE90EBD4D17FF0CB61F86ED7
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/M6P9dLlITo1TfdQxGFIr4iXT1b0.roa
Signing time: Sun 01 Jan 2023 08:04:48 +0000
ROA not before: Sun 01 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 86.62.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 13:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a3:19:ae:90:eb:d4:d1:7f:f0:cb:61:f8:6e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33a3fd74b9484e8d537dd43118522be225d3d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:f0:bd:43:0e:80:6d:d1:f2:45:7a:d1:15:
26:48:33:04:54:9d:da:c4:2a:83:7c:a3:48:f4:51:
24:34:e4:ed:cf:9a:15:50:8d:6e:5a:ff:6a:f9:9a:
b1:7e:2f:4d:14:3b:2f:d1:3a:25:cd:b4:45:82:8e:
0a:60:94:88:23:94:da:fe:3b:19:39:7e:25:60:1c:
f1:f7:56:72:2b:93:74:33:37:ab:4e:0f:04:b5:c4:
19:49:11:d2:b4:45:7b:10:d9:78:b1:f8:45:20:a4:
9e:2b:23:6c:84:e6:ae:5c:d3:cc:5b:71:48:fa:90:
ac:7b:e7:e7:55:95:88:de:e0:98:cc:2c:b8:8d:c7:
03:7a:83:07:28:dd:36:19:5f:f5:23:76:c2:ee:b1:
6b:88:a3:ef:cc:af:f3:a1:bc:06:bb:a6:50:aa:07:
95:02:dc:b0:39:6a:f9:0c:34:57:a8:83:47:4c:5e:
23:7f:f1:be:ee:97:2e:d3:d8:60:5a:c5:00:ab:29:
23:a9:cb:cc:0b:b1:bf:93:b2:3e:15:a2:0c:82:b2:
95:b2:72:ed:ca:a3:1e:88:2c:cb:7e:27:9f:db:f7:
89:cf:a2:0e:6f:36:df:4f:8d:04:d1:a7:9b:39:8b:
0d:5d:21:30:4d:43:d2:c0:f5:df:91:c2:32:b8:3e:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:FD:74:B9:48:4E:8D:53:7D:D4:31:18:52:2B:E2:25:D3:D5:BD
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/M6P9dLlITo1TfdQxGFIr4iXT1b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:90:8c:23:1c:b6:22:8b:72:51:b8:0c:c0:82:6a:76:7a:3e:
75:2b:36:fc:e4:6c:e5:2a:97:01:98:29:53:3d:a6:93:4f:7c:
28:c0:b4:6a:f6:9b:fd:4b:9a:9a:ae:96:65:8c:18:af:6d:58:
82:b3:54:40:fc:be:06:b8:3f:1a:d2:b2:9b:c9:2c:97:aa:4f:
24:fd:bf:f1:d0:66:76:05:8b:1a:ee:5c:20:4b:87:b9:ff:09:
64:ac:e7:04:e6:4e:6b:e3:94:1d:e1:18:b2:52:7e:6f:15:9f:
4e:68:58:24:63:60:75:a2:e0:90:cc:7e:84:a7:74:29:5c:75:
a1:0f:94:a0:ba:04:27:a7:fa:b1:da:cb:18:12:06:af:a0:11:
50:eb:3c:d5:25:00:b3:21:ce:4f:c0:bf:73:32:c6:f2:04:a7:
e3:3f:db:33:b9:1d:16:7e:8d:1c:d8:71:ba:31:d9:44:31:a4:
d8:69:94:9c:0a:6c:b6:fe:94:e3:64:a9:1a:31:fc:94:ec:37:
f6:b5:5b:c1:f5:31:f5:87:d2:e8:1e:f3:ab:a5:a0:50:d1:76:
bb:90:b5:db:6a:17:0e:1d:07:90:64:8c:24:36:0f:d0:c4:60:
b6:a3:fb:d1:ef:24:2b:4c:9e:56:04:ac:b6:ce:86:4b:c0:0f:
0f:92:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org