Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/6PxeV7YERNxJA2cDIPT9lkVUWQk.roa
File: 6PxeV7YERNxJA2cDIPT9lkVUWQk.roa (raw, json)
Hash identifier: 7icqXVJ08Xe2Xs8BAP/0wIDaXc84mPfcZuUsPxAUnJo=
Subject key identifier: E8:FC:5E:57:B6:04:44:DC:49:03:67:03:20:F4:FD:96:45:54:59:09
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 018CC3B70B32BE7B593AA4B42D61431C5B36
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/6PxeV7YERNxJA2cDIPT9lkVUWQk.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47714
IP address blocks: 185.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 10:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:32:be:7b:59:3a:a4:b4:2d:61:43:1c:5b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8fc5e57b60444dc4903670320f4fd9645545909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:c8:6c:74:1c:e8:41:a3:a1:37:6c:0d:4c:
5f:ca:67:d8:1d:2f:e0:b6:28:60:2f:3c:f7:65:a5:
93:07:0c:d2:69:d4:c1:e6:71:19:d0:f7:05:4d:7a:
e1:0a:f5:9a:c4:47:fd:af:01:c3:25:74:7f:23:87:
bb:1b:38:55:06:5c:32:91:2e:b9:73:a8:81:ff:6e:
ee:12:8c:ab:35:8e:20:74:c5:0a:42:10:89:31:8b:
e6:d8:2f:42:37:e6:05:4b:b9:67:b4:bb:50:f1:6d:
ed:d0:c0:ad:18:23:17:46:bc:c5:3f:de:2c:b4:79:
be:85:66:c1:07:35:16:d1:c2:f6:ed:bc:07:6e:96:
32:92:af:25:4a:c0:ed:07:7c:9d:5c:53:e5:ab:8b:
eb:db:81:3f:3f:35:c7:04:78:fa:12:0a:bf:d0:32:
f0:68:5a:93:93:ac:4e:46:65:b6:5e:40:87:d4:09:
f1:dc:da:d1:06:0d:e0:fa:b1:92:f2:b5:1f:fa:69:
3f:2a:d1:9a:6d:97:ae:5b:03:7c:20:65:72:93:64:
e9:0a:2d:e7:a5:76:45:4f:f0:56:be:cd:fe:45:be:
19:93:0d:fb:d0:94:69:c7:70:9d:7d:d2:da:c3:c2:
4a:22:94:f1:0f:f9:5a:ef:ab:14:94:90:8d:59:ee:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:5E:57:B6:04:44:DC:49:03:67:03:20:F4:FD:96:45:54:59:09
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/6PxeV7YERNxJA2cDIPT9lkVUWQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0c:9d:de:2a:43:6c:cd:a2:d6:d4:d2:e0:00:ee:3c:4b:51:
66:b7:5c:3a:ec:ce:15:de:3a:f6:3c:8b:7f:df:3e:6b:dc:ef:
30:01:a7:bd:d3:fd:17:c7:fa:6f:20:67:b3:49:77:ba:0c:69:
73:3c:b0:97:55:14:45:14:c3:c1:60:03:c3:ce:76:0e:79:5c:
6b:11:64:0c:ee:9b:0e:b1:66:f1:e6:2a:b7:64:a8:8c:fd:bc:
e2:79:24:38:28:dd:c9:60:bb:c4:52:9f:5d:9a:6e:de:71:43:
f2:56:a9:72:82:f5:dc:a2:95:e7:50:c0:e1:44:18:b1:a2:01:
b3:13:49:dc:f1:42:f2:bd:33:c7:7e:dc:27:1e:c4:88:64:ae:
a0:03:99:9e:53:7a:5d:f7:02:70:82:68:90:48:e8:8c:f2:31:
3d:c9:49:d2:f3:8f:94:4a:ae:1f:c2:c9:75:1d:87:ec:de:47:
51:6f:73:c4:bb:47:29:de:59:70:67:9d:82:63:c8:a9:61:c3:
a6:e4:d0:46:d0:a4:c7:22:30:bd:e7:3d:7a:9b:7e:ca:b5:98:
2c:7f:5d:0b:80:11:51:65:7b:68:3d:0c:4f:b5:ae:fd:ad:49:
3b:00:39:87:94:0c:74:81:05:d7:4a:bc:db:1b:74:b5:6e:8b:
ff:ec:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org