Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6K8cTGsqdmVYEp7NKmw23U_F3WU.roa
File: 6K8cTGsqdmVYEp7NKmw23U_F3WU.roa (raw, json)
Hash identifier: 8ehZ09cfumhtwENf1sxkBVrnGP1rkhnpA5ZywD3VhmE=
Subject key identifier: E8:AF:1C:4C:6B:2A:76:65:58:12:9E:CD:2A:6C:36:DD:4F:C5:DD:65
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0191530061BAEF4B96726086578A3857AF63
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6K8cTGsqdmVYEp7NKmw23U_F3WU.roa
Signing time: Wed 14 Aug 2024 22:26:59 +0000
ROA not before: Wed 14 Aug 2024 22:26:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 91.214.116.0/24 maxlen: 24
91.227.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 16:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:53:00:61:ba:ef:4b:96:72:60:86:57:8a:38:57:af:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 14 22:26:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8af1c4c6b2a766558129ecd2a6c36dd4fc5dd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:cd:e5:2e:4e:8f:6f:a2:44:b2:fd:9e:82:
4c:0d:7b:31:2c:8f:51:80:c1:aa:8d:67:62:c4:24:
2f:a8:d4:90:ac:0d:14:37:2d:8d:76:18:43:a7:a5:
a9:d8:45:d5:1a:dc:4e:84:94:df:53:49:a1:cf:2c:
be:c0:a6:86:36:7b:34:a4:c6:65:8b:80:b6:d0:80:
ca:4c:da:99:54:c5:b5:dd:55:d4:0a:6f:15:98:b8:
48:aa:6b:3c:54:d8:68:19:d2:5e:ec:2b:84:90:5c:
b1:42:d0:bc:70:a4:b1:aa:af:c3:d6:27:e5:1f:4a:
e6:15:4a:a1:52:fe:a6:45:bc:dd:28:7c:4e:b1:5f:
55:a5:e9:40:88:17:08:0a:97:59:09:af:9e:a2:8c:
0d:84:4a:24:e5:42:35:77:8b:8c:14:ef:29:ae:17:
74:59:4d:ad:01:c5:76:d9:47:27:de:a1:89:9f:1c:
ee:f6:21:57:09:37:90:73:d3:45:ad:86:b1:cf:0c:
36:6b:3c:d0:de:43:29:0f:89:a5:21:d9:38:ee:52:
c8:00:7e:b5:63:3e:bc:9c:5a:26:ca:05:34:8f:f5:
b6:e9:c9:e0:ae:c6:3a:0b:82:7e:73:4e:7d:35:d5:
ac:d9:61:1f:6c:3e:06:9e:53:91:94:7c:1e:14:fb:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:1C:4C:6B:2A:76:65:58:12:9E:CD:2A:6C:36:DD:4F:C5:DD:65
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6K8cTGsqdmVYEp7NKmw23U_F3WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.116.0/24
91.227.154.0/24
Signature Algorithm: sha256WithRSAEncryption
25:90:5a:c2:bc:1e:c1:dd:70:46:56:c9:b0:ca:46:74:55:78:
af:b9:c7:bc:11:d8:eb:0a:e8:a6:bd:dd:7c:60:96:7e:b7:5b:
68:98:6a:0d:ec:d0:90:a6:56:bb:eb:19:b5:cf:f8:33:3b:a0:
60:e3:6d:21:b0:17:a5:57:9f:7a:71:5a:e7:f1:44:a7:ea:cc:
99:dc:ef:d6:7e:e4:09:ca:fb:e5:b6:2d:aa:ff:f4:48:87:ae:
86:3f:c1:7a:1b:de:d1:4d:10:d1:fc:31:09:91:38:95:2e:8f:
4b:f9:2a:f8:a7:d2:d8:bb:07:52:5d:6d:fb:43:22:98:bd:e1:
5b:f4:ac:50:20:6e:f0:0c:36:b0:de:6c:2b:f4:38:3f:69:a3:
11:42:c8:c8:8f:a0:56:f0:df:3e:e9:b8:76:bb:5f:1f:6b:c1:
62:ef:0a:dc:73:45:7f:32:9b:80:a6:89:4c:9b:98:af:e7:79:
2e:cc:d3:c9:ad:7d:43:ac:da:63:ac:56:cd:ec:4e:22:9e:62:
c3:c2:66:b2:11:0a:2c:69:f3:6b:37:1d:bb:18:a7:85:17:90:
c6:a6:e0:33:b1:ee:3c:2a:6b:0c:80:ec:e0:6c:c2:84:ac:b3:
d5:88:79:6b:09:ff:f7:00:8e:84:6e:d4:bb:eb:60:ae:8b:71:
6c:f3:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:49:09 2024 by rpki-client on console-ams.rpki-client.org