Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/6Sh82jgFMfGeXkRk1N0u2lCe8Pg.roa
File: 6Sh82jgFMfGeXkRk1N0u2lCe8Pg.roa (raw, json)
Hash identifier: 0xkfdxNOXE3FWytHtU546ii+MmpDMIZiNL7gC8r31us=
Subject key identifier: E9:28:7C:DA:38:05:31:F1:9E:5E:44:64:D4:DD:2E:DA:50:9E:F0:F8
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 01856D6F4808DFE11FD4A64DB0EEB071AAA2
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/6Sh82jgFMfGeXkRk1N0u2lCe8Pg.roa
Signing time: Sun 01 Jan 2023 13:04:47 +0000
ROA not before: Sun 01 Jan 2023 13:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200657
IP address blocks: 194.99.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:48:08:df:e1:1f:d4:a6:4d:b0:ee:b0:71:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Jan 1 13:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9287cda380531f19e5e4464d4dd2eda509ef0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:20:98:db:90:2c:90:5f:0d:50:ab:65:cc:
ff:b7:dd:2b:ef:ce:41:6f:9b:96:3a:a8:97:01:bd:
1e:d8:48:af:04:52:c0:c5:42:85:88:91:14:20:85:
7b:31:43:ff:56:b2:c1:bb:40:0c:0b:1b:fb:e3:15:
1b:74:24:73:ab:01:d6:72:25:68:64:03:65:b4:bc:
c3:08:8d:33:e2:d8:08:53:6b:73:ef:54:cb:40:f4:
43:2a:78:ed:1f:18:aa:8c:2e:37:61:c7:97:ce:d9:
20:9c:d0:e5:f0:b6:6c:9c:3a:c3:65:e2:15:58:54:
a8:6f:ed:0d:53:8b:6d:10:73:c0:da:37:c6:69:ec:
1c:b9:a0:d8:57:5e:b2:cf:b1:70:d1:64:36:d3:b2:
72:ee:73:31:b6:d0:d3:60:1f:68:69:e9:9e:1b:67:
63:3a:b6:bc:01:ac:4a:92:34:62:ef:30:ce:23:7b:
3b:7b:2a:84:85:9c:bc:95:3e:d3:03:42:33:07:bb:
dc:20:d1:da:57:f6:e3:14:fd:2e:e0:46:27:b1:60:
df:ea:40:be:03:d0:20:fa:35:10:eb:84:f9:c0:6b:
1e:4c:89:fc:19:56:b0:9a:27:ba:3e:81:f8:ad:89:
50:0b:c2:49:c4:9d:3a:47:26:05:c5:f5:f3:e7:b1:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:7C:DA:38:05:31:F1:9E:5E:44:64:D4:DD:2E:DA:50:9E:F0:F8
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/6Sh82jgFMfGeXkRk1N0u2lCe8Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.108.0/23
Signature Algorithm: sha256WithRSAEncryption
78:59:55:65:a6:67:76:2a:6b:f2:ca:fd:90:ee:dd:fb:aa:ca:
0f:e5:40:aa:76:81:2c:c9:1b:48:f8:e7:40:58:13:7e:a3:9b:
ad:6d:62:d3:23:aa:1a:9f:ac:2f:76:47:51:1c:86:b9:fa:a2:
14:d6:89:43:09:7c:a9:ec:77:33:4d:61:e8:5a:a5:b9:07:e2:
13:27:5a:d6:37:b0:a8:f4:2a:a1:11:d4:7f:ae:54:8e:6e:bf:
54:cf:82:e6:ff:cb:dd:b1:e9:ff:28:e8:03:06:03:fb:36:6b:
64:3c:cc:30:4a:37:27:80:20:05:4a:03:f9:7f:ef:e9:56:75:
a3:69:f7:5b:16:3e:30:ff:fb:69:c0:ab:b3:bb:22:77:ec:17:
c4:50:9e:d6:de:cd:1b:ba:a8:57:37:30:3a:78:ba:d5:9f:fc:
25:f9:df:af:3b:5a:e5:6f:7b:d9:a7:56:cb:62:84:b9:83:15:
d3:49:a5:aa:e8:1f:7d:9d:df:54:60:a6:ce:44:ff:5a:3d:2a:
cc:96:ac:8b:1d:95:73:d8:72:93:61:e3:4d:50:d5:7f:1c:d4:
e2:5e:f3:99:52:95:7d:0a:57:e5:ba:ad:ac:c8:07:55:b3:54:
e1:88:4e:66:d3:cf:eb:7f:bf:40:6e:2e:f6:a9:cf:4e:7a:d6:
43:2a:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:00 2024 by rpki-client on console-ams.rpki-client.org