Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/6ZAR2YR-vmJWA3gDmSdIMXzPSpQ.roa
File: 6ZAR2YR-vmJWA3gDmSdIMXzPSpQ.roa (raw, json)
Hash identifier: HT1x7051coUpG9rDlYs2aVRk8Wao5lGXWZGQa0rXgH8=
Subject key identifier: E9:90:11:D9:84:7E:BE:62:56:03:78:03:99:27:48:31:7C:CF:4A:94
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01856F26B49015F1A279898FFE8E4B8203B1
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/6ZAR2YR-vmJWA3gDmSdIMXzPSpQ.roa
Signing time: Sun 01 Jan 2023 21:04:45 +0000
ROA not before: Sun 01 Jan 2023 21:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48135
IP address blocks: 151.89.128.0/17 maxlen: 17
94.127.84.0/22 maxlen: 22
94.127.83.0/24 maxlen: 24
94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.86.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.87.0/24 maxlen: 24
151.89.232.0/22 maxlen: 22
151.89.55.0/24 maxlen: 24
151.89.54.0/24 maxlen: 24
151.89.0.0/17 maxlen: 17
151.89.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b4:90:15:f1:a2:79:89:8f:fe:8e:4b:82:03:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jan 1 21:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e99011d9847ebe6256037803992748317ccf4a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:3e:25:37:49:09:28:dd:19:2f:e5:c2:23:
a5:d8:26:93:46:b1:56:c7:a4:40:fc:3a:f5:d6:ac:
a5:ff:e2:b9:d6:b6:ec:4f:a5:32:91:d8:89:1a:de:
21:37:9d:c2:5d:b3:20:50:f6:0a:2a:bb:0b:22:f4:
5f:b9:16:e1:6b:06:08:72:7e:d6:a6:6c:cf:a5:0f:
0f:52:be:fc:f8:d9:54:ab:18:13:de:be:f3:19:ac:
56:96:ad:78:68:8f:d3:e8:01:19:fa:6c:6f:fc:f7:
d0:0a:4e:97:d0:65:9e:57:57:c3:86:67:60:c2:0b:
51:32:12:31:ca:c2:a6:21:1e:7d:64:f6:11:f1:9a:
19:2f:95:e1:c7:a8:57:ad:ba:42:8e:d7:38:c8:d7:
92:9c:56:cc:69:53:c1:7a:0f:f9:3f:a2:85:90:15:
e6:4d:b6:3b:f4:bc:e5:bb:b4:d5:dd:8d:f7:95:88:
54:43:0f:a1:f8:d2:d2:5b:de:09:0a:9f:99:f0:a0:
09:68:bc:be:1a:5d:da:f6:f7:e8:67:91:e7:ab:b4:
9b:d2:42:3f:1f:19:08:3a:73:61:a6:4e:3f:80:d9:
a7:a9:58:69:f0:e3:38:61:f5:33:bd:7a:aa:e2:b9:
9f:19:74:de:6d:b7:dc:3e:f7:68:35:8d:8c:20:59:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:90:11:D9:84:7E:BE:62:56:03:78:03:99:27:48:31:7C:CF:4A:94
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/6ZAR2YR-vmJWA3gDmSdIMXzPSpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:fc:de:64:39:a2:40:f1:90:bc:f2:74:25:55:69:32:d4:8d:
bd:88:11:6c:b7:69:e6:84:41:96:3b:6e:fa:76:32:f0:36:7b:
91:61:43:83:75:57:71:de:99:39:13:06:36:33:6b:f3:22:4d:
49:d2:bc:5b:6c:15:8d:b6:c3:97:6c:2f:e0:8a:45:6f:ba:69:
db:89:52:83:f9:43:c8:1a:1f:1f:51:09:3f:27:8c:47:3f:0f:
6b:7f:f0:91:29:3a:22:04:7f:9f:bc:90:4b:07:f6:65:81:50:
ea:87:4e:f2:d3:9b:0c:3c:71:41:68:a5:be:21:ea:c0:eb:24:
a0:7c:06:18:10:88:80:11:8e:52:fa:31:e0:06:6a:c7:3e:6d:
41:45:97:39:8c:7b:76:e6:a6:ba:2a:32:53:71:01:e5:e6:17:
54:92:eb:54:89:a0:29:dd:48:34:b1:87:c3:13:e0:2d:9d:d2:
9a:59:7a:77:dd:a9:74:2e:c1:c5:ae:e0:ab:7a:db:34:76:a9:
8b:46:3c:1d:34:6e:4a:94:92:6a:b0:4a:c7:e7:c8:07:f2:c6:
59:1a:e0:45:6a:ff:bf:7e:53:d2:a5:9c:3b:6a:fb:13:ca:97:
6f:05:dd:a6:8a:aa:00:09:7f:67:04:e9:a0:85:e4:90:30:b3:
53:cc:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org