Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/6JuAvy1960l2BXPjj-3QITVBWIQ.roa
File: 6JuAvy1960l2BXPjj-3QITVBWIQ.roa (raw, json)
Hash identifier: zrQ+D6oEQqRJU+1wzhS7jcTWSWEJFJpQhbK6V3xy9Ok=
Subject key identifier: E8:9B:80:BF:2D:7D:EB:49:76:05:73:E3:8F:ED:D0:21:35:41:58:84
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 01856BE5AA281B96F64E045CBB6D8ABBC805
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/6JuAvy1960l2BXPjj-3QITVBWIQ.roa
Signing time: Sun 01 Jan 2023 05:54:51 +0000
ROA not before: Sun 01 Jan 2023 05:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39062
IP address blocks: 195.66.158.0/24 maxlen: 24
195.66.158.0/23 maxlen: 23
195.66.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:aa:28:1b:96:f6:4e:04:5c:bb:6d:8a:bb:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 1 05:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89b80bf2d7deb49760573e38fedd02135415884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:3e:e2:30:cb:7f:ee:42:52:a4:b9:c7:68:
b2:f4:65:5b:aa:76:46:fb:fc:fb:06:01:99:aa:49:
fc:9b:f0:20:f5:5e:39:8c:1b:cd:1e:5f:21:d0:cf:
b0:23:ab:7e:be:8f:d4:fa:50:09:bf:91:cd:c3:69:
92:af:1b:52:62:80:b4:ba:7f:a5:0b:1a:f9:b6:b4:
f4:fe:ce:02:aa:3c:b8:9e:bd:af:ec:4b:f2:2a:c3:
b2:ff:a6:a3:58:02:7b:2c:d7:bf:be:e5:dd:8a:8a:
7e:c2:27:75:4a:31:f9:07:4a:26:bd:e5:db:62:7b:
b5:b3:08:7b:f2:c3:8b:2e:e0:71:1c:1a:c3:a8:0e:
99:e9:97:19:7d:5b:8c:f9:dc:d6:b0:b1:5b:22:04:
52:17:32:7b:8d:ed:e1:81:66:e1:4e:14:96:7b:65:
66:73:08:d7:ef:f5:3e:b9:b5:2a:e2:93:9c:b0:17:
27:3f:8d:1a:2c:b4:36:50:fa:32:be:c3:80:7d:c3:
64:f7:df:63:fa:00:c4:43:dd:58:6f:3a:3d:5e:d8:
57:2d:12:6a:00:ab:cf:66:3d:60:3e:a4:31:f1:cb:
33:5b:dc:b0:07:d8:52:0b:bf:7c:4f:2c:d1:38:56:
2d:43:ec:fe:b0:c4:c3:7a:cb:c0:62:39:0e:18:e4:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:80:BF:2D:7D:EB:49:76:05:73:E3:8F:ED:D0:21:35:41:58:84
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/6JuAvy1960l2BXPjj-3QITVBWIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:7a:14:36:59:37:0b:9d:a2:52:fd:f5:32:5c:85:d9:12:02:
95:c9:c4:39:81:fa:6a:2e:43:c0:9d:5c:60:46:fa:f3:06:07:
63:8c:46:3c:62:6a:92:70:2f:3d:c4:bd:3f:3f:96:38:2b:f3:
ad:d2:a0:8a:60:29:b1:d2:4d:3f:cf:29:af:7c:ce:1d:6c:bf:
7d:9c:24:cc:40:d7:67:f5:64:1a:fb:c3:35:63:1a:f8:5b:5f:
86:b3:da:6b:fa:d3:64:05:ca:e4:a3:32:7e:ec:45:15:80:06:
79:08:df:72:ee:f6:7f:7e:a5:40:9f:51:51:d0:32:62:ad:a3:
35:8f:c4:06:d3:8c:f2:79:6f:50:34:b8:80:44:b8:fe:d6:c1:
59:30:a1:cf:62:74:0a:c6:2d:8d:a2:13:c3:46:e8:8a:24:2e:
7a:37:da:a0:84:cf:31:12:11:bb:07:1b:8e:58:44:13:66:2c:
a4:96:16:96:57:88:2b:6e:b8:03:4c:24:3d:f1:ad:1d:2b:53:
cd:84:ca:44:ed:f7:4f:80:4e:ac:50:ea:df:05:e0:47:93:07:
4a:47:a3:07:63:92:43:cb:8e:a4:d2:79:a7:c3:3d:b3:56:a3:
f6:bb:cc:52:56:ca:f1:42:b4:0c:95:21:ca:d3:fb:42:c6:84:
ff:a9:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:55 2024 by rpki-client on console-ams.rpki-client.org