Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa
File: YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa (raw, json)
Hash identifier: GOiC5jtUEgHNeA1YuDKZj1H/RemfMvpW5yA7IW6Ygz8=
Subject key identifier: 60:6E:85:CF:4B:D3:03:35:F1:3B:4E:0B:DE:6F:05:D4:50:ED:04:00
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 018847BA313A091BC2E27D751CF546B78FF4
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa
Signing time: Tue 23 May 2023 08:29:24 +0000
ROA not before: Tue 23 May 2023 08:29:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57240
IP address blocks: 88.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:ba:31:3a:09:1b:c2:e2:7d:75:1c:f5:46:b7:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: May 23 08:29:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=606e85cf4bd30335f13b4e0bde6f05d450ed0400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:a5:0f:b0:08:6d:dc:e3:2c:05:97:fc:e3:
ab:86:88:83:56:cf:67:d0:05:e1:3a:1a:b9:0b:c3:
aa:74:c7:10:fa:24:be:aa:d9:40:a8:b8:86:a4:fd:
f9:db:bc:d7:8a:93:56:c0:bb:1d:49:d8:5a:98:85:
de:1d:25:ec:95:44:bd:20:6b:e6:bb:cc:0a:dc:e2:
61:c9:00:4c:28:d7:e8:5f:e1:49:15:1e:bf:7b:93:
03:96:18:aa:5d:26:60:f4:0d:d5:23:d5:e2:49:5f:
30:b6:38:34:06:69:bf:fa:a2:fb:43:fa:a4:0c:5c:
11:36:c6:e5:57:f0:03:8c:04:f0:af:fa:19:30:07:
67:9a:c6:0a:78:a2:c9:a0:63:12:30:c9:c2:14:61:
aa:fa:a9:cf:d2:7a:a2:61:fe:d0:f3:17:17:b0:ae:
69:dc:b3:f1:25:bb:4f:c4:28:2b:2b:01:4d:f3:54:
61:2f:5f:07:a8:ec:1b:2d:f3:64:aa:0a:01:3e:e5:
f6:09:32:7e:34:57:67:58:f9:59:7e:90:17:8a:2b:
c0:c9:35:3a:04:6b:03:6e:17:a3:fb:30:5f:1d:fa:
ba:fa:5f:21:da:0e:61:43:b7:24:f0:0a:13:84:73:
e6:b5:ea:21:0f:7a:f8:58:60:4a:3c:eb:6f:57:12:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:85:CF:4B:D3:03:35:F1:3B:4E:0B:DE:6F:05:D4:50:ED:04:00
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/YG6Fz0vTAzXxO04L3m8F1FDtBAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4c:3f:c2:e1:15:ef:4a:13:36:1e:0a:88:a3:6e:9e:c0:5d:
7b:96:a0:5f:ad:db:3d:2c:90:47:91:0d:db:91:e9:90:2b:d1:
ca:04:21:03:67:12:5b:c4:e3:bf:b4:de:40:54:5b:a2:42:50:
26:1e:31:a9:ab:cb:09:56:05:47:8d:da:57:44:39:2b:ef:38:
98:84:32:47:72:2c:e6:a6:42:46:ed:13:8c:01:28:f9:cd:75:
3e:6f:47:fc:cb:1b:0d:2a:f6:c1:0c:48:ae:af:09:6d:fc:70:
af:56:8f:88:17:1d:ae:74:19:46:2a:1b:0e:0f:8a:bc:bc:23:
48:13:4c:17:d0:fa:8f:34:08:fa:b7:3a:11:77:c8:62:ac:82:
8a:0a:17:3e:81:49:1d:1d:de:fb:2b:5f:21:4a:6d:ab:71:1d:
bb:66:69:e9:b1:e1:b3:b7:2c:9d:99:eb:8f:95:a9:33:e6:1c:
be:12:be:75:82:8c:13:6b:68:fc:67:51:ea:c5:d7:9d:6e:6d:
08:c2:3f:03:8c:86:82:17:70:a4:5a:2e:0a:aa:11:ca:14:f2:
c6:be:0c:2d:b4:77:80:17:55:80:d4:fd:24:59:d0:ac:6d:51:
ca:fb:8f:d3:5e:73:15:06:5e:25:3d:c0:9a:47:ef:f5:c0:4e:
a7:76:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:20 2023 by rpki-client on console-ams.rpki-client.org