Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/6ve1K9DDrqALTytYF51dscXSHek.roa
File: 6ve1K9DDrqALTytYF51dscXSHek.roa (raw, json)
Hash identifier: 7JqryWyCsXNuepfHwEj1WWCh6PM8qDnkw+KkiQ/BsHs=
Subject key identifier: EA:F7:B5:2B:D0:C3:AE:A0:0B:4F:2B:58:17:9D:5D:B1:C5:D2:1D:E9
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018B03FD25E92D0084A0BE34A77744D0E256
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/6ve1K9DDrqALTytYF51dscXSHek.roa
Signing time: Fri 06 Oct 2023 07:56:43 +0000
ROA not before: Fri 06 Oct 2023 07:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400529
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:fd:25:e9:2d:00:84:a0:be:34:a7:77:44:d0:e2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Oct 6 07:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf7b52bd0c3aea00b4f2b58179d5db1c5d21de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:af:3f:25:3d:a8:40:b5:9a:7b:df:6c:25:
b9:83:3f:78:c7:62:e6:b7:79:50:8e:ff:f7:4d:c2:
5c:81:38:6f:8d:46:b3:42:ad:54:20:b4:a9:eb:8d:
a7:fa:ab:39:77:f9:15:10:eb:85:6c:ab:9e:d3:ee:
d2:e7:5f:37:59:ca:0d:a9:c9:1f:f3:80:32:a5:15:
a1:fc:53:ec:9e:6a:90:80:b2:93:8b:f7:43:7c:e5:
d9:39:03:01:e9:44:e9:36:37:17:39:b2:6f:38:f5:
6f:97:09:07:c2:bd:49:51:98:7d:80:b8:91:fb:3c:
a4:d0:df:9f:06:27:8b:cf:68:23:a9:ba:e0:f0:36:
e4:49:9b:73:5d:b2:e0:97:37:da:08:70:4f:05:a0:
a5:ed:47:68:48:1c:61:b7:b8:61:9f:fa:b6:3b:be:
ff:9c:42:8f:ed:ee:cf:19:2f:7c:73:23:11:34:7a:
ee:b9:c5:fc:a4:92:8b:f7:b9:d8:c1:81:dc:e8:a2:
f6:90:84:d1:55:51:b1:0d:f5:8d:f3:bb:cf:ab:38:
2c:ef:0d:b3:fb:12:a3:f3:83:25:12:f8:60:11:12:
cc:ad:9a:d1:19:09:c3:4a:b9:1e:03:fe:5b:16:3f:
c9:e9:4d:c4:ba:1f:87:28:c3:99:e1:c5:92:ae:a2:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:B5:2B:D0:C3:AE:A0:0B:4F:2B:58:17:9D:5D:B1:C5:D2:1D:E9
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/6ve1K9DDrqALTytYF51dscXSHek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
45:60:41:d4:0f:0a:15:de:dd:75:27:99:b3:a9:63:e6:e8:1f:
df:f9:ac:f1:b4:91:e4:ab:8c:a0:11:83:0d:64:d4:1a:76:01:
24:c0:f0:0f:58:ff:4a:00:9a:d0:76:4e:23:80:d6:0b:f1:e7:
29:5e:96:89:da:d2:20:24:d6:82:06:83:a1:29:03:f5:80:81:
f1:95:31:9b:c8:7c:8b:96:55:be:57:d0:0f:5c:95:67:51:02:
59:10:b8:fc:54:d0:e5:f5:67:2d:71:39:6e:8c:21:64:c2:51:
fd:2d:3a:1e:c6:04:12:5b:63:d5:60:f1:9a:51:3e:7a:16:40:
32:d4:7f:d3:59:cf:54:2d:fa:14:f7:71:bd:fe:3d:f4:f5:59:
5e:66:93:11:aa:c4:96:f3:3e:a5:9f:87:23:63:3c:bf:67:a6:
76:24:15:d6:3e:63:7a:79:87:56:c2:eb:ba:56:48:09:a3:5c:
f3:b5:51:54:99:5b:c2:a8:07:91:a6:88:62:72:30:f5:96:83:
99:7e:ef:39:a3:6c:ad:9e:e4:c1:a0:fd:eb:6a:80:a1:c1:f1:
cf:71:1a:a2:85:50:37:b4:c0:65:90:69:f0:7b:0b:aa:5c:3c:
68:fb:67:d4:04:df:5a:41:06:ca:eb:10:72:dd:cf:ac:d8:0a:
40:8a:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org