Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/bSClAbhjI8mCC8OPt0MioVPIhKo.roa
File: bSClAbhjI8mCC8OPt0MioVPIhKo.roa (raw, json)
Hash identifier: kKRc+CjFjMKYAyIcjIRK9rebxJmdJot41F8cJKq1bJ4=
Subject key identifier: 6D:20:A5:01:B8:63:23:C9:82:0B:C3:8F:B7:43:22:A1:53:C8:84:AA
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 018966A1DF07A10C200E64EA13BFA4B73863
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/bSClAbhjI8mCC8OPt0MioVPIhKo.roa
Signing time: Tue 18 Jul 2023 01:33:51 +0000
ROA not before: Tue 18 Jul 2023 01:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210612
IP address blocks: 91.246.61.0/24 maxlen: 24
2a11:c040::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:66:a1:df:07:a1:0c:20:0e:64:ea:13:bf:a4:b7:38:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jul 18 01:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d20a501b86323c9820bc38fb74322a153c884aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:d8:49:99:82:de:71:9d:70:86:3f:fd:8d:
65:f0:46:32:b8:91:4c:8d:e5:8a:e6:d3:79:72:25:
ac:8e:8c:55:2b:0b:5d:80:30:ff:95:b7:a0:c5:be:
4f:7a:06:6c:7e:32:1b:0a:c2:73:2a:76:32:7a:3f:
3f:47:e4:e8:5a:b3:04:ae:32:f8:64:bc:54:1f:61:
01:66:95:27:5e:2c:c0:aa:e2:f5:f1:cf:c0:cb:7d:
60:84:cc:77:f2:96:73:d2:8c:cc:0e:8e:d9:72:4b:
c9:86:06:5c:b3:5e:13:a0:63:62:b6:ff:ba:f7:e3:
42:65:2f:16:1a:ae:53:47:20:8a:40:6b:fa:74:f7:
f3:9d:fe:20:e8:93:37:9c:bf:18:fd:61:0b:31:aa:
5b:83:7e:f0:bf:77:fe:93:ce:c9:55:11:4b:22:1f:
a9:35:88:0d:bf:a0:b3:03:9a:ef:f0:4c:7c:f8:40:
ff:6b:86:f6:be:87:fc:96:d5:44:42:b2:17:b5:db:
fa:82:ea:12:ad:83:f4:bb:fc:05:89:ce:25:65:72:
12:cc:0a:a6:5e:d3:6d:56:b8:49:98:00:cc:3e:78:
5f:9b:b6:53:dc:0e:06:40:33:df:84:35:02:3d:f0:
c7:76:cc:fa:85:b2:46:d1:25:e4:b7:0e:a3:b4:a0:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:A5:01:B8:63:23:C9:82:0B:C3:8F:B7:43:22:A1:53:C8:84:AA
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/bSClAbhjI8mCC8OPt0MioVPIhKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.61.0/24
IPv6:
2a11:c040::/29
Signature Algorithm: sha256WithRSAEncryption
94:0d:f1:48:5a:f8:a6:1a:b2:ea:8d:4a:01:c5:33:a8:0d:14:
be:7d:83:79:58:22:c9:36:76:da:46:48:6e:fc:2b:2c:45:2e:
8c:07:7d:16:94:5b:99:88:9b:3c:6e:b7:4c:ca:30:e2:e8:2b:
47:ec:8b:40:ae:fe:e1:b4:96:20:61:e8:7f:91:67:87:c1:90:
bc:e7:b1:63:e5:38:54:76:da:6f:78:14:db:48:90:23:f3:6f:
3a:7e:8e:b6:b2:2a:74:08:19:a4:6b:e0:8b:e1:1d:26:d7:17:
46:3c:a8:9c:ea:17:8e:c3:52:03:59:c3:4a:c5:8f:af:0a:88:
f2:9a:2d:7e:ec:45:ee:86:c8:ee:ea:1a:ea:24:40:57:9c:26:
1b:ab:49:71:59:96:f0:c0:ff:57:5f:1e:4a:48:7d:da:d0:4b:
2f:b4:ef:e0:64:b4:db:9d:79:9f:3d:84:54:26:7c:42:e8:63:
d3:be:a2:62:95:e3:43:ad:fa:89:8f:a6:68:eb:07:74:45:50:
ed:db:ea:d8:00:f3:a2:2f:5c:1f:03:1b:f7:d5:09:be:9e:7f:
e0:e3:22:b1:58:2c:a8:bf:74:cf:e4:26:3a:d0:c8:e3:b4:a9:
d4:2b:a1:e1:73:20:8e:e2:ad:af:86:ea:13:af:a9:0c:43:b5:
83:a2:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org