Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/k6g8fPH6gRlx-ifNzWRJ9ubRR50.roa
File: k6g8fPH6gRlx-ifNzWRJ9ubRR50.roa (raw, json)
Hash identifier: L1KWdWC8P5srt0fOJgI87k2xfM9Y2yNBFLsfGf1MF0w=
Subject key identifier: 93:A8:3C:7C:F1:FA:81:19:71:FA:27:CD:CD:64:49:F6:E6:D1:47:9D
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 01856F5493BAD561CF2DB3862F0A309C1EB4
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/k6g8fPH6gRlx-ifNzWRJ9ubRR50.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204463
IP address blocks: 185.113.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:93:ba:d5:61:cf:2d:b3:86:2f:0a:30:9c:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a83c7cf1fa811971fa27cdcd6449f6e6d1479d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:ec:ce:08:59:95:7f:bc:53:ab:98:10:f7:
d4:4d:e4:70:4b:a4:b9:72:e2:f2:eb:0b:4a:e8:85:
7c:92:7e:c3:e7:39:67:34:e4:8a:ef:ce:e2:ee:57:
fe:14:c4:f1:fa:11:7b:fb:af:f3:5e:cd:b1:64:ca:
cb:19:06:32:ed:ad:54:13:c5:75:6c:80:a9:a2:88:
ba:21:b5:6b:36:9c:b1:fe:cc:63:c6:d6:5a:20:73:
f7:95:db:f4:5a:02:b6:d0:2f:08:7a:71:40:5a:6b:
e4:81:ad:f9:2e:66:0a:50:08:3e:30:6b:b2:a8:96:
a0:47:22:3c:28:50:08:ee:2d:0b:98:78:33:ff:ce:
95:90:fa:fe:83:29:2a:f9:1e:f5:2a:1d:84:35:b6:
f7:ef:35:f4:d0:d6:04:17:3a:18:55:4f:79:23:f3:
4d:d6:63:62:cf:80:f6:da:e0:f5:c4:df:25:1f:9b:
97:1d:54:32:61:b8:af:7b:93:b9:6a:fb:a5:7c:e1:
8b:df:8f:35:1a:02:c7:10:f3:52:18:ba:be:86:72:
64:5a:cb:91:7d:a9:0f:68:e1:ae:58:40:5e:46:c3:
2d:a1:4f:de:d4:be:0c:55:d2:e1:00:37:ff:09:68:
10:a2:88:8f:86:8d:3d:35:92:27:08:35:29:ed:c7:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:3C:7C:F1:FA:81:19:71:FA:27:CD:CD:64:49:F6:E6:D1:47:9D
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/k6g8fPH6gRlx-ifNzWRJ9ubRR50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5f:57:93:0f:3a:b3:ad:ab:14:93:65:ad:75:13:21:0f:f5:
eb:53:c2:92:29:49:5c:39:04:fc:2c:dc:a8:f6:32:61:cb:a2:
61:dc:0b:2d:53:ff:44:ed:fa:2e:0e:7e:7c:90:55:70:92:c9:
d4:2a:32:3e:83:3f:4f:af:4f:72:55:5f:6b:2b:b3:1d:69:cf:
71:b6:93:22:9b:b3:18:5d:aa:33:9c:58:e2:8b:d9:cc:a9:c2:
09:06:c1:32:46:d6:32:0c:43:79:f3:84:72:31:b0:99:83:9a:
90:b0:fe:10:b6:07:b3:2b:6c:32:ab:21:1b:0d:65:96:6a:6c:
eb:aa:6f:4c:51:f7:6a:c2:6c:50:45:4c:00:ac:eb:46:79:80:
3a:7d:16:ed:41:f7:7a:5a:a0:3b:7c:7d:e3:5f:b0:1b:5d:e0:
46:b2:f3:b3:d7:66:f2:e6:79:ce:db:31:80:09:5a:ad:66:50:
c3:f1:76:04:da:c9:c9:48:8e:d8:df:99:58:10:d1:66:0d:1c:
88:65:e2:7c:1a:c1:93:fa:bc:7b:da:32:14:20:f2:c9:e4:64:
c6:57:cc:1f:9f:81:c6:8c:e0:87:d1:41:e9:60:8b:b0:01:eb:
86:12:72:58:05:59:57:6b:c4:bd:27:9a:79:1e:6e:1e:af:63:
aa:97:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:57 2024 by rpki-client on console-fra.rpki-client.org