Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/6FH6_s7ANM4bhEtJohVi3KBTQDM.roa
File: 6FH6_s7ANM4bhEtJohVi3KBTQDM.roa (raw, json)
Hash identifier: rPDNPIkPqT0qajcFovFcYsrwZ0RRc4p+KwBjyJKflNc=
Subject key identifier: E8:51:FA:FE:CE:C0:34:CE:1B:84:4B:49:A2:15:62:DC:A0:53:40:33
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 01856C65DCD83CB946932E3A9AF13CC544D5
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/6FH6_s7ANM4bhEtJohVi3KBTQDM.roa
Signing time: Sun 01 Jan 2023 08:14:53 +0000
ROA not before: Sun 01 Jan 2023 08:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210860
IP address blocks: 193.20.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:dc:d8:3c:b9:46:93:2e:3a:9a:f1:3c:c5:44:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Jan 1 08:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e851fafecec034ce1b844b49a21562dca0534033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:bb:a0:68:56:75:f4:8e:cc:72:01:ab:20:
87:c2:3a:18:21:6c:e7:70:24:69:24:d2:ad:ef:e9:
77:15:fb:67:38:82:bd:0b:14:13:e1:f8:68:ef:19:
3d:bd:ed:d4:9c:7a:f4:22:8f:20:d0:b1:0d:d1:1d:
58:24:e1:24:b2:0f:16:c1:64:7c:2a:91:3b:4a:4d:
0d:2d:18:a8:1f:e3:d3:98:d8:6d:35:c9:65:be:21:
3a:5c:4f:20:b4:f5:77:67:85:b7:d5:e9:52:8a:91:
b5:fa:ef:fa:3f:ac:a0:f4:28:ca:f6:ff:89:61:96:
5f:97:7f:31:21:ff:4f:db:35:67:ba:16:c2:cb:25:
07:c0:71:02:5b:17:4b:5d:d4:5f:68:07:dd:06:4f:
66:2a:79:6e:b0:c0:65:2b:17:ce:d5:0b:63:8e:70:
15:14:a7:0a:34:74:83:ea:52:55:2d:44:59:54:97:
11:79:59:95:31:a8:4e:2f:a5:3e:57:49:64:98:52:
4f:3a:0f:3e:f9:36:cd:8b:cf:4c:f8:23:a9:c1:38:
b2:85:28:4e:f3:38:10:30:2b:cf:22:5c:92:96:42:
f0:8a:81:aa:b6:74:cb:e8:ad:cd:11:21:bf:0b:65:
06:6f:9c:28:70:23:7d:83:83:b2:c1:b0:76:f0:0e:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:FA:FE:CE:C0:34:CE:1B:84:4B:49:A2:15:62:DC:A0:53:40:33
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/6FH6_s7ANM4bhEtJohVi3KBTQDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.20.0.0/15
Signature Algorithm: sha256WithRSAEncryption
cc:10:60:73:c1:04:f2:aa:79:24:8c:dc:b6:83:e8:97:f6:da:
4c:c7:93:d1:20:95:aa:a5:07:aa:80:eb:1c:8c:fe:73:34:ff:
88:a4:1e:fe:e0:c7:e6:4b:e3:32:57:3e:16:1b:3f:03:1b:75:
e8:32:96:02:24:1a:dc:31:ec:8b:74:4d:69:d4:52:02:90:1d:
4f:f8:cb:19:fc:da:1a:ff:b3:a6:fa:d7:81:86:71:34:c7:3d:
b6:82:b2:27:b6:84:fa:7e:a2:2b:28:8d:4b:01:c4:3d:45:bb:
0e:3c:bb:97:98:b2:bb:95:c3:f5:36:49:ff:4f:b2:58:1a:6d:
a6:57:3e:0f:d6:e8:e7:bf:f1:2e:55:a5:8d:b0:62:c9:e7:fb:
c8:54:b3:3a:8d:b2:e6:a5:ff:10:4f:60:c0:f7:a2:1b:1c:0d:
d0:81:b3:28:3b:2f:4c:54:1b:a8:10:59:54:dc:9d:7d:5b:2a:
2a:43:68:43:71:7f:6a:49:9a:7b:20:62:82:68:87:cd:01:4d:
14:c8:c3:64:88:ee:95:69:9b:12:1c:52:01:7d:2e:0b:79:4d:
eb:55:de:bb:2a:1c:b6:f3:57:8e:f5:31:16:b7:d9:88:f6:49:
90:96:28:32:b4:f9:12:45:56:84:06:a5:c9:49:9b:84:8b:11:
52:ea:c5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:27 2024 by rpki-client on console-fra.rpki-client.org