Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6Sdil-hh8cxapU5KaF7G6bSnJMY.roa
File: 6Sdil-hh8cxapU5KaF7G6bSnJMY.roa (raw, json)
Hash identifier: 1TZ5kHb3UgYQk3Wp6mt1n4KKo825IwuGfQbGI1NIhG8=
Subject key identifier: E9:27:62:97:E8:61:F1:CC:5A:A5:4E:4A:68:5E:C6:E9:B4:A7:24:C6
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018964895AEC4EF49EADDE1FBBBBCA7CC4F8
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6Sdil-hh8cxapU5KaF7G6bSnJMY.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 193.142.253.0/24 maxlen: 24
195.245.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 19:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5a:ec:4e:f4:9e:ad:de:1f:bb:bb:ca:7c:c4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9276297e861f1cc5aa54e4a685ec6e9b4a724c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:58:fe:ff:7d:55:93:3d:29:29:22:dc:31:
ea:ff:25:5e:5e:95:57:cd:5d:fa:02:df:c5:08:f7:
e0:57:79:70:94:05:89:61:75:8a:9b:a3:fb:d8:1e:
df:ec:69:ef:ec:e1:81:ae:7d:ab:55:b8:a6:0c:37:
64:b8:ae:58:8b:cb:4a:be:b1:3b:c9:d3:41:af:32:
21:28:94:e3:6a:04:a0:c4:8b:e4:cd:41:2b:ae:84:
a3:87:e7:19:ca:81:2c:c7:8a:08:18:05:c7:92:08:
63:c0:1a:72:14:41:4d:e0:82:c0:34:df:ae:2c:17:
7b:d1:11:11:5b:a7:e6:79:88:10:c9:67:15:f8:2e:
e2:05:fa:51:4e:7f:aa:13:42:d7:84:32:5a:16:a8:
b5:74:87:ca:a3:50:5e:37:74:b6:93:1e:17:2f:01:
27:de:ac:77:a2:3c:c4:63:66:b0:8c:e8:dc:c5:c4:
6e:5d:55:69:78:ee:38:db:e5:f5:af:88:08:92:38:
49:1d:8e:46:7a:87:73:5d:ce:1c:96:00:f3:4a:ff:
63:a0:aa:3c:af:ae:16:fa:8d:19:9c:72:c3:d7:c6:
25:50:28:d4:a2:09:59:a4:98:60:a8:9a:af:60:31:
e9:f2:11:54:a8:02:9c:3f:09:40:58:62:a2:60:7b:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:62:97:E8:61:F1:CC:5A:A5:4E:4A:68:5E:C6:E9:B4:A7:24:C6
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6Sdil-hh8cxapU5KaF7G6bSnJMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.253.0/24
195.245.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:05:d9:69:d5:90:d6:8a:2b:6b:bd:7d:8d:62:63:e1:ae:db:
ef:08:19:c1:55:cd:b6:5a:37:5e:46:43:87:78:8d:22:3c:8a:
fd:e1:d3:73:5c:8d:c9:77:5a:15:cd:14:06:6e:d4:22:8e:32:
16:8e:24:4d:ab:a6:a6:21:c4:f8:a7:00:f5:ea:5f:c7:92:9b:
eb:5f:61:24:66:3a:38:3e:64:7b:e2:2e:1f:03:39:de:fd:1b:
93:33:d8:53:be:b2:eb:74:b5:53:56:c4:7c:72:cd:9d:da:cf:
c7:35:54:86:39:28:ee:d0:04:27:09:82:e3:53:0b:5b:be:6a:
1b:14:ad:49:41:49:6d:68:bf:50:a3:8e:fa:f3:a9:da:77:4d:
71:c7:60:d0:53:ce:1d:f9:fb:a9:bf:ac:a6:e4:ce:c3:17:f0:
08:2c:68:18:4c:6e:f3:2f:41:c0:bf:02:6c:67:73:50:84:d1:
68:ba:a3:1d:f9:20:0c:dc:17:84:7b:e1:09:89:fe:88:db:cd:
41:3b:ca:7d:1c:4f:c1:d9:70:ae:b4:cf:c8:82:87:e5:fd:06:
fc:41:c2:f4:e2:d7:fb:35:d5:5f:c6:ff:3d:81:23:a6:18:e0:
97:24:28:3c:74:6c:c7:37:0e:0e:4c:67:8d:2d:c7:20:34:6e:
a1:c7:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org