Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6O9VH8rajt9aULC6dDXJoST36_4.roa
File: 6O9VH8rajt9aULC6dDXJoST36_4.roa (raw, json)
Hash identifier: pKnChbLA4EGcRXvcqlXmkgWjoMZM/if6BH2oQOUQyRY=
Subject key identifier: E8:EF:55:1F:CA:DA:8E:DF:5A:50:B0:BA:74:35:C9:A1:24:F7:EB:FE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CD4327EFBE7DCA137DC04F045B645BB18
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6O9VH8rajt9aULC6dDXJoST36_4.roa
Signing time: Thu 04 Jan 2024 11:18:48 +0000
ROA not before: Thu 04 Jan 2024 11:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 07:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:32:7e:fb:e7:dc:a1:37:dc:04:f0:45:b6:45:bb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 4 11:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ef551fcada8edf5a50b0ba7435c9a124f7ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:a5:d4:51:37:34:c0:c1:b0:ae:2b:73:95:
9c:77:36:b4:70:26:e2:43:49:7a:4a:5f:fd:37:1e:
05:71:03:71:3c:6a:6c:2a:18:7a:23:70:34:a2:7d:
60:ad:31:48:67:0e:37:a7:84:99:f8:21:fe:00:0c:
33:fd:3f:b5:1c:3c:87:3a:7f:75:94:b6:35:56:92:
07:e6:ec:83:25:23:9d:34:5b:81:e6:c2:65:b5:e1:
58:e7:b6:71:99:c3:af:e3:cc:e1:ae:3d:6b:10:64:
53:c4:97:4a:17:37:ee:da:7e:43:7a:d1:49:e8:4e:
32:09:27:59:5d:36:36:e7:5a:3e:cc:66:96:92:89:
82:b2:71:84:11:d1:7b:dd:b5:b8:54:10:e9:35:5d:
ff:68:ab:6b:7e:d5:10:60:ae:96:54:56:66:9f:6f:
b2:3f:e6:ec:22:a7:32:f4:96:f0:4b:ba:46:3b:28:
e4:80:0d:d8:df:c9:d8:46:6e:ca:a9:1e:86:df:82:
3c:18:27:0d:54:63:77:ce:e3:51:7f:e8:1b:6d:1f:
a4:20:3e:d4:a3:0f:a1:07:49:c9:5f:19:d9:77:9c:
15:ae:54:33:f7:85:db:e7:6c:55:6b:b4:7c:29:d8:
11:66:2b:c3:a5:c2:b6:39:cb:62:35:fa:6c:01:62:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:55:1F:CA:DA:8E:DF:5A:50:B0:BA:74:35:C9:A1:24:F7:EB:FE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6O9VH8rajt9aULC6dDXJoST36_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
14:93:66:d6:ee:b1:cb:58:1e:1c:d1:a2:7d:51:27:b2:c0:39:
29:4f:b1:fb:dd:b5:17:83:43:83:ae:83:99:cf:66:0a:fb:32:
28:c7:b0:79:1e:95:1f:3a:60:c9:f8:28:60:b5:b4:ad:cf:93:
d4:5f:de:9e:89:65:70:90:d0:db:11:a4:c8:78:75:bc:d5:57:
3d:f1:d8:2a:fa:f8:fe:c4:18:2a:89:ba:17:d4:a1:46:35:82:
49:52:e0:f9:fe:0b:3d:ef:b3:36:a4:1c:2e:b6:c1:b9:da:40:
28:c8:8e:5a:58:21:df:7b:6b:66:57:b8:47:5c:fa:69:1d:a1:
f5:86:1a:1d:c6:23:0f:9d:4e:7d:f0:73:25:b8:b7:8c:49:eb:
85:ba:24:3d:d1:90:ad:cd:56:22:0a:5e:3a:0c:4f:7b:59:77:
3a:f9:f2:7d:02:c5:fd:e7:89:60:42:ff:dc:ce:44:90:7a:cd:
04:42:da:a4:86:0b:05:79:65:63:28:b4:9a:04:c2:8a:84:f8:
1f:a6:fc:17:5a:ff:ed:13:cf:85:b9:23:bf:50:a3:dd:4e:a5:
e4:9f:1d:c3:e6:fe:51:43:ab:38:d3:19:46:dd:20:d7:f6:9e:
2a:99:26:43:03:27:b9:d2:fc:64:2c:d4:05:5c:be:23:f8:96:
4c:07:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org