Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6k5PJXpoiXaUQzyGZytWLFTZ120.roa
File: 6k5PJXpoiXaUQzyGZytWLFTZ120.roa (raw, json)
Hash identifier: mdnElK0ZN7d8D54n+tBj3YJ1pumX0n9F4l9nSmDkncE=
Subject key identifier: EA:4E:4F:25:7A:68:89:76:94:43:3C:86:67:2B:56:2C:54:D9:D7:6D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187DBC3511380179CDD26BC472DC146205D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6k5PJXpoiXaUQzyGZytWLFTZ120.roa
Signing time: Tue 02 May 2023 09:20:23 +0000
ROA not before: Tue 02 May 2023 09:20:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 128.0.41.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:c3:51:13:80:17:9c:dd:26:bc:47:2d:c1:46:20:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 2 09:20:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea4e4f257a68897694433c86672b562c54d9d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:47:7d:96:0d:bd:e5:70:a6:c7:a1:bf:e4:
fe:a9:0e:3d:8c:72:cf:f2:52:7d:fd:a4:00:b9:04:
46:bc:f6:b1:4a:51:c1:39:63:63:91:06:dd:43:92:
58:3e:51:3d:70:e3:8f:57:e0:f3:34:ea:f3:dd:bb:
bd:94:a9:5e:d1:a9:37:0f:35:d1:87:c7:14:9e:f6:
79:4e:7c:d4:9c:63:fc:72:a0:6f:85:31:e7:d2:f3:
a9:36:12:45:28:14:01:a8:28:ba:22:4a:b9:0c:2c:
bc:b8:8b:39:c4:91:b5:2c:33:79:aa:d7:89:c5:29:
80:6b:55:84:2d:b5:66:38:32:f5:2d:53:8f:dd:61:
03:ff:f3:cc:05:0c:b2:d7:b1:c6:eb:ce:1d:ed:56:
1e:9e:a7:39:e3:42:cd:6b:11:ad:f7:8f:48:7e:46:
4e:62:7d:79:12:35:98:58:08:f8:02:a9:e7:3d:5f:
43:77:5d:50:30:c1:05:f1:43:55:87:ab:10:cc:d4:
08:b5:4a:c3:97:f0:3f:18:d9:5b:bb:72:94:8a:db:
93:e5:d9:27:f7:17:bc:97:2a:88:18:70:15:96:32:
dd:03:cf:99:ba:bb:86:d6:de:07:97:0c:89:21:27:
0f:28:10:a2:86:ba:f0:26:b8:a3:c8:0e:7a:82:d6:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4E:4F:25:7A:68:89:76:94:43:3C:86:67:2B:56:2C:54:D9:D7:6D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6k5PJXpoiXaUQzyGZytWLFTZ120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b8:68:d3:1f:2a:11:45:ef:71:85:e2:34:7d:88:1e:20:b7:
cc:3e:5a:bf:6d:08:4b:d4:06:42:06:fe:7b:34:ae:c7:5a:bf:
2e:a3:b8:b3:6b:1e:eb:40:2b:90:1d:b3:c1:cf:df:f2:89:99:
50:77:8f:9a:03:c6:1b:af:60:af:de:0a:6d:5b:95:12:5d:17:
12:4e:bc:e9:45:05:67:61:9a:a1:2f:d2:30:ca:47:07:73:24:
f6:52:5e:23:e6:fb:97:5a:ef:c4:58:1f:26:7f:c0:e6:12:4e:
9d:f3:92:86:73:c4:ab:4f:2e:8f:3d:7f:4d:1f:9a:ae:b6:f9:
78:24:6e:b3:30:ac:25:a9:e6:e4:37:2f:54:e1:ac:8e:3e:88:
f9:8f:9d:09:a3:98:eb:2b:1b:73:54:fa:f6:51:b3:4b:77:ed:
b6:b4:f1:21:92:ac:e4:9d:c7:86:9c:e5:f8:ea:b7:3f:8f:fb:
25:f6:af:9d:82:67:75:4a:e0:ea:96:34:81:8c:72:a3:86:80:
d4:d5:96:a8:21:3f:46:9e:60:ac:c7:46:b1:bf:4b:58:00:72:
3e:22:30:aa:f2:e3:01:f7:41:b4:6d:79:45:4b:72:06:8a:be:
92:7d:ff:7a:c2:79:bd:07:ff:35:78:36:05:e4:16:be:45:d3:
70:e7:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org