Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6xJsOtDe6JbXbkSES44s6MCzt6I.roa
File: 6xJsOtDe6JbXbkSES44s6MCzt6I.roa (raw, json)
Hash identifier: WzN5df+GN4ZcpXx+wLnxXh91WSJFgu+s6Hj9bSFHHsc=
Subject key identifier: EB:12:6C:3A:D0:DE:E8:96:D7:6E:44:84:4B:8E:2C:E8:C0:B3:B7:A2
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DC15229B814E1AEEF72DA8B57CB79
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6xJsOtDe6JbXbkSES44s6MCzt6I.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43352
IP address blocks: 91.93.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 07:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c1:52:29:b8:14:e1:ae:ef:72:da:8b:57:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb126c3ad0dee896d76e44844b8e2ce8c0b3b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:41:3f:d4:3e:1f:d9:0c:0a:d3:79:68:d1:
a1:1b:ba:78:ba:65:a5:74:44:91:94:7d:fe:0b:9a:
46:ac:ac:ed:eb:bf:0a:97:04:10:dc:7a:6e:07:77:
bf:4a:39:70:34:d8:bd:70:94:b0:89:0e:cc:ea:61:
21:1f:5c:7a:74:3e:8a:2f:a5:32:6d:9b:ff:d0:06:
5f:76:4a:dc:4f:f5:0d:f8:7c:5c:2a:da:01:c0:fb:
ad:11:62:8f:02:c8:88:d4:8d:2a:c7:ba:9c:cc:c0:
8e:b8:f6:32:ea:32:17:93:b2:5e:37:b1:a1:37:cd:
66:ac:15:99:50:7f:ef:2d:65:d0:90:d3:61:16:50:
da:7f:ea:11:44:b3:f6:8f:7d:d2:d5:dc:38:79:bb:
c6:1d:a7:c4:f1:0d:3f:9c:0d:40:4d:b7:c7:1a:87:
f9:8e:30:6f:74:5f:65:3b:bb:fa:1b:4b:7a:b3:07:
09:6d:31:a8:63:85:b1:81:49:04:b1:c4:f4:fb:01:
73:e2:75:42:68:a8:0d:01:4e:df:ef:4b:a6:c5:52:
ff:41:f8:15:da:cf:19:2a:4e:77:9f:90:c2:f7:cc:
28:88:ef:e3:7e:dd:c8:15:84:ce:5d:25:da:87:f1:
29:b3:a5:d2:6f:83:e4:28:7b:93:fe:74:de:82:8d:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:6C:3A:D0:DE:E8:96:D7:6E:44:84:4B:8E:2C:E8:C0:B3:B7:A2
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6xJsOtDe6JbXbkSES44s6MCzt6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:21:7d:51:f8:6f:3f:40:d6:89:1a:db:0a:2a:81:ab:d6:f3:
1a:5e:16:cd:a2:df:a8:b7:a4:8b:25:c8:14:b2:e2:ab:b6:c1:
dd:86:bf:03:4c:b0:e3:34:cd:04:46:f3:42:83:41:f6:87:b2:
73:28:33:48:49:02:9e:ff:27:f7:d3:70:98:65:f0:b6:16:c7:
5d:aa:9c:3b:02:07:7b:82:a0:02:b7:ae:05:79:f6:c5:ac:53:
96:d7:0d:5a:20:40:d0:70:a2:7b:b6:d8:0b:30:b6:55:59:05:
20:c3:b7:0c:44:94:d7:ba:e0:89:23:d8:a4:45:77:00:e7:9d:
74:ea:16:ad:27:a3:04:a6:ee:b6:10:60:ec:85:01:9d:87:b0:
76:67:5c:b4:1f:e2:7b:af:50:c4:81:6f:5e:6e:d6:80:25:a3:
7c:44:11:c0:58:59:a7:4c:13:41:ad:73:81:ec:04:da:b3:4c:
a3:c3:25:2d:52:de:49:e8:94:22:3b:96:e7:98:c4:23:97:5a:
fe:2f:e5:c7:d9:77:d0:02:f5:cd:ba:4a:a1:ac:51:56:ba:12:
99:02:4d:b8:03:9e:c1:19:22:bf:4b:de:06:20:25:65:56:fb:
86:81:8e:cd:0d:c7:55:72:c7:68:8d:bb:00:71:27:c0:f6:15:
2a:0c:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org