Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/6W6mW4B6T67oHMJKHvKH34QTSZ4.roa
File: 6W6mW4B6T67oHMJKHvKH34QTSZ4.roa (raw, json)
Hash identifier: Li92H1ICqsAWK9rx9tvc4T1ZXXPYk6ZVg12lJjpHB48=
Subject key identifier: E9:6E:A6:5B:80:7A:4F:AE:E8:1C:C2:4A:1E:F2:87:DF:84:13:49:9E
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DD639605DF74276ADC2ECCF08F255
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/6W6mW4B6T67oHMJKHvKH34QTSZ4.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16142
IP address blocks: 213.215.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d6:39:60:5d:f7:42:76:ad:c2:ec:cf:08:f2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e96ea65b807a4faee81cc24a1ef287df8413499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:13:1d:8e:e8:94:cf:9b:fa:48:d3:5a:94:
64:da:08:2f:8d:a9:3a:9e:e4:95:da:f1:4a:9c:a4:
60:71:c3:70:5f:91:05:3f:1d:01:ed:5c:6b:27:8b:
c5:dd:9a:b1:99:5a:6f:77:b6:12:bb:b2:90:ef:31:
b2:73:6d:88:fe:a3:a9:62:74:9e:73:ac:b9:49:19:
e7:d7:d4:6d:32:45:ea:9c:54:17:6a:6d:88:68:05:
47:61:b2:57:25:eb:30:f0:c6:a7:4d:8a:f6:a6:27:
f4:f7:d9:df:f9:e6:19:0f:1c:fb:4a:92:0c:89:2e:
b4:3d:da:61:7b:9f:6a:29:bc:65:fe:16:40:86:a5:
18:d9:96:9b:45:c2:ad:cd:4f:97:d9:57:fd:22:c0:
7b:11:35:16:9c:2c:d0:61:22:6d:43:80:5b:b1:db:
87:8c:68:d7:72:be:31:ae:2b:3d:ee:af:bc:31:30:
41:7a:63:cb:0e:32:3a:12:2a:f6:5e:cf:ee:77:9c:
f6:a9:4f:bf:bd:4e:8d:38:09:fb:48:5c:32:49:f6:
7e:5f:4f:35:04:25:dd:0c:8b:8b:78:44:a7:e4:36:
97:25:5a:93:5f:18:ee:61:c7:75:0e:ad:f0:2c:3c:
e9:87:01:8b:7f:e9:11:03:e2:25:1e:8e:87:be:40:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:A6:5B:80:7A:4F:AE:E8:1C:C2:4A:1E:F2:87:DF:84:13:49:9E
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/6W6mW4B6T67oHMJKHvKH34QTSZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bf:97:b6:8e:bc:e6:fe:7b:45:fd:48:c6:e8:ce:20:b5:f2:
8c:90:50:2b:3a:3e:31:c1:b6:f6:de:1f:aa:84:34:61:aa:94:
9d:19:f3:18:a4:d6:f6:e8:ea:04:ab:20:69:e2:b2:41:b5:33:
1e:3e:d1:75:f8:ee:e9:ac:00:53:bc:41:25:e5:c5:05:81:09:
f8:52:6d:d2:f5:10:10:65:ff:7e:3b:46:bb:ba:39:1f:42:98:
1a:4a:c9:1c:30:22:a3:34:d7:7b:62:9f:ac:fe:95:fc:fc:b9:
49:1e:49:9c:0a:56:36:b1:51:75:b8:4d:e2:d7:4d:17:96:02:
b3:f6:13:b4:25:fb:01:e4:d7:34:f4:97:d2:21:23:7c:c0:08:
63:99:ef:09:a1:0d:8c:7a:32:31:0b:89:a2:dd:a8:99:73:78:
0c:d3:8e:af:dc:68:cb:70:82:95:ca:61:ac:b5:58:5a:ca:ca:
52:8d:72:3d:5d:b4:30:8c:14:79:7d:e3:09:a3:68:41:93:5f:
b2:c4:b4:5b:fa:7e:47:44:35:37:b3:43:e4:ea:6d:83:7d:c1:
f9:cf:3b:7a:78:e5:61:1c:1a:25:0a:3a:61:a5:ca:4d:11:eb:
89:70:53:23:6f:4b:06:c1:e6:d0:cc:5d:55:bd:78:b1:b5:74:
45:07:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org