Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/6z5BnY_Tsa2StliBrOd3MVJG43o.roa
File: 6z5BnY_Tsa2StliBrOd3MVJG43o.roa (raw, json)
Hash identifier: BYL3vc3lKZLZqnV+/eOJ6M1wrMTOdo99pEDF/dOKaOY=
Subject key identifier: EB:3E:41:9D:8F:D3:B1:AD:92:B6:58:81:AC:E7:77:31:52:46:E3:7A
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 018842EF6452007E70406E067FF19F0CB30F
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/6z5BnY_Tsa2StliBrOd3MVJG43o.roa
Signing time: Mon 22 May 2023 10:09:24 +0000
ROA not before: Mon 22 May 2023 10:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44696
IP address blocks: 85.202.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:ef:64:52:00:7e:70:40:6e:06:7f:f1:9f:0c:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: May 22 10:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb3e419d8fd3b1ad92b65881ace777315246e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:0a:f5:2e:14:f8:b6:04:76:cf:b7:12:0d:
e2:8b:ce:a8:e0:1f:c9:29:d1:cc:a1:bb:5d:c3:e5:
04:4e:53:45:00:1e:36:87:7c:a1:62:70:57:2c:bd:
39:00:de:d1:d5:8b:a9:b0:ad:84:a0:4b:58:e4:4f:
0b:38:f5:15:e5:4b:c5:34:ec:23:ed:ec:fb:47:c6:
80:b7:f3:bf:7d:00:88:b4:1f:98:bf:76:61:c7:06:
1a:dc:1b:8c:9e:03:66:2d:1b:c2:ac:b5:34:a7:74:
90:3c:aa:9b:1c:92:80:41:9c:02:66:86:f8:d8:ae:
c5:d9:ed:cc:be:ec:9b:8d:ee:12:5b:ee:28:49:88:
ca:51:4c:52:8e:a9:ae:ab:b0:c7:c5:f2:e2:12:9c:
9b:d8:78:a0:a3:25:fb:7f:d7:34:52:e6:e5:18:48:
e0:c4:64:51:04:1f:02:20:17:1e:a7:6e:d2:f3:dd:
2f:2c:44:8c:14:1e:7a:bb:d0:1d:9b:a6:a0:ce:0f:
25:e5:a2:78:67:5f:57:af:30:55:37:a3:51:38:10:
1d:ed:fe:11:c8:43:a1:59:9b:af:fa:f8:a5:64:84:
d3:52:08:c0:0e:4f:77:9d:6a:ef:83:2c:ac:69:72:
2d:e1:20:29:1a:37:1f:0b:8c:9c:8b:f7:a0:6b:d8:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3E:41:9D:8F:D3:B1:AD:92:B6:58:81:AC:E7:77:31:52:46:E3:7A
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/6z5BnY_Tsa2StliBrOd3MVJG43o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
92:fb:e2:02:ac:ee:fc:49:a4:2e:4b:c5:e0:a4:ed:29:53:9b:
d4:35:77:d4:22:0a:1c:d3:24:c3:40:66:58:a9:f8:38:bc:b9:
5e:21:49:c2:75:34:d0:65:5a:48:35:d8:17:4f:c8:d3:e2:ae:
4b:2d:21:cc:91:bd:b6:b2:e4:a0:cc:a0:35:5e:56:aa:3b:cc:
e2:92:c9:49:3f:41:bb:36:49:f5:1e:f8:e8:69:c1:56:f7:36:
76:f7:e2:30:9c:56:07:57:30:5c:a7:2b:bb:c0:ab:82:ab:7a:
04:98:3b:6f:45:79:61:e3:fe:89:5c:29:f4:49:fa:f2:31:2c:
91:83:f3:fd:73:e0:7a:fb:1e:6c:29:f4:4a:f5:2c:d2:b5:b7:
db:1b:b9:fc:4f:d4:cf:70:cc:db:f9:59:b5:45:da:9d:36:10:
e7:34:b1:63:f3:11:99:0e:0a:69:51:ff:33:4c:11:33:3a:20:
1d:45:e4:16:79:5f:23:20:a2:cd:e7:c6:c6:53:7b:76:92:8d:
da:d9:14:df:52:61:97:01:8a:64:a9:a9:5f:93:69:2b:88:f3:
8f:db:44:f9:10:92:1b:be:73:44:fe:6f:04:5a:bd:05:60:81:
64:d1:8f:e1:15:10:bf:d5:de:5f:01:47:f1:97:62:b2:3e:51:
35:33:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:54 2024 by rpki-client on console-fra.rpki-client.org