Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/6mtEcHkFZ6KIrLORV6y1QEZ7eJw.roa
File: 6mtEcHkFZ6KIrLORV6y1QEZ7eJw.roa (raw, json)
Hash identifier: DkPudx1IcqkOslbEAYbW39pZNOevKzSwc6TjeOtMPLw=
Subject key identifier: EA:6B:44:70:79:05:67:A2:88:AC:B3:91:57:AC:B5:40:46:7B:78:9C
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 019305D00DF6F27AB6ECF6625CDE3EDA213A
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/6mtEcHkFZ6KIrLORV6y1QEZ7eJw.roa
Signing time: Thu 07 Nov 2024 08:49:01 +0000
ROA not before: Thu 07 Nov 2024 08:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21022
IP address blocks: 91.211.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 18:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:d0:0d:f6:f2:7a:b6:ec:f6:62:5c:de:3e:da:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Nov 7 08:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea6b4470790567a288acb39157acb540467b789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:43:b0:d3:e8:ea:a8:a0:c1:57:89:cc:7d:
e1:78:37:12:08:62:c5:90:6e:c3:d8:3f:cf:39:78:
ee:02:ac:39:0b:05:b8:39:6f:b4:97:c7:82:b1:d9:
09:4f:91:3c:3b:df:dc:bf:cc:39:32:2a:13:2c:ed:
c7:b6:18:8d:a7:50:3d:e6:39:94:25:a4:fc:30:b1:
0f:c5:5f:72:a4:67:2b:4c:00:db:41:33:2c:65:b7:
7e:05:e6:c9:3a:71:76:52:10:00:4b:59:ed:f1:54:
dc:23:4a:a4:ff:51:23:cd:1a:35:0f:0d:73:2b:1d:
16:bf:70:b6:7d:70:98:37:ec:28:e2:b0:f1:32:d1:
1d:99:ae:0b:49:dd:d8:27:92:19:c1:1b:a9:b5:01:
12:e1:49:c7:cc:a2:20:33:0e:23:7f:be:0b:b0:df:
58:f7:0a:64:95:e2:75:6b:74:b1:52:64:49:42:39:
22:09:13:f9:59:d0:a1:3d:ac:28:6a:54:61:8b:64:
7b:77:74:df:72:ac:e5:2e:94:6a:da:ab:34:20:5e:
f1:d1:b1:52:e7:d5:3e:7f:67:fa:66:9d:37:ae:c1:
90:56:a8:80:c8:33:bf:3c:2b:5e:8f:26:46:e7:92:
5f:08:90:b8:14:27:70:a7:44:67:01:b2:22:ba:6e:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:44:70:79:05:67:A2:88:AC:B3:91:57:AC:B5:40:46:7B:78:9C
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/6mtEcHkFZ6KIrLORV6y1QEZ7eJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d8:c6:00:ec:d6:d3:d4:0e:28:ad:24:25:79:90:7a:d2:d5:
ad:33:02:59:f0:4f:6d:0c:a3:16:4d:18:67:99:a0:62:b6:9d:
22:fa:62:85:85:f3:81:9a:41:a0:b4:d9:88:49:cc:72:5b:2f:
df:9a:16:80:18:cc:b4:04:d9:8a:8f:25:c6:25:2d:1e:ec:c1:
0f:e0:0d:f9:66:dd:e7:72:59:25:90:c8:53:0c:4c:64:82:bc:
4e:36:da:57:9a:ff:22:56:87:fb:18:45:08:4c:c7:4c:d8:80:
9e:ad:b9:9f:33:a2:a5:ff:58:75:18:25:1c:1c:2a:c1:d6:98:
09:13:c0:3c:ef:b9:ad:49:b9:0e:75:15:22:45:c5:e0:16:af:
63:6c:ac:1d:fb:64:ed:d6:39:57:c2:e1:6a:de:9c:c8:20:0c:
7c:9e:16:c0:31:66:59:75:eb:e7:4a:46:f3:20:95:fd:13:6a:
a3:93:77:76:76:48:66:eb:a8:1b:75:f7:79:80:d4:be:db:b7:
af:14:59:51:be:84:09:20:6b:1d:db:eb:85:06:14:6c:c1:cb:
82:fd:51:ed:83:e6:26:9a:36:c9:21:be:63:ce:41:9f:0a:a1:
6e:58:b8:66:ff:2f:4d:3f:9b:f6:fe:50:1b:40:eb:46:c1:f2:
7e:c6:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:14 2024 by rpki-client on console-fra.rpki-client.org