Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/6VNEtMO7uq59sXlB0pmY_pfL-zY.roa
File: 6VNEtMO7uq59sXlB0pmY_pfL-zY.roa (raw, json)
Hash identifier: c4SyLyVGyZnMF+Tnr8LM+T5XwZkzqoj8g18RFGhRTso=
Subject key identifier: E9:53:44:B4:C3:BB:BA:AE:7D:B1:79:41:D2:99:98:FE:97:CB:FB:36
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01856D017F3581D67341304E1FA355D4D4AC
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/6VNEtMO7uq59sXlB0pmY_pfL-zY.roa
Signing time: Sun 01 Jan 2023 11:04:52 +0000
ROA not before: Sun 01 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6837
IP address blocks: 178.192.0.0/13 maxlen: 32
85.0.0.0/13 maxlen: 32
176.127.0.0/16 maxlen: 32
188.60.0.0/14 maxlen: 32
83.76.0.0/14 maxlen: 32
62.202.0.0/15 maxlen: 32
92.104.0.0/14 maxlen: 32
2a02:1200::/27 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:7f:35:81:d6:73:41:30:4e:1f:a3:55:d4:d4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e95344b4c3bbbaae7db17941d29998fe97cbfb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:d1:9f:b7:1d:9a:64:16:a0:ae:1f:88:a3:
ff:3e:4e:da:dc:34:c9:f5:61:17:91:be:f6:f4:56:
ab:b2:4b:95:4e:78:60:fa:ce:ef:30:15:a2:36:b9:
98:95:cf:61:4a:e4:ec:87:9c:d4:dc:b7:db:63:09:
12:29:65:65:dc:35:1f:f8:e7:7d:09:2f:d8:e8:c3:
b9:19:8d:f8:00:33:cf:2f:43:68:04:a1:45:2b:94:
eb:b7:bf:a3:c6:0d:86:81:50:a5:35:d0:25:74:42:
24:0a:5a:b1:9c:8e:8f:d5:ff:1f:1b:8a:2f:be:c0:
11:b6:f2:e1:79:57:20:57:3d:66:2e:d9:ce:dc:27:
19:1b:47:0c:52:82:63:3d:f6:ae:7c:13:0c:22:5f:
05:67:a5:67:d3:b1:50:e3:dc:ed:e3:c3:01:67:90:
2a:ee:e4:b2:d9:2f:63:36:4d:25:a6:e0:0f:c7:43:
66:a8:b5:8a:ba:13:8e:36:80:9e:f7:20:d1:76:29:
18:65:7c:7d:3e:31:30:ff:86:25:34:a8:d7:a2:42:
a7:dd:ae:26:43:aa:9d:1d:52:e3:d2:72:f9:a9:68:
a4:a5:99:9a:4f:95:84:15:c6:2d:9b:4d:60:9e:58:
03:7e:38:7a:c8:a1:f9:ef:da:ac:a8:87:e9:28:38:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:44:B4:C3:BB:BA:AE:7D:B1:79:41:D2:99:98:FE:97:CB:FB:36
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/6VNEtMO7uq59sXlB0pmY_pfL-zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.0.0/15
83.76.0.0/14
85.0.0.0/13
92.104.0.0/14
176.127.0.0/16
178.192.0.0/13
188.60.0.0/14
IPv6:
2a02:1200::/27
Signature Algorithm: sha256WithRSAEncryption
2d:10:21:be:af:8e:a6:15:64:e3:cf:99:47:b1:4f:a9:7c:56:
b5:45:26:f5:be:46:bd:10:99:27:b0:8d:9c:ec:48:d7:7e:de:
8e:cb:25:e3:7d:af:c1:78:bd:fe:8e:f2:ec:0b:5a:6a:1e:e9:
cd:ec:80:d7:af:ac:0d:cd:91:79:3f:45:fd:a0:a0:1c:aa:33:
d9:20:f5:10:0f:84:cf:ed:f9:7e:90:f4:a0:45:8f:42:3d:de:
bc:e7:83:f0:e3:f0:1c:cd:37:57:75:b5:e2:ca:b1:77:13:b1:
a2:79:22:00:07:00:f3:0c:8a:c9:ee:6f:05:45:be:c2:f7:1c:
9b:09:a2:b0:e7:74:29:e1:39:8b:74:d3:5e:1c:4a:0b:8e:d6:
86:90:a3:ce:e1:3c:fd:1e:9d:b5:16:a6:6e:de:1d:ce:62:42:
4d:58:60:56:fe:eb:c9:35:d1:36:97:95:2d:0b:ac:3b:36:1b:
35:64:1a:bc:04:e9:3a:17:d7:db:83:d5:be:96:5a:38:61:a3:
1d:30:29:1c:b1:ed:76:d1:0c:5f:ef:b3:4c:a7:bc:08:43:cb:
76:ad:5e:92:2b:71:14:20:e2:7d:48:65:14:ad:2e:8e:f0:cf:
94:26:dd:de:c5:aa:ae:32:4f:51:60:83:4e:fc:86:44:55:18:
14:14:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:16 2024 by rpki-client on console-fra.rpki-client.org