Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/6xIEnAzrVqb0MzK6MW81VxSisTE.roa
File: 6xIEnAzrVqb0MzK6MW81VxSisTE.roa (raw, json)
Hash identifier: UwAO2yeKh+s8IAqijXath7E9kt/hQCLtFhIbIgk1z0M=
Subject key identifier: EB:12:04:9C:0C:EB:56:A6:F4:33:32:BA:31:6F:35:57:14:A2:B1:31
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 018C0175B94410D8D784F0279F2D40362884
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/6xIEnAzrVqb0MzK6MW81VxSisTE.roa
Signing time: Fri 24 Nov 2023 13:12:21 +0000
ROA not before: Fri 24 Nov 2023 13:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 195.211.40.0/23 maxlen: 23
91.226.212.0/23 maxlen: 23
176.103.48.0/20 maxlen: 20
91.207.60.0/24 maxlen: 24
193.169.86.0/23 maxlen: 23
91.217.91.0/24 maxlen: 24
2a13:f580:1::/48 maxlen: 48
2001:678:334::/48 maxlen: 48
2a13:f580:4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:75:b9:44:10:d8:d7:84:f0:27:9f:2d:40:36:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Nov 24 13:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb12049c0ceb56a6f43332ba316f355714a2b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:00:fb:ef:2d:b1:c1:d6:f9:d5:16:43:d3:
1e:a1:ea:8f:45:33:f4:2d:65:83:b3:a8:fb:a5:8f:
94:81:20:fb:ad:2f:7e:be:e5:db:1e:59:cc:23:03:
5b:65:1e:d6:62:7a:bf:1f:1e:8b:30:3d:f7:29:0d:
91:7c:aa:95:cd:a1:4b:d4:ff:42:3d:75:5c:8b:e2:
73:3c:af:0a:d9:ff:ba:aa:b3:e5:8c:34:50:7a:61:
3c:78:b6:e6:89:b7:8b:dd:20:75:05:c4:6b:65:d6:
3b:ca:9e:f7:a0:7b:c1:35:c4:30:f4:0d:70:f9:67:
51:c9:e6:bd:22:df:59:4b:42:6d:4a:fb:9b:b1:92:
80:7c:3a:75:12:01:55:41:30:51:f7:9b:c4:af:dc:
65:25:22:8b:e4:ac:01:25:8f:80:69:10:cf:e4:29:
cd:4e:e7:e2:94:dc:ed:ae:ff:ef:56:db:fb:22:ba:
89:21:bf:45:66:2c:c1:7f:1c:17:00:b9:b9:cd:be:
28:d6:5d:84:3b:6b:d4:e1:73:10:db:ad:b4:2e:54:
81:63:82:03:f9:da:00:84:04:88:7c:b7:a9:31:bb:
f1:92:ee:e4:a1:4d:cc:2c:63:66:98:8c:54:a7:d3:
c2:b3:6e:f3:2a:0f:5b:57:c7:53:0b:0c:ec:f4:fe:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:04:9C:0C:EB:56:A6:F4:33:32:BA:31:6F:35:57:14:A2:B1:31
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/6xIEnAzrVqb0MzK6MW81VxSisTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/24
91.217.91.0/24
91.226.212.0/23
176.103.48.0/20
193.169.86.0/23
195.211.40.0/23
IPv6:
2001:678:334::/48
2a13:f580:1::/48
2a13:f580:4::/48
Signature Algorithm: sha256WithRSAEncryption
8d:37:e8:e1:11:c5:3a:ca:0b:01:b1:a5:83:ac:85:1f:0d:48:
60:17:22:bb:e9:55:77:14:dd:e8:8f:19:57:e3:71:46:94:3e:
e2:63:fb:35:46:e2:26:6f:3e:d7:f1:ed:53:50:67:67:18:dc:
84:d3:1d:c3:85:43:d6:f0:ee:1c:ac:b3:2e:20:47:9d:f0:1c:
04:f1:2b:b3:99:25:fa:e6:39:7e:f0:5d:15:44:4f:31:70:a3:
32:35:20:dd:c1:1e:89:c9:b7:49:53:52:21:c3:68:57:b1:76:
74:4a:a4:87:b6:be:37:28:be:45:e5:41:d9:47:0c:fa:3b:5e:
4a:b9:31:92:47:20:f6:ed:a7:cf:73:90:dd:74:dc:f6:73:68:
cb:81:64:4b:24:0a:fd:02:73:aa:47:02:ce:f5:14:5c:10:7b:
99:47:d6:1e:d6:30:87:53:b1:35:d6:e8:93:8f:aa:36:c5:7b:
e0:a0:51:d3:32:1a:ec:b0:f7:fa:5e:e9:42:d9:30:ff:fd:17:
b1:2c:ec:ae:59:4d:45:b1:c5:a8:d4:c2:3c:15:95:fd:61:90:
55:35:09:88:7a:8d:ad:5a:d0:49:8c:ef:3d:4e:dd:05:ec:ea:
91:80:19:8c:ed:ee:5a:77:ce:3c:6d:d2:1b:30:74:82:35:06:
43:05:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:09 2024 by rpki-client on console-fra.rpki-client.org