Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/6zN65C39AvhBcUqlUVm1h1YLHa8.roa
File: 6zN65C39AvhBcUqlUVm1h1YLHa8.roa (raw, json)
Hash identifier: NJe0urAAmtwmE5qlhxiHOtpZgXkrWT1vl4xo0HrxOXM=
Subject key identifier: EB:33:7A:E4:2D:FD:02:F8:41:71:4A:A5:51:59:B5:87:56:0B:1D:AF
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0185710C0CF33C6ED23186ABC46BCC4235F0
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/6zN65C39AvhBcUqlUVm1h1YLHa8.roa
Signing time: Mon 02 Jan 2023 05:54:53 +0000
ROA not before: Mon 02 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 37.228.149.0/24 maxlen: 24
193.56.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:0c:f3:3c:6e:d2:31:86:ab:c4:6b:cc:42:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 2 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb337ae42dfd02f841714aa55159b587560b1daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:38:1f:c1:d5:45:e7:45:fe:bc:80:11:c4:
bd:e4:ff:bc:a0:d5:44:b0:1d:ef:9c:ae:d9:42:05:
28:31:a9:b0:77:be:d2:cb:c3:73:e7:15:e1:56:dd:
fe:48:b7:95:1d:21:16:74:f5:6d:12:9e:de:19:0d:
a8:55:d9:6f:ae:c0:f3:2a:37:5b:71:85:6e:8b:19:
68:10:06:56:2a:69:89:6a:28:bb:88:da:c3:d2:2e:
13:4f:58:0b:bf:e2:6a:c2:1b:f8:57:f6:7c:72:e0:
4f:68:b9:6e:cb:a6:6b:e4:87:ab:4f:6b:b4:ae:ac:
b3:09:c9:0d:06:68:ec:49:f5:a2:37:00:f4:53:9e:
8e:8a:5e:90:ff:30:0f:36:df:38:9d:5b:56:1b:b1:
86:fa:ee:13:b3:45:b7:a4:18:74:cd:83:4f:6d:a3:
55:c2:2a:a0:cf:8a:01:f8:ad:27:52:02:38:56:95:
6d:87:4a:cd:e3:19:ed:7d:02:0a:c0:ab:ed:25:80:
c6:88:eb:ee:49:02:ee:f1:7d:7c:66:19:0f:13:13:
81:d3:df:5f:43:cf:7b:f4:8a:b7:4a:01:f8:ea:f4:
75:55:5b:28:f2:a9:73:08:29:2f:a7:70:81:07:68:
f8:50:1c:39:89:f7:96:76:a1:ea:64:d2:8c:14:c5:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:7A:E4:2D:FD:02:F8:41:71:4A:A5:51:59:B5:87:56:0B:1D:AF
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/6zN65C39AvhBcUqlUVm1h1YLHa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.149.0/24
193.56.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8a:c1:63:7d:bd:7e:bd:b1:c1:86:f1:c4:ad:24:97:e3:1b:
8b:86:14:5f:dd:a3:cd:3b:db:a3:7c:b5:bb:62:b0:dc:01:6c:
c6:1d:65:14:6f:fb:60:8f:89:1d:78:26:29:7f:20:42:09:2c:
d1:e0:7c:4b:1c:af:e5:9f:9d:7c:41:cf:48:d7:e3:87:17:40:
10:5e:3d:6c:58:86:78:8c:02:fd:28:07:06:01:50:29:e8:f0:
56:59:7a:4f:a4:b5:1c:e5:04:b9:4d:f9:79:a8:a8:8b:32:6e:
db:30:0b:32:8e:2f:55:7a:7e:98:e4:e0:2c:2b:9f:ab:38:8f:
8e:74:91:a9:c2:90:00:2f:e0:72:b9:57:ff:74:40:36:a1:13:
17:97:df:79:fc:31:d3:a4:dc:21:44:7e:86:24:12:2b:56:98:
7a:58:53:e2:e8:7e:54:ff:49:c2:6d:22:4a:23:9e:4c:a7:a4:
24:3f:29:3c:04:4d:d1:4e:f4:32:70:92:68:74:45:c8:19:55:
41:17:fa:0c:77:34:5b:da:a8:67:ed:d0:0f:e9:59:ce:c4:04:
b4:18:15:af:ee:4f:f3:35:2b:ea:7a:45:9e:f1:7c:41:06:f0:
fc:9d:b0:78:3d:f7:80:7f:52:3d:6a:ee:21:a8:75:44:58:7c:
b6:b8:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org