Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6wICT8hKkx1AD-EYquXP6hZfMfI.roa
File: 6wICT8hKkx1AD-EYquXP6hZfMfI.roa (raw, json)
Hash identifier: erectZ9JBfdNgISQ53klztc6pcjn2nzI405BaIlP8Yg=
Subject key identifier: EB:02:02:4F:C8:4A:93:1D:40:0F:E1:18:AA:E5:CF:EA:16:5F:31:F2
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018ADC21D796F13D350C9C41DF7E7A12D81B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6wICT8hKkx1AD-EYquXP6hZfMfI.roa
Signing time: Thu 28 Sep 2023 14:11:59 +0000
ROA not before: Thu 28 Sep 2023 14:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1199
IP address blocks: 145.152.0.0/13 maxlen: 13
145.111.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:21:d7:96:f1:3d:35:0c:9c:41:df:7e:7a:12:d8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 28 14:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb02024fc84a931d400fe118aae5cfea165f31f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:d9:41:a8:27:19:df:ce:62:ce:a3:c0:e7:
02:ef:e0:27:c1:fb:9a:74:58:af:b0:c9:5a:89:57:
d5:9f:9a:be:49:c5:45:ac:3d:14:37:9f:31:fd:1f:
8e:d7:b5:20:b7:7f:5e:f5:80:79:b0:87:71:26:64:
f4:27:b2:10:6c:a8:36:c0:f6:a1:b9:48:fe:a0:25:
55:10:5a:d3:97:26:2e:ab:99:a4:a5:ad:3b:16:12:
d4:1c:a6:52:8f:9c:d6:10:6d:de:c7:1b:06:78:06:
5f:87:c5:51:7c:33:5b:f3:8f:90:0c:04:6e:e7:32:
9d:ee:b4:ad:f5:22:38:b7:7c:ee:4f:1d:f5:04:ec:
86:cc:f7:1b:50:e4:26:71:8b:06:9d:94:7f:5d:51:
4a:7c:8b:34:b2:16:7a:6e:a2:6a:99:4a:18:02:a2:
b9:bf:98:4d:1d:dc:4b:db:03:98:63:cf:d5:b8:f1:
74:34:84:d8:50:ea:f2:f3:e0:f9:62:d0:3d:cf:ce:
41:c4:88:7b:a8:17:3b:c0:8c:37:e9:70:14:d7:e4:
3c:be:e3:30:d9:a5:41:18:c3:ef:cf:52:0d:94:8e:
b0:46:8b:16:45:cd:78:e1:8d:84:75:00:2b:9b:7a:
ac:37:c5:d0:03:31:12:4a:57:1f:da:f8:1c:d1:86:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:02:4F:C8:4A:93:1D:40:0F:E1:18:AA:E5:CF:EA:16:5F:31:F2
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6wICT8hKkx1AD-EYquXP6hZfMfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.111.0.0/16
145.152.0.0/13
Signature Algorithm: sha256WithRSAEncryption
63:80:1c:6c:6e:7c:eb:b0:27:d9:12:80:0e:6b:cb:e1:e0:16:
37:53:80:d3:bb:81:7d:65:2e:02:d4:3e:19:65:a6:0e:4a:c4:
aa:2b:39:64:43:3f:f6:5f:da:aa:8d:7a:c9:91:0a:72:0f:8c:
3d:df:dd:78:45:cc:d0:30:8a:3b:a1:8b:9c:46:84:56:f8:5c:
b1:77:39:a2:dc:4d:a3:94:0a:98:32:cb:9d:73:aa:d5:c0:8d:
57:a5:dc:27:59:61:52:cd:10:ed:53:96:f9:c5:6b:27:cd:2c:
3a:12:65:e4:4d:9e:cc:e9:72:64:20:38:9c:fd:d5:43:34:10:
ec:03:08:92:2e:7f:4b:25:b0:4e:4a:e6:bb:40:99:91:d7:ca:
c3:b2:a0:32:4b:2a:08:c9:b0:7e:77:2d:22:7b:8c:18:60:cb:
17:b2:2f:19:85:c6:36:d6:82:6e:d7:b3:67:2a:47:e4:5c:d0:
0f:59:a2:24:f2:4f:9a:dd:d2:fa:95:3a:31:a9:18:53:83:36:
71:c1:11:92:1b:ac:6e:bf:26:5a:93:b7:31:24:02:01:b4:87:
5b:a9:dd:56:a4:31:44:02:6b:8a:75:78:77:8c:ab:9a:ee:1f:
ee:da:11:8e:9d:d8:5c:aa:bf:f7:0a:b1:b2:cb:49:a8:fa:6f:
b0:6b:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org