Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/6rbd6GEbKklVLKv15E9LnelqFQA.roa
File: 6rbd6GEbKklVLKv15E9LnelqFQA.roa (raw, json)
Hash identifier: y1qzRphHNfl68h/dZBCpw9Cf+FtFqC4Re9yJChJGQSI=
Subject key identifier: EA:B6:DD:E8:61:1B:2A:49:55:2C:AB:F5:E4:4F:4B:9D:E9:6A:15:00
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3D205E7C97513FDAAC2622C185DD
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/6rbd6GEbKklVLKv15E9LnelqFQA.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14230
IP address blocks: 188.172.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3d:20:5e:7c:97:51:3f:da:ac:26:22:c1:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab6dde8611b2a49552cabf5e44f4b9de96a1500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:a2:67:2c:15:c2:c8:c8:66:38:bb:c6:15:
58:a4:79:71:11:03:60:35:b2:8a:ff:51:c7:af:7b:
d2:40:13:46:c1:f1:13:81:c2:d3:77:3e:24:c3:82:
0a:28:35:a8:07:07:05:c7:d9:5b:f5:7f:96:b6:76:
c3:a3:42:86:58:8c:0a:d3:72:a4:ce:4a:ac:6d:52:
bc:74:71:c1:aa:c3:50:a2:0c:db:35:16:05:59:1b:
93:f1:39:5a:ff:53:b0:a9:9e:95:1f:1e:af:29:52:
1a:f1:43:da:12:29:df:8d:75:c7:32:a8:11:79:1b:
2f:17:24:1c:ff:65:83:2e:2f:0a:a4:10:5e:38:8f:
6a:bd:d0:c0:7b:6f:70:63:71:ed:95:36:a5:36:b5:
93:6d:f8:6c:78:1a:cd:88:a7:da:6b:d6:7d:6e:41:
56:31:ec:44:2b:1d:5f:a1:f1:00:5d:e9:c8:4b:37:
98:4e:8a:84:44:ef:30:4d:77:11:03:4f:15:4b:8d:
14:dd:e0:e3:72:18:ec:d8:b6:2e:3e:6e:17:7d:96:
f2:21:c5:df:b0:ba:35:92:89:3f:2a:e3:66:8d:b9:
72:d8:e7:2c:37:74:4d:9e:cb:fc:b9:e1:71:50:2a:
1e:9d:7a:8f:5b:84:17:65:7a:68:c1:0b:06:15:8c:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B6:DD:E8:61:1B:2A:49:55:2C:AB:F5:E4:4F:4B:9D:E9:6A:15:00
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/6rbd6GEbKklVLKv15E9LnelqFQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.234.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d5:6b:c9:2b:7a:af:1e:f0:9d:8b:94:9c:7b:3f:cf:4e:ff:
8e:5e:95:06:07:ab:a7:16:be:bf:2f:9a:13:06:6f:d3:e1:a5:
20:cb:cd:43:bc:10:12:d4:0f:48:21:7d:57:ac:6b:68:e8:86:
14:d7:d5:26:bb:4e:2f:69:3a:30:0f:c2:8f:77:de:b0:83:6e:
25:8a:20:f0:11:3d:5f:9b:c4:2b:30:8f:14:92:01:8b:0e:f1:
80:d1:04:5a:4e:96:bf:ae:c7:95:19:12:e9:ac:01:f1:41:76:
73:67:ea:89:13:df:8a:dd:27:12:c3:bb:2e:a3:f5:10:3f:37:
1c:d4:a5:aa:28:75:d8:03:de:97:ee:e7:37:d9:f1:62:db:bb:
01:ea:de:1f:7c:64:e3:2e:c4:9f:a8:05:df:b8:eb:a4:d1:5c:
74:83:b2:e1:ae:74:50:f4:e3:04:4a:ba:a3:2c:65:c9:55:27:
65:6e:b3:ee:a8:b3:8c:cc:06:0f:ee:33:c7:59:75:b7:b3:b5:
11:6a:db:cd:72:98:85:54:50:de:ac:96:70:2c:f1:9f:24:02:
e1:f0:cc:17:da:21:18:d0:e5:2f:a3:de:52:2b:5f:02:a9:e8:
d7:37:42:e3:fa:0b:c8:30:f0:a4:cc:ec:00:aa:77:f9:72:3e:
5e:55:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org