Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/byuQ7jXaLPBsXVoK_73tyVniHIE.roa
File: byuQ7jXaLPBsXVoK_73tyVniHIE.roa (raw, json)
Hash identifier: 6GysiqjWzlDlYSde11PYzprwk230u1GBttfXaofVroY=
Subject key identifier: 6F:2B:90:EE:35:DA:2C:F0:6C:5D:5A:0A:FF:BD:ED:C9:59:E2:1C:81
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3ACD6F04C2B9C327F64780C2F7F5
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/byuQ7jXaLPBsXVoK_73tyVniHIE.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1647
IP address blocks: 188.172.229.0/24 maxlen: 24
2a00:11c0:3a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3a:cd:6f:04:c2:b9:c3:27:f6:47:80:c2:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f2b90ee35da2cf06c5d5a0affbdedc959e21c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:b5:34:fd:49:db:51:16:1b:ef:91:37:5d:
74:18:d6:10:51:d9:30:b2:11:9c:1c:55:18:f4:7a:
4a:e7:60:ed:a0:4e:5c:a2:a7:79:05:b7:01:64:23:
4f:d4:35:b9:83:74:6b:cc:de:4b:a2:ca:bd:6a:b1:
63:91:f0:6e:9f:60:24:28:2c:c0:ca:3e:74:66:4b:
90:ca:16:3c:76:bb:da:b2:49:a9:35:44:46:22:75:
2c:84:8c:ca:d5:90:56:8a:41:74:91:70:55:d7:71:
57:c3:82:63:93:d4:01:b0:f5:9a:6d:e2:d5:27:c9:
e1:28:c8:bd:52:02:a2:cb:85:9d:bd:f4:13:b7:44:
c1:40:bd:59:d4:aa:7b:f2:12:1a:16:64:c6:0a:d6:
e2:0a:f7:05:a0:28:37:38:70:21:ab:95:3f:dd:76:
b3:f0:44:c1:e9:f7:7b:fa:46:00:82:2e:c0:aa:37:
e3:a6:40:c3:cb:94:c7:00:8b:df:e7:30:b5:72:d8:
3c:60:48:67:b9:30:14:72:23:f5:70:93:cc:30:b8:
28:c1:5c:d6:98:2d:63:6f:02:ed:2d:2f:69:31:69:
34:f8:e1:bc:0b:24:e9:63:1e:9c:2c:05:55:64:b1:
b5:02:8c:17:d5:93:9f:6f:32:98:f9:fb:98:43:6d:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2B:90:EE:35:DA:2C:F0:6C:5D:5A:0A:FF:BD:ED:C9:59:E2:1C:81
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/byuQ7jXaLPBsXVoK_73tyVniHIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.229.0/24
IPv6:
2a00:11c0:3a::/48
Signature Algorithm: sha256WithRSAEncryption
a0:d0:25:36:7b:62:ae:6b:64:27:71:cc:9e:03:41:b2:cc:cd:
09:60:eb:66:ee:d6:69:98:77:0a:16:78:71:47:70:10:ba:05:
81:e6:5f:0f:ff:bb:63:de:de:53:f0:72:59:ca:eb:e4:ad:a5:
c1:c0:77:b6:af:ae:8e:84:cb:cb:19:13:d2:4f:c6:c3:0e:00:
32:0e:38:b6:d6:85:d3:36:22:5a:e5:fe:c0:5a:fa:04:2d:d7:
bc:23:a8:7d:ee:b3:1e:c1:ad:6d:e2:b1:00:24:8a:e8:76:6e:
14:02:b8:f8:ed:ae:a8:bf:ce:f1:01:2f:8c:1e:a1:e9:f3:69:
8c:fc:92:66:29:1b:ea:53:86:f2:01:31:c6:86:a1:e7:34:c2:
ec:0d:16:a5:89:dc:08:69:aa:3b:0a:05:d4:1a:f5:e9:91:b4:
ae:2a:d8:23:41:94:93:7e:2b:41:42:94:50:ad:19:80:59:62:
73:35:99:e4:db:69:24:3b:68:cf:ac:34:72:8d:52:88:d3:cf:
03:6d:6e:e5:20:92:78:ee:23:15:c8:d7:8a:55:99:9f:60:fb:
6e:fd:7c:9d:bd:31:1a:46:9b:9f:9c:18:1f:ae:cc:a0:32:27:
48:4b:e7:8a:1f:ac:f0:ec:7e:6c:20:29:5a:4a:0d:d3:f4:a3:
f4:d8:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org