Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/mBmCid-fWO2tNe6GlbWnXP0ioWs.roa
File: mBmCid-fWO2tNe6GlbWnXP0ioWs.roa (raw, json)
Hash identifier: XpcKCs3Dlozjq6Ou0TZgBLV4CDLw/otIc9mcBxPMIic=
Subject key identifier: 98:19:82:89:DF:9F:58:ED:AD:35:EE:86:95:B5:A7:5C:FD:22:A1:6B
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CF463F5E82115691B236769DC0625394F
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/mBmCid-fWO2tNe6GlbWnXP0ioWs.roa
Signing time: Wed 10 Jan 2024 17:20:40 +0000
ROA not before: Wed 10 Jan 2024 17:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21245
IP address blocks: 217.146.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 06:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:63:f5:e8:21:15:69:1b:23:67:69:dc:06:25:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 10 17:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98198289df9f58edad35ee8695b5a75cfd22a16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:61:c3:64:51:07:05:bd:57:c3:65:13:43:
4b:8d:19:fa:43:1f:55:fa:fd:c9:04:19:f8:06:24:
56:2d:36:be:49:39:6b:a5:8f:d7:84:55:e3:0c:92:
87:89:fe:36:55:95:2b:98:30:13:db:21:90:86:a9:
ea:63:13:14:f2:bb:3d:8a:be:bb:11:43:9c:73:2c:
a0:da:ca:96:16:6f:b5:89:86:36:76:2d:82:46:82:
f2:28:23:29:bf:c8:1f:dd:c3:08:81:85:fe:c4:79:
93:3e:7f:4e:8a:a0:c3:86:dc:c5:98:c5:61:82:92:
98:02:c3:18:e0:4c:88:a6:5f:89:2e:f6:ed:f4:6a:
29:94:bc:d9:f9:a2:02:86:f1:e1:a8:4e:bd:de:ad:
c5:5f:81:cd:c4:cb:29:62:c8:15:99:a4:32:22:fc:
ed:d7:7b:83:71:48:dc:98:17:e6:4b:4b:2b:37:be:
ae:de:86:18:f0:16:6a:c8:a6:1d:27:f2:cd:71:4e:
c5:67:a6:17:66:dd:7f:20:de:8a:b2:1e:bc:0f:35:
19:7d:6a:73:4a:b2:ee:6a:c0:b0:15:31:26:eb:67:
2b:a9:62:22:25:bd:8d:02:fd:d5:81:1d:b3:5d:cb:
6c:e3:3c:b2:1b:3e:f2:a2:7b:80:c6:9f:43:c2:5f:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:82:89:DF:9F:58:ED:AD:35:EE:86:95:B5:A7:5C:FD:22:A1:6B
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/mBmCid-fWO2tNe6GlbWnXP0ioWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.146.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:56:b7:d1:6e:b4:3f:2d:aa:92:b1:a5:54:cc:b5:76:af:83:
1d:2d:53:ec:c2:c4:c4:7b:aa:9a:a1:ec:a0:5a:94:a0:94:0f:
f1:e7:8f:25:41:00:8b:4b:4c:26:92:0b:55:cc:fa:5e:55:2d:
60:a3:91:13:6e:b2:e4:85:8c:48:79:a5:0c:35:95:3f:0a:21:
a1:cb:51:70:a4:8c:02:d6:2b:82:7e:a1:45:48:0f:8c:84:63:
9b:b7:9b:5d:05:82:c9:17:7b:53:12:01:a1:b3:ef:1e:17:ff:
51:43:c5:3a:a8:d8:34:e8:ff:15:84:9d:1e:cb:5c:ca:0f:24:
ea:40:e0:07:7b:b9:fb:b6:35:c0:33:9a:ae:9d:7f:7f:97:71:
f6:8c:e0:1d:eb:d6:94:e7:8b:e1:a1:d0:31:03:50:98:d6:4f:
05:f0:c7:fd:cc:92:8d:f8:5f:79:25:c6:15:f5:41:8f:34:f6:
4c:f3:df:c6:44:e3:95:55:ae:8f:ab:44:3a:92:33:85:7c:9b:
4b:9a:26:22:fc:de:af:e0:7e:96:b5:46:75:21:11:90:b8:f1:
21:7a:05:2e:19:1c:65:f1:f0:31:2f:5f:17:5e:a0:22:80:81:
25:bf:13:0d:97:2f:2a:bd:55:6b:f4:a3:4d:5c:cc:09:df:12:
10:dc:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org