Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/6TAk6gbht9yB5deMuNps19bmG7k.roa
File: 6TAk6gbht9yB5deMuNps19bmG7k.roa (raw, json)
Hash identifier: waf9d/8s1ihZKy/e3fH12uOkW6rqaaLQUkOFcAAmZqo=
Subject key identifier: E9:30:24:EA:06:E1:B7:DC:81:E5:D7:8C:B8:DA:6C:D7:D6:E6:1B:B9
Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial: 018A51B582AE90BCD5725835C9073A28669D
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/6TAk6gbht9yB5deMuNps19bmG7k.roa
Signing time: Fri 01 Sep 2023 17:06:04 +0000
ROA not before: Fri 01 Sep 2023 17:06:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35676
IP address blocks: 178.213.66.0/23 maxlen: 23
178.213.66.0/24 maxlen: 24
178.213.67.0/24 maxlen: 24
178.213.65.0/24 maxlen: 24
178.213.70.0/24 maxlen: 24
178.213.71.0/24 maxlen: 24
178.213.68.0/22 maxlen: 22
178.213.68.0/24 maxlen: 24
178.213.69.0/24 maxlen: 24
178.213.64.0/24 maxlen: 24
178.213.64.0/23 maxlen: 23
178.213.64.0/22 maxlen: 22
193.105.186.0/24 maxlen: 24
194.5.88.0/23 maxlen: 23
195.234.36.0/24 maxlen: 24
185.16.252.0/23 maxlen: 23
185.16.252.0/22 maxlen: 22
185.16.254.0/23 maxlen: 23
2a03:6f82::/32 maxlen: 32
2a03:6f81::/32 maxlen: 33
2a03:6f81::/33 maxlen: 33
2a03:6f80::/33 maxlen: 33
2a03:6f80::/32 maxlen: 33
Validation: Failed, certificate revoked on Fri 01 Sep 2023 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:b5:82:ae:90:bc:d5:72:58:35:c9:07:3a:28:66:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Validity
Not Before: Sep 1 17:06:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93024ea06e1b7dc81e5d78cb8da6cd7d6e61bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:86:38:57:32:12:1e:1c:fd:f4:2f:40:33:
65:76:89:26:1f:d5:11:71:1f:03:66:29:92:51:0f:
bb:32:5d:56:a9:23:a7:fe:07:3b:33:e0:71:20:01:
ec:de:f6:7a:1d:9f:9e:3c:8c:e0:1e:da:e6:0b:5b:
2b:66:ee:88:6b:b9:06:bd:d0:29:ff:95:15:23:75:
47:cf:87:21:13:4f:db:df:5d:61:b1:e3:40:ee:ff:
c7:9d:c7:8a:e4:72:60:5d:d4:b6:b9:33:1f:ab:b5:
4c:9c:aa:5c:f3:8c:c3:72:f2:86:76:a0:e4:8e:44:
36:9d:62:e0:fb:d1:0a:bf:64:b0:68:ad:51:99:2a:
58:12:df:ba:f2:dc:9f:79:86:81:ec:d2:a3:26:bb:
e0:0d:84:c4:1c:fc:aa:5b:de:5a:36:a5:f0:d9:e8:
6f:bb:6d:fa:38:11:8a:ed:37:55:b3:56:16:bc:af:
2a:be:55:14:18:9b:88:c4:4c:e4:60:e8:00:64:b0:
2d:d1:e8:b9:cd:66:80:55:55:e8:bb:11:17:49:1f:
79:07:e0:92:44:79:b9:61:25:56:d7:08:24:30:32:
5d:66:d2:8c:c4:2a:66:d1:af:83:f9:47:53:50:a0:
04:c0:91:b3:d6:42:ce:1a:b2:5f:3f:f5:64:32:7f:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:24:EA:06:E1:B7:DC:81:E5:D7:8C:B8:DA:6C:D7:D6:E6:1B:B9
X509v3 Authority Key Identifier:
keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/6TAk6gbht9yB5deMuNps19bmG7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.64.0/21
185.16.252.0/22
193.105.186.0/24
194.5.88.0/23
195.234.36.0/24
IPv6:
2a03:6f80::-2a03:6f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:31:6d:ce:1a:c3:72:c8:c0:c4:b0:a1:f5:19:d6:cb:07:ee:
d0:44:ac:08:93:d3:8c:61:7d:d2:39:f5:14:86:cb:eb:7a:b7:
97:f0:51:a1:15:d6:50:66:71:14:48:3e:05:a4:13:f1:28:b3:
e9:73:3e:02:0d:51:06:e5:35:fc:7a:b2:c8:e2:1e:0b:b4:80:
ac:eb:31:c3:3c:e0:a2:c3:99:43:a1:9b:f3:44:d4:8c:4b:7c:
7b:dc:cb:cc:de:00:3a:d5:2d:1e:dd:96:e0:41:13:e9:0f:84:
97:dc:98:16:aa:11:32:38:6e:bc:a1:c5:4b:b7:10:ac:46:fe:
af:07:bd:5b:07:81:75:3d:f0:3f:5d:ac:ab:56:f9:89:4b:75:
b2:f0:36:c1:ab:e1:1f:34:a1:f0:3c:9c:ab:10:78:f2:11:2c:
ad:c8:b9:c8:5e:f3:ed:6a:8a:b1:61:04:24:c4:c5:9d:fd:53:
8f:04:da:6c:c9:6f:a0:a9:a1:81:4e:89:8d:2e:5e:77:0a:d9:
63:6b:35:98:82:d7:18:29:97:70:c7:0d:b9:d8:b2:0a:10:81:
bf:20:de:44:23:88:a3:05:50:b0:24:42:36:ef:08:7c:6b:a4:
59:34:a6:50:a8:b6:f6:f0:64:96:c0:1f:62:0b:02:8b:6a:2e:
1d:e8:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:15 2024 by rpki-client on console-fra.rpki-client.org