Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/amsfJ_G6tYDIDALmzlYkrFhBnB4.roa
File: amsfJ_G6tYDIDALmzlYkrFhBnB4.roa (raw, json)
Hash identifier: wTs29xQTuKLcWLcoBdCJqbGGCpCQQvZe8ECYK4gvTSc=
Subject key identifier: 6A:6B:1F:27:F1:BA:B5:80:C8:0C:02:E6:CE:56:24:AC:58:41:9C:1E
Certificate issuer: /CN=90db0007438537166cf3e59696db240a9412bef1
Certificate serial: 0187507715AEA357EBD576F75D656F1525DD
Authority key identifier: 90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/amsfJ_G6tYDIDALmzlYkrFhBnB4.roa
Signing time: Wed 05 Apr 2023 08:09:54 +0000
ROA not before: Wed 05 Apr 2023 08:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21245
IP address blocks: 80.91.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:77:15:ae:a3:57:eb:d5:76:f7:5d:65:6f:15:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90db0007438537166cf3e59696db240a9412bef1
Validity
Not Before: Apr 5 08:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6b1f27f1bab580c80c02e6ce5624ac58419c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f6:a1:b0:02:17:77:8e:89:0d:26:24:90:c9:
4f:7d:e5:f7:c5:2a:98:06:82:14:4d:9a:90:0c:62:
b8:cc:66:9e:9a:fe:9b:4c:7c:46:32:28:4a:02:d1:
b3:c9:84:0c:c3:86:7c:2c:1f:1f:ab:ce:b4:9b:2a:
16:3d:2e:5f:ca:e3:b7:64:77:44:6d:fe:d8:41:43:
c7:e9:5a:10:54:c3:3b:50:8a:0b:a4:f1:f8:05:ef:
fc:83:be:47:86:b5:05:c2:63:fa:0c:87:63:01:24:
9c:ef:56:7b:c9:da:53:5b:d3:77:cc:ae:65:80:d3:
4b:f8:b0:73:02:13:37:40:8c:dd:ab:bf:b0:61:96:
6f:18:6b:45:23:fa:c8:2a:7f:45:ad:c9:ca:ec:b5:
24:86:52:2a:14:c6:36:c2:1d:6e:05:3f:df:93:e7:
7b:e9:e7:04:1a:81:31:86:e5:34:93:e2:53:7b:63:
a7:b4:8d:1f:b8:cd:87:6d:ce:c9:8e:e5:b5:98:bd:
15:e7:b1:87:30:8b:82:82:07:2e:d0:b2:09:0f:a8:
f1:11:f8:30:70:80:b2:d0:b4:39:f3:49:01:ad:f0:
42:1c:1b:87:b7:a5:24:a3:87:e8:9e:05:7d:66:38:
2e:a5:4e:a3:36:ef:99:ec:13:aa:fd:e5:13:46:24:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:1F:27:F1:BA:B5:80:C8:0C:02:E6:CE:56:24:AC:58:41:9C:1E
X509v3 Authority Key Identifier:
keyid:90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/amsfJ_G6tYDIDALmzlYkrFhBnB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.216.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1d:24:48:ee:ed:65:1d:7d:97:52:a8:9b:55:6e:79:89:16:
55:58:99:62:95:46:b2:29:6d:f6:97:d9:0a:1f:fb:b3:aa:87:
68:fa:39:c5:07:4f:59:4c:9e:0e:6c:f9:a7:82:e7:aa:cf:45:
fc:43:b8:47:26:bc:fb:c5:b2:7a:ce:d9:f0:7e:69:39:66:71:
c7:05:65:21:78:c0:4d:95:87:f9:23:1e:5e:7a:26:57:ed:ca:
88:97:c6:a0:b0:17:45:17:ee:5e:18:84:40:3d:86:0d:c7:43:
c1:d7:ef:fa:83:15:70:42:77:a7:46:c6:cf:13:50:79:6e:69:
72:4a:26:86:cb:0e:0d:9d:a4:b0:42:16:32:3d:b2:15:86:b2:
20:47:a6:1a:65:9d:83:47:66:2b:d0:c6:1e:ca:c8:80:cb:33:
b4:a4:49:6a:6b:ba:26:56:6e:b9:6a:25:9e:87:a9:89:d3:99:
02:02:49:bd:59:3e:f9:27:56:7b:07:a7:5d:87:32:9e:ba:02:
c6:df:90:92:18:86:50:42:d5:14:a4:f2:78:89:70:f1:d7:5d:
34:0b:f4:b6:21:20:16:5f:65:e5:c5:43:fa:0b:37:fd:a0:41:
a7:2f:94:9c:4c:12:a7:95:1b:a6:97:df:4e:98:c3:d5:1d:03:
8a:97:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:55 2024 by rpki-client on console-ams.rpki-client.org