Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/6UNWevDIrgfJszS_6-RqxlU0pDc.roa
File: 6UNWevDIrgfJszS_6-RqxlU0pDc.roa (raw, json)
Hash identifier: uB6J4fC1UhQKzvCgMUw+9KWTQIVlQyK3d1GKD9VRxiQ=
Subject key identifier: E9:43:56:7A:F0:C8:AE:07:C9:B3:34:BF:EB:E4:6A:C6:55:34:A4:37
Certificate issuer: /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial: 018570674492CE49469BA9E4E8FB73278297
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/6UNWevDIrgfJszS_6-RqxlU0pDc.roa
Signing time: Mon 02 Jan 2023 02:54:53 +0000
ROA not before: Mon 02 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29434
IP address blocks: 193.200.170.0/24 maxlen: 24
93.94.192.0/21 maxlen: 24
93.94.199.0/24 maxlen: 24
93.94.194.0/24 maxlen: 24
195.85.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:44:92:ce:49:46:9b:a9:e4:e8:fb:73:27:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Validity
Not Before: Jan 2 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e943567af0c8ae07c9b334bfebe46ac65534a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:d1:f0:b9:86:c1:f6:02:65:d3:2e:e2:0e:
2f:01:5f:ac:ba:db:7d:ab:50:f7:95:53:d7:a3:b1:
bd:b5:44:bf:41:80:e1:a3:0a:6c:f1:4e:e5:fb:c7:
f3:46:5d:fe:70:ac:c6:16:99:12:93:ec:f1:65:e8:
2c:38:7a:44:1b:7f:4a:d1:ba:48:99:ff:dc:b3:ae:
eb:7f:73:2c:85:ea:a5:9d:92:cf:ec:1d:e5:1b:10:
cc:f9:87:8f:d5:1f:9f:1b:65:fb:09:b0:6d:d2:f7:
cf:76:50:18:72:93:22:04:4b:ef:77:a7:45:41:d8:
d0:46:51:2a:f6:f2:f5:ef:89:d3:e2:3e:a8:f4:61:
f9:28:ce:0f:cb:9e:ed:c9:3c:6a:e6:7a:0e:40:31:
d5:1a:cf:fe:8d:08:85:23:1a:13:e6:67:b7:dd:20:
0a:19:9d:29:f8:40:0f:26:0e:9b:61:61:68:de:e5:
16:65:d5:b5:d3:d8:e5:df:b0:89:d4:b6:f8:79:76:
5a:f1:45:e9:0d:13:88:b6:16:bb:11:ce:76:c1:45:
42:7e:6b:91:fc:65:81:eb:c8:30:77:96:0b:c8:4e:
51:b8:91:00:45:25:11:1f:88:1d:8b:79:70:11:c2:
a3:ef:1a:72:f1:8a:91:30:96:fc:20:33:a9:a6:21:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:43:56:7A:F0:C8:AE:07:C9:B3:34:BF:EB:E4:6A:C6:55:34:A4:37
X509v3 Authority Key Identifier:
keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/6UNWevDIrgfJszS_6-RqxlU0pDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.192.0/21
193.200.170.0/24
195.85.255.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ea:43:0a:d3:d7:ee:c0:a2:b7:8c:bd:9e:21:3c:e1:b7:7b:
1f:00:01:d4:27:b5:e4:bb:0f:e7:ed:20:0e:a6:3e:6e:43:9d:
47:ec:7b:29:41:63:49:80:74:65:8c:a4:28:43:7f:f0:e2:93:
36:70:91:e2:05:c3:c5:65:7e:c9:21:73:0e:19:db:59:2b:da:
4e:cd:13:c9:6e:ef:29:7f:d6:c6:fd:36:4a:05:6c:ce:50:91:
9d:0c:e7:97:8b:22:40:27:7e:77:40:3e:60:a0:a0:cc:ce:f7:
57:42:45:58:aa:b3:94:c7:1f:1e:5a:60:50:e7:ed:74:6a:be:
bb:2c:60:be:bd:22:cb:94:d8:b1:49:4e:33:bd:3f:db:e6:a8:
a4:71:a2:34:79:14:9e:5a:35:2d:f4:13:49:62:d0:a8:e3:b5:
97:0c:c0:26:cc:aa:17:98:77:b3:74:d8:34:7b:a0:a7:86:a0:
28:93:91:5c:95:f4:63:f1:b9:ff:7a:f0:e5:88:05:ef:ed:54:
65:10:28:5f:09:59:30:af:ed:a1:f6:75:e1:57:86:87:a6:33:
08:86:49:64:07:f2:6f:6c:69:af:ef:a1:be:21:78:c8:81:75:
94:ca:17:64:81:42:3a:41:4b:0c:7f:4a:2a:a7:5d:f5:78:81:
c7:55:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:13 2024 by rpki-client on console-fra.rpki-client.org