Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/6DX8rw41vGttG1x31vPjMjihrmg.roa
File: 6DX8rw41vGttG1x31vPjMjihrmg.roa (raw, json)
Hash identifier: STI+Ms29P7HGaUXirrevQ/mriHz7tB4pQtaKKBD0p7g=
Subject key identifier: E8:35:FC:AF:0E:35:BC:6B:6D:1B:5C:77:D6:F3:E3:32:38:A1:AE:68
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018AD6D39DAAF5F5D58449FC75CD073B248C
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/6DX8rw41vGttG1x31vPjMjihrmg.roa
Signing time: Wed 27 Sep 2023 13:28:27 +0000
ROA not before: Wed 27 Sep 2023 13:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 77.233.128.0/19 maxlen: 19
62.56.0.0/17 maxlen: 17
80.176.0.0/15 maxlen: 15
83.104.0.0/14 maxlen: 14
212.225.0.0/17 maxlen: 17
62.49.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:d3:9d:aa:f5:f5:d5:84:49:fc:75:cd:07:3b:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Sep 27 13:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e835fcaf0e35bc6b6d1b5c77d6f3e33238a1ae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:da:78:7e:02:92:65:a0:e5:01:3a:c6:6e:
8a:02:44:fe:40:ed:96:8c:9a:96:24:27:19:f6:0a:
1a:e3:28:53:68:7e:3d:08:0c:96:8f:7b:40:56:9e:
e2:75:fc:8e:35:00:b8:2b:cf:c7:e9:fc:41:26:ff:
d6:a6:cd:9e:03:69:59:f7:15:1b:8b:32:ae:6e:fa:
1c:f7:4c:6d:81:1c:43:08:36:d3:75:f3:17:2e:4d:
37:92:5f:e0:b5:0f:2e:0c:e5:12:a0:16:9e:2b:31:
4f:76:c0:37:b9:7a:c7:71:34:aa:98:fc:1e:fb:0f:
5c:18:d0:13:3b:33:6c:bc:04:38:1a:0c:ff:8e:6e:
9d:43:1c:46:f7:d0:39:93:0e:06:ea:aa:4f:e2:a3:
31:64:d1:66:47:de:bf:6a:51:9a:b1:a9:e8:e0:e8:
1c:6e:2f:f2:58:24:1f:36:54:d5:f2:a5:6d:51:e1:
8c:c7:d4:74:7c:f0:f2:4b:02:64:17:af:c9:ee:fb:
60:c2:86:c6:90:30:9d:a4:d9:c0:a8:fe:87:28:db:
1e:40:64:3f:36:d7:6f:72:f8:e6:ec:04:68:d4:69:
99:00:ad:97:58:bd:0b:c2:3b:e3:2e:c9:3a:d9:6a:
ad:4b:05:e4:23:14:ca:11:cb:45:3e:bd:2a:e8:47:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:FC:AF:0E:35:BC:6B:6D:1B:5C:77:D6:F3:E3:32:38:A1:AE:68
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/6DX8rw41vGttG1x31vPjMjihrmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
212.225.0.0/17
Signature Algorithm: sha256WithRSAEncryption
be:73:47:66:35:62:5a:0d:9f:75:25:16:6e:84:ec:b6:fe:65:
b4:94:97:ef:f4:8a:75:0d:6b:b3:8f:ae:f3:93:8c:12:da:9b:
5a:82:17:92:09:fd:36:db:30:c7:d4:62:c2:f2:21:00:d0:ce:
4b:fe:e9:bb:86:1e:c6:08:35:65:e0:79:71:d4:05:57:fb:14:
d7:66:57:97:72:44:92:1e:05:18:3b:70:b3:a6:d1:f7:3c:20:
92:31:32:12:65:eb:7f:f4:b9:11:5b:dd:b0:77:96:51:f0:bd:
4a:69:af:73:3f:04:ca:72:81:18:2a:56:32:89:c9:18:5f:1d:
d6:79:52:33:d8:fb:eb:1c:da:cd:18:33:93:d6:72:70:62:a5:
92:e7:6a:07:b4:5c:85:d5:58:bd:91:e7:14:8a:c4:f2:31:16:
d3:cc:8e:be:ac:e3:d3:b5:06:20:5e:e7:b8:ec:86:bc:19:14:
19:af:22:70:91:63:e6:75:d0:86:a4:f1:91:5a:f0:9f:40:a1:
3b:0c:d9:0b:19:36:49:45:6f:3f:7d:8b:31:50:6a:28:df:5a:
21:a2:71:8b:bd:18:94:88:e8:b9:f0:f9:83:dc:56:1b:f1:87:
15:53:4c:df:69:17:44:92:ba:c4:16:64:a8:fd:6d:47:d0:36:
a3:25:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 15:20:05 2023 by rpki-client on console-fra.rpki-client.org