Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/6cK_pr-aU_PRcSQQGkJ7xWNTgrY.roa
File: 6cK_pr-aU_PRcSQQGkJ7xWNTgrY.roa (raw, json)
Hash identifier: GBtC2uDm2mQluMHG38710TrIJDTTpyxcyImiw7ldNks=
Subject key identifier: E9:C2:BF:A6:BF:9A:53:F3:D1:71:24:10:1A:42:7B:C5:63:53:82:B6
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D396E97937A442F25081B35F02094
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/6cK_pr-aU_PRcSQQGkJ7xWNTgrY.roa
Signing time: Sun 01 Jan 2023 13:54:58 +0000
ROA not before: Sun 01 Jan 2023 13:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 91.216.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:39:6e:97:93:7a:44:2f:25:08:1b:35:f0:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c2bfa6bf9a53f3d17124101a427bc5635382b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:9a:ba:9d:b2:48:94:4d:2c:46:e9:78:58:
4f:e7:f1:7d:eb:be:be:ae:a8:84:b2:44:a3:08:b7:
5f:24:81:14:d1:10:ee:f0:d5:2a:fd:4a:4a:18:a3:
dc:52:67:02:24:7d:30:cb:eb:62:ac:ab:8b:9f:e7:
a0:53:5c:c9:3c:59:29:0c:1e:12:31:01:bc:2c:bb:
42:5f:9e:08:99:55:47:97:b7:f8:30:8b:c0:f5:53:
1b:16:e6:67:0d:9a:50:48:b6:73:44:84:17:97:69:
be:ad:b8:44:fe:79:d8:5e:8b:5a:dd:5c:db:2c:63:
10:f4:5a:e8:29:76:be:b6:39:d6:ae:85:97:6d:1e:
b2:1e:be:d2:8b:0c:fd:dd:89:70:54:88:fa:39:88:
e6:bf:9f:2b:1d:63:09:85:96:ca:df:fe:c2:bf:eb:
97:2e:6f:5c:c7:f5:2f:f6:37:d7:a2:b4:f3:fc:23:
88:6e:7f:a0:02:96:8c:b2:a8:39:b1:dc:83:7c:f1:
82:5c:d1:3f:a4:5e:19:47:45:7f:23:c5:b4:4a:d7:
49:70:47:1a:3e:5d:19:6f:41:a0:ab:7b:6f:77:a5:
f6:26:ee:57:da:5b:09:a4:77:ee:9f:da:b1:aa:82:
08:8e:a4:0c:d6:a0:57:71:bd:40:d3:c9:d3:32:5c:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:BF:A6:BF:9A:53:F3:D1:71:24:10:1A:42:7B:C5:63:53:82:B6
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/6cK_pr-aU_PRcSQQGkJ7xWNTgrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
39:af:52:47:56:d9:d1:7a:30:e8:16:a2:3e:8e:6e:90:08:b5:
9d:93:ce:ca:71:e5:61:18:5c:f4:c9:d1:68:3e:a1:d1:cf:e8:
38:c2:fe:e0:c7:4e:99:7d:3a:5a:cd:5d:f9:8e:bf:6d:1f:4f:
9d:b5:1d:41:bd:6c:f6:e5:4e:17:73:a5:f6:e5:f4:45:1d:68:
ec:f5:6f:61:8f:97:1b:0e:8b:bc:99:02:c2:a0:17:6c:78:ef:
ae:6f:67:f2:9b:da:90:cc:d1:21:e5:aa:6d:3a:d3:89:15:f9:
84:22:ea:cd:19:9e:ce:1d:b1:84:3b:85:54:98:78:cf:4e:d7:
29:dc:b0:10:a7:42:99:84:bd:71:c7:a8:12:47:06:52:68:33:
5c:e5:76:49:c7:6d:26:f3:92:bb:b3:69:5f:5c:fc:99:4c:a2:
5e:44:81:d4:f8:b4:48:79:c9:2e:01:ad:a3:be:14:a6:98:a7:
4a:59:93:30:d0:35:30:0d:0a:f2:4e:7b:f7:a4:19:94:07:e4:
4c:9c:46:df:dc:16:61:79:ad:da:f3:04:c8:23:a4:0d:e8:c9:
3e:a1:6d:1e:23:25:a4:6b:2b:94:51:57:3e:7f:fb:b7:8a:a8:
19:b8:d9:a2:6a:00:f7:c4:5b:30:c7:a2:4f:7c:56:11:0f:5e:
56:21:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org