Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/6bXxXgppM9Qe_zRQcaPmITAqIa0.roa
File: 6bXxXgppM9Qe_zRQcaPmITAqIa0.roa (raw, json)
Hash identifier: P98FmvaQ+BQVTDTqOYCCPDgwe91z+GoNvG0jhvAYTGw=
Subject key identifier: E9:B5:F1:5E:0A:69:33:D4:1E:FF:34:50:71:A3:E6:21:30:2A:21:AD
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 01856CCAFCDAE5C81CDF3706CC3617C5B722
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/6bXxXgppM9Qe_zRQcaPmITAqIa0.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.93.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fc:da:e5:c8:1c:df:37:06:cc:36:17:c5:b7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b5f15e0a6933d41eff345071a3e621302a21ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:2b:64:7d:fd:ec:e3:4b:59:1d:27:b7:9b:
cd:96:4b:59:b4:01:69:dd:9a:56:94:b1:36:8c:e0:
a3:b8:e0:ff:94:83:43:42:0a:65:29:5b:08:b2:a1:
58:a4:5c:30:89:a7:d0:f2:82:96:ae:20:c1:15:f5:
7f:71:37:70:b8:d7:ff:99:d8:b2:30:6d:02:03:78:
d3:66:05:2a:85:7c:fc:c8:57:a3:dd:3b:93:57:7d:
b0:60:ef:3c:cd:45:89:09:e9:90:88:26:70:dd:71:
c1:73:e3:9d:fe:b7:a1:66:64:14:19:4d:e8:a9:34:
52:27:9b:77:34:d2:36:de:82:97:3a:40:0c:2b:20:
b5:3f:fb:e4:69:59:a4:7d:38:e0:c5:52:17:74:60:
59:ce:25:b5:85:43:f8:63:ab:f4:6e:19:90:b8:0b:
4b:ac:33:74:9d:39:59:45:5a:44:63:12:8e:06:81:
fe:d2:fa:50:10:55:76:f1:56:4e:6d:99:25:4a:10:
85:f6:df:fc:c1:49:9c:16:c7:c9:d6:89:c7:df:66:
55:ca:8d:52:0b:37:05:27:01:a8:79:d3:14:59:1d:
4f:a7:7c:37:c0:56:67:09:69:cc:56:be:08:ca:cb:
da:0f:16:a9:18:96:20:84:99:22:a5:b2:b3:bf:ef:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B5:F1:5E:0A:69:33:D4:1E:FF:34:50:71:A3:E6:21:30:2A:21:AD
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/6bXxXgppM9Qe_zRQcaPmITAqIa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
33:db:ac:da:6c:7f:df:84:5b:33:12:05:a0:b1:20:77:a1:3e:
48:eb:1f:73:bf:9f:ed:fb:94:2c:cf:7a:b8:3d:7d:1e:49:33:
2d:69:fa:bb:a2:d1:08:34:2f:c4:ec:41:03:16:c6:c4:ec:25:
4e:50:30:e0:37:5e:4f:9b:59:e4:ce:e6:19:b0:7b:34:f3:13:
85:8e:d4:d6:b0:7e:51:18:4a:ba:c8:f1:d9:b3:fa:24:15:93:
db:48:cc:f9:3f:e8:7a:67:96:11:1f:d1:ce:e6:14:1b:63:e7:
88:84:21:df:e7:dc:99:39:ca:f4:36:0b:6d:81:02:77:98:b6:
43:5d:24:96:13:00:8c:20:fd:56:23:7c:fd:cd:b2:8e:f0:e8:
93:5e:d2:7e:21:37:78:e5:fa:d2:3a:42:6d:9f:87:d1:37:e1:
40:4a:37:7c:43:e3:47:3b:37:ba:6d:53:66:25:66:a2:50:57:
a6:3c:84:05:4b:3a:93:d9:4c:11:e9:d1:af:0d:b7:ca:b3:41:
a2:c5:7a:2b:05:f6:89:00:f2:98:3f:f2:08:41:c3:47:6e:8b:
0c:05:e5:67:26:48:38:60:7c:aa:10:b7:db:53:44:f1:91:96:
9c:f6:6a:b7:0f:13:bd:17:14:c3:98:88:d8:1e:13:01:2d:0d:
db:28:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org