Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/b-D_6y0vcnFwxfTW6Eox91f898M.roa
File: b-D_6y0vcnFwxfTW6Eox91f898M.roa (raw, json)
Hash identifier: 4Vi9hGcRwhTH3dQ8MunJlvujJTtUQ8GDqU8jl99gPgI=
Subject key identifier: 6F:E0:FF:EB:2D:2F:72:71:70:C5:F4:D6:E8:4A:31:F7:57:FC:F7:C3
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 018EA07D39B3F1468F189FA2FF970CB63B6C
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/b-D_6y0vcnFwxfTW6Eox91f898M.roa
Signing time: Tue 02 Apr 2024 20:25:45 +0000
ROA not before: Tue 02 Apr 2024 20:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 62.171.192.0/18 maxlen: 24
185.192.228.0/22 maxlen: 24
194.154.0.0/19 maxlen: 24
194.238.32.0/19 maxlen: 24
194.238.64.0/19 maxlen: 24
213.18.192.0/18 maxlen: 24
217.177.0.0/18 maxlen: 24
217.177.64.0/19 maxlen: 24
217.179.0.0/16 maxlen: 24
217.179.0.0/17 maxlen: 24
217.179.192.0/18 maxlen: 24
217.180.0.0/17 maxlen: 24
217.180.0.0/18 maxlen: 24
217.181.0.0/17 maxlen: 24
217.181.0.0/18 maxlen: 24
217.181.64.0/19 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Apr 2024 14:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:7d:39:b3:f1:46:8f:18:9f:a2:ff:97:0c:b6:3b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 2 20:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe0ffeb2d2f727170c5f4d6e84a31f757fcf7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:c3:17:db:9d:a1:a3:d0:fc:6b:00:7d:2a:
b3:02:75:d9:83:39:22:a6:84:d4:0a:70:5f:d1:b3:
0e:5a:b3:1e:6f:e7:76:c2:76:10:90:9f:da:d8:49:
fa:c3:a7:36:ff:08:f5:fe:c9:cb:29:59:6a:12:ae:
23:f8:18:2d:a2:26:83:5b:6a:7c:2e:65:1a:18:aa:
50:55:dd:f7:57:9e:64:17:40:f2:b2:9d:9c:0a:6e:
98:63:d0:69:0f:6f:cd:0b:9d:11:48:dd:0a:0c:f6:
7f:4a:3b:ff:76:a6:87:c8:0a:bb:14:cc:70:17:40:
08:4f:23:6f:fc:ef:b4:c2:dc:a9:81:52:c1:5f:6b:
81:03:0a:97:77:c0:2d:34:c4:0d:ce:ec:88:bd:6f:
cf:2b:c9:3e:d2:ee:a1:f8:36:d3:72:80:b5:3d:32:
c3:81:4e:59:25:37:4f:fc:75:7a:99:72:31:fe:58:
e5:82:39:30:2c:d3:11:07:49:39:ab:40:6b:81:91:
50:a0:1e:bc:8b:5e:a8:8d:b7:5a:1c:fa:74:75:24:
70:8b:a8:7b:9c:0c:ac:93:86:65:56:c9:90:3f:2b:
24:e8:eb:2e:f9:a7:a4:44:4d:05:b7:9e:e4:e1:ce:
06:2e:e1:e0:6c:45:9c:da:d6:2b:03:93:d0:66:a0:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:FF:EB:2D:2F:72:71:70:C5:F4:D6:E8:4A:31:F7:57:FC:F7:C3
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/b-D_6y0vcnFwxfTW6Eox91f898M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0/18
185.192.228.0/22
194.154.0.0/19
194.238.32.0-194.238.95.255
213.18.192.0/18
217.177.0.0-217.177.95.255
217.179.0.0-217.180.127.255
217.181.0.0/17
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
02:10:76:dd:24:e2:aa:54:f4:ae:7d:a5:46:68:f5:16:d3:9c:
ab:ea:22:a3:0c:37:a7:8e:e0:85:94:fd:fb:d1:a6:c4:4a:29:
51:47:d0:28:2e:3d:02:0c:d3:df:5c:e5:24:c6:6f:94:70:fa:
94:7c:24:6d:b5:02:da:d6:40:cd:2d:93:40:6b:6f:cc:88:4a:
e2:7b:6a:4c:87:fe:d8:36:f0:bf:20:ed:62:dc:e2:bc:b2:a0:
b5:dd:67:ff:1c:17:2e:84:12:09:4e:bc:06:b0:c0:23:79:4d:
20:9f:e8:b7:d0:71:3f:ad:62:30:c3:d9:6c:cc:d4:ee:62:15:
83:cb:4a:78:f8:01:df:53:3f:6e:8f:ac:fd:58:17:7d:72:42:
51:04:31:83:d7:63:d2:f9:25:18:8b:b7:68:53:05:bb:66:1a:
2c:a5:6a:84:f4:06:64:81:73:02:b6:c1:1c:9b:a3:3a:3e:2e:
fd:4a:c0:c6:b2:45:0c:67:33:72:09:d5:53:ce:57:fa:42:48:
31:61:37:3e:78:bc:e9:66:21:07:cf:12:04:07:bb:c3:0a:3a:
04:57:53:59:79:6c:2e:35:7c:f6:3c:a1:25:88:6d:35:59:c4:
6e:34:51:03:e3:79:36:53:48:a3:ed:d8:a5:27:21:af:e1:5e:
58:c1:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:08 2024 by rpki-client on console-fra.rpki-client.org