Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/6vBXd8HOWGQpRBSNhRUuqVfXKNc.roa
File: 6vBXd8HOWGQpRBSNhRUuqVfXKNc.roa (raw, json)
Hash identifier: Lw7wYCb/4i27VZjwPlvflF+sN40Nv/EzMeK7XmXjrC4=
Subject key identifier: EA:F0:57:77:C1:CE:58:64:29:44:14:8D:85:15:2E:A9:57:D7:28:D7
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018D65A65658E392001C3F405284D76748CA
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/6vBXd8HOWGQpRBSNhRUuqVfXKNc.roa
Signing time: Thu 01 Feb 2024 17:10:16 +0000
ROA not before: Thu 01 Feb 2024 17:10:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12513
IP address blocks: 194.46.32.0/19 maxlen: 19
194.46.64.0/19 maxlen: 19
194.46.80.0/20 maxlen: 20
2a02:c2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:a6:56:58:e3:92:00:1c:3f:40:52:84:d7:67:48:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Feb 1 17:10:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf05777c1ce58642944148d85152ea957d728d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:da:53:ae:e0:99:13:89:3e:e1:31:62:9e:
c8:31:0e:10:4d:6c:50:1d:47:7f:8e:dd:d7:9a:cf:
90:da:75:8a:e3:66:7f:14:75:f1:16:39:e9:3f:e4:
cf:5a:6a:5f:a6:5e:98:74:a1:92:e4:c8:58:6f:55:
53:48:b3:27:cd:d1:c0:3d:58:7c:36:78:14:f0:21:
ef:24:38:b8:70:2e:b7:94:bd:af:12:4b:ea:1d:37:
ab:3e:4e:2b:f5:41:da:4e:f5:61:9d:8c:52:6c:24:
26:8d:c4:74:3f:2a:22:41:6a:5c:5e:69:09:e8:2d:
5c:8a:d4:ff:00:e3:f3:fc:54:39:d6:96:fc:b3:9a:
35:fe:84:56:18:d5:28:f2:fd:36:13:0e:b6:83:62:
da:68:ba:14:5d:84:65:0c:89:e2:fb:60:75:1f:4b:
aa:67:ca:05:98:fd:d4:e9:fa:17:6b:60:1f:bb:32:
af:10:f7:c6:99:51:5c:99:fb:26:b2:48:64:a6:50:
6c:c3:08:be:15:45:10:f3:fc:4f:46:78:63:73:a4:
91:55:08:12:34:23:1b:0f:ef:91:c5:81:23:ac:f9:
c4:f5:a8:bb:fb:5f:30:b4:0c:20:7f:36:18:15:87:
6a:cf:41:2e:b4:24:81:88:c9:e3:bf:8c:fc:95:fc:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:57:77:C1:CE:58:64:29:44:14:8D:85:15:2E:A9:57:D7:28:D7
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/6vBXd8HOWGQpRBSNhRUuqVfXKNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.32.0-194.46.95.255
IPv6:
2a02:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:9b:43:ad:ae:99:06:b5:5c:d0:c1:8e:87:69:f3:90:a9:9d:
5b:75:6e:88:bb:32:65:97:d1:f3:10:c9:1f:d0:b0:60:1f:d7:
9c:95:f9:58:a6:b8:2b:b6:59:ba:fe:f1:42:9e:b2:30:61:27:
96:0c:9b:de:04:db:db:f2:2d:43:99:85:74:bb:6d:fb:17:7c:
de:10:a9:b0:b1:8a:c9:78:e8:87:bd:71:63:0e:38:bc:34:f5:
0b:bd:84:fa:8a:46:ca:f7:d8:e4:f5:41:11:ca:cc:44:73:ec:
69:fc:3a:17:44:f7:13:1a:ac:d6:5d:cc:d9:52:83:e7:3e:0b:
cb:8e:46:9f:d2:2c:e9:35:45:85:90:5f:c0:58:2a:25:2f:26:
9e:b9:83:7b:8f:54:69:ea:ca:b3:f7:e3:e8:6e:57:f7:c0:db:
9b:d2:91:ce:1d:86:29:2f:ce:6c:89:5b:cb:db:c5:5c:33:ae:
7e:2f:9e:46:ac:0c:8e:41:8d:72:0e:84:13:ab:ef:3c:38:c3:
c8:6f:95:df:16:d7:fe:ec:ea:44:2b:1f:2a:b9:3b:15:9b:90:
50:5d:b1:73:98:f0:92:5f:a7:83:f0:17:21:7d:cd:d1:8f:ed:
61:d0:0f:18:56:2f:38:93:ee:16:b8:f3:08:9d:52:14:fc:9b:
09:7e:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:37 2024 by rpki-client on console-ams.rpki-client.org