Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/nG6hbK08QZsu7ZXKy-2n1TJvdQo.roa
File: nG6hbK08QZsu7ZXKy-2n1TJvdQo.roa (raw, json)
Hash identifier: qSqCnHpedNpS+4HL+0Km2izqV/dteTeFdnqd/bxOBFY=
Subject key identifier: 9C:6E:A1:6C:AD:3C:41:9B:2E:ED:95:CA:CB:ED:A7:D5:32:6F:75:0A
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 01856FF064B7232D4190EDF629E22A3F64A6
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/nG6hbK08QZsu7ZXKy-2n1TJvdQo.roa
Signing time: Mon 02 Jan 2023 00:45:03 +0000
ROA not before: Mon 02 Jan 2023 00:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205111
IP address blocks: 217.163.72.0/24 maxlen: 24
213.244.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:64:b7:23:2d:41:90:ed:f6:29:e2:2a:3f:64:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 00:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6ea16cad3c419b2eed95cacbeda7d5326f750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:12:cf:9e:cf:0b:39:be:34:b7:8b:d4:4a:
d6:7f:e8:60:49:6d:65:b9:0d:e0:aa:7b:2a:3e:63:
52:67:01:51:7c:11:16:23:e5:b6:b6:fd:43:1e:3e:
50:00:82:3a:d6:46:6f:fb:cf:20:4d:f7:dd:99:92:
90:61:37:92:89:b1:6d:97:3e:55:8b:6c:45:95:0e:
4e:d9:4c:3c:2d:ba:a8:c1:b8:22:bd:d1:d6:e1:72:
d6:51:1a:38:4f:d0:46:94:20:2a:ae:cc:40:34:8c:
8d:97:2e:6b:91:6b:95:7e:14:d8:f7:cf:95:94:63:
8e:ed:a7:7d:9b:bf:b2:65:06:fa:e4:35:af:4e:4b:
5e:4d:86:de:63:a9:e6:1b:8f:71:c1:18:32:30:19:
35:3a:bf:c9:39:da:82:f0:5c:e2:bb:c6:f2:27:9b:
ca:a9:0d:f6:fb:66:7b:56:a3:37:06:86:d5:2a:a4:
ce:b9:25:b1:c9:6f:42:60:b0:a9:85:3b:cc:e7:a3:
ad:50:ef:3e:1d:f6:0b:f3:b5:0b:69:50:ab:12:9a:
08:7e:61:17:24:fb:68:59:8b:13:42:86:68:35:15:
28:ed:d3:02:4b:4d:d7:b9:ea:7d:68:e0:71:ff:9d:
e1:4c:2b:98:3c:c8:c8:f4:5c:a5:e0:a0:2b:69:e4:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:A1:6C:AD:3C:41:9B:2E:ED:95:CA:CB:ED:A7:D5:32:6F:75:0A
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/nG6hbK08QZsu7ZXKy-2n1TJvdQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.146.0/24
217.163.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:89:54:b7:d6:49:f6:e2:4a:d6:69:a3:18:24:74:e9:2c:06:
34:50:45:06:d6:a6:80:a1:64:cc:19:94:10:c7:fa:0b:0e:37:
04:a5:c4:12:11:a5:56:3f:a4:3e:58:a1:24:91:29:cd:31:7e:
6e:ef:44:5e:28:87:9c:7f:4e:85:6f:25:63:c4:12:6c:9d:2d:
49:b6:74:22:d2:1c:f5:bd:b6:26:b7:53:f6:27:ef:9a:ea:3f:
76:37:84:38:fa:0c:47:50:ca:4c:0d:3d:45:54:e7:79:58:37:
4a:2f:01:87:b6:f5:40:24:9b:a0:bc:a5:82:e6:8a:af:e9:d4:
ed:46:f2:31:81:09:23:3d:75:13:94:92:7f:4a:a9:d5:6f:da:
6e:02:be:04:65:47:ba:e5:af:4d:9c:bd:19:57:dd:2f:c4:11:
22:7f:37:38:c4:26:35:fe:e8:e9:0e:dc:4f:d0:91:2d:08:f6:
cd:52:eb:43:78:35:f2:32:60:93:fb:f3:64:cc:eb:3a:18:18:
3d:89:37:6a:cf:07:62:17:75:2f:be:c1:37:31:6c:68:08:38:
dd:59:f2:f3:75:e7:bd:f9:45:92:43:e1:cd:34:b1:f9:ef:69:
6f:f5:13:d8:75:de:84:fe:aa:fb:6a:7b:c9:32:b8:2e:97:98:
fe:15:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org