Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6WLI2v9qjV_B8SZxF0p-qJRGyVQ.roa
File: 6WLI2v9qjV_B8SZxF0p-qJRGyVQ.roa (raw, json)
Hash identifier: KbBqJWbIJ7RcbViqJKFntpIsi2so2JYo7ijCCEUVbL0=
Subject key identifier: E9:62:C8:DA:FF:6A:8D:5F:C1:F1:26:71:17:4A:7E:A8:94:46:C9:54
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3A2ABEE01ACFD3EE60A77B50028B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6WLI2v9qjV_B8SZxF0p-qJRGyVQ.roa
Signing time: Sun 01 Jan 2023 03:05:04 +0000
ROA not before: Sun 01 Jan 2023 03:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199674
IP address blocks: 37.230.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 11:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3a:2a:be:e0:1a:cf:d3:ee:60:a7:7b:50:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e962c8daff6a8d5fc1f12671174a7ea89446c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:13:22:d4:63:d3:4b:b3:dc:8c:1f:44:9e:
bd:2f:59:30:e1:91:24:fe:7e:dc:b1:e9:f2:9e:d2:
50:27:eb:da:d7:0c:9d:f0:b0:c9:7b:2e:60:13:1e:
13:cd:6f:2c:11:79:40:5e:4c:68:68:2e:fd:b0:ee:
01:e7:67:ed:da:0a:3a:b6:69:8a:fa:60:01:5e:ef:
fc:4a:f3:56:e6:29:0d:ce:68:ea:64:80:ac:a9:8b:
1b:8d:5c:41:fc:7c:c6:da:c8:41:1f:52:c8:5a:da:
68:e3:f0:05:60:69:c2:c5:cb:e9:ac:60:e9:2b:15:
af:19:d0:b7:46:20:45:c2:bd:81:51:66:15:a7:8d:
79:36:2b:4d:f3:b6:b7:44:14:b0:43:f1:f6:63:0c:
ae:79:4a:66:04:42:80:6c:67:40:f8:2d:e3:49:49:
0b:9a:5a:99:ce:02:8f:98:b4:01:09:c8:57:fa:4d:
b8:d6:b1:b3:68:07:a8:82:a6:4f:19:56:40:63:da:
60:f2:4f:f2:92:52:72:81:66:54:9b:e3:5c:03:67:
ab:01:b6:61:7b:f7:b6:d1:dd:61:a9:83:50:cb:17:
01:f4:b0:41:2d:c9:b2:99:71:31:32:f6:83:6b:e4:
44:b0:75:60:05:c0:44:f1:a1:95:b0:41:57:40:85:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:C8:DA:FF:6A:8D:5F:C1:F1:26:71:17:4A:7E:A8:94:46:C9:54
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6WLI2v9qjV_B8SZxF0p-qJRGyVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.254.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f6:f6:d1:2a:b5:44:c5:29:81:13:c7:5e:28:f3:27:55:d9:
c5:4c:6b:4b:3f:b5:15:3f:65:e0:a0:98:70:38:19:27:06:12:
26:6e:aa:5b:08:c5:db:00:47:d4:c6:d1:06:10:49:96:db:9b:
38:3c:d8:5d:51:37:44:22:2c:6f:6e:9f:a8:32:63:25:d2:26:
3a:e2:f7:e2:a9:2a:f1:c7:a3:47:a4:50:1a:14:54:75:ee:3a:
e8:f5:f1:c3:da:1d:e9:6b:66:b6:c0:9d:e9:d4:95:a5:fe:12:
c0:c7:54:6e:45:4c:0a:07:43:79:36:dc:f4:9e:09:90:c6:be:
8f:4b:35:3e:0b:35:ef:a0:af:14:43:17:0d:90:1a:19:5e:e7:
bf:d7:64:9a:5b:5e:bb:a4:c0:4d:a0:9d:6b:7d:1c:19:b7:6a:
fa:fd:c6:4d:5e:d7:d4:81:b4:bb:92:eb:d3:67:4f:17:4c:e0:
b9:6c:8a:34:d4:da:9b:4c:79:b0:3f:70:2d:0c:21:ff:6f:05:
27:ee:b5:f2:8d:d9:cc:fd:8a:84:55:d4:e6:2f:63:e7:4a:71:
4b:d3:7f:02:86:5d:4b:74:e5:57:3d:54:a1:9a:4f:f0:5d:77:
c0:f7:16:80:90:e2:91:2a:53:ad:5a:7b:6e:31:cd:17:9c:52:
4e:32:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org