Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6PVSmU6UnOXBdHe6473XsJzEUJg.roa
File: 6PVSmU6UnOXBdHe6473XsJzEUJg.roa (raw, json)
Hash identifier: 4OPFed3H8jMVAYOHPcaDDniaGCqfkBGe8TVKecEOQcg=
Subject key identifier: E8:F5:52:99:4E:94:9C:E5:C1:74:77:BA:E3:BD:D7:B0:9C:C4:50:98
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DDBAF12D76491A63FA8BFBD341B93
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6PVSmU6UnOXBdHe6473XsJzEUJg.roa
Signing time: Sun 01 Jan 2023 20:55:05 +0000
ROA not before: Sun 01 Jan 2023 20:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209484
IP address blocks: 176.113.70.0/24 maxlen: 24
176.113.68.0/24 maxlen: 24
176.113.71.0/24 maxlen: 24
176.113.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:db:af:12:d7:64:91:a6:3f:a8:bf:bd:34:1b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8f552994e949ce5c17477bae3bdd7b09cc45098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:d4:fa:d1:19:a1:61:53:06:94:f7:2f:29:
06:ae:2b:d7:12:6f:7e:d9:7a:a7:57:21:ad:8a:85:
0e:cc:a2:2c:eb:ff:88:7d:a3:65:48:01:e3:e0:25:
61:6f:85:9a:6b:dc:ea:e7:90:c6:63:17:87:ca:83:
05:a9:2f:44:1b:53:90:9c:e8:10:45:3c:07:b5:e8:
e0:a4:5c:8a:d6:9b:09:38:25:8d:71:6d:a2:8a:04:
3a:0f:0c:63:3a:d1:af:63:f9:bc:cf:f0:47:16:4d:
f6:bd:cc:3b:68:f8:9f:07:77:68:48:37:13:e1:60:
a4:2e:16:25:31:0d:18:ec:ca:36:35:d2:14:ec:2e:
fb:61:07:90:8c:e9:09:3d:aa:c0:ab:bd:61:6a:c3:
07:d6:4e:53:36:e2:5a:1a:30:f7:4c:5e:f4:5a:90:
69:0d:af:24:71:48:7c:e2:bd:d8:fb:43:42:88:3f:
07:a4:1e:93:81:24:ea:0e:6a:1d:33:90:cf:99:55:
a5:78:b7:ea:b4:02:15:79:8a:cc:90:4f:3d:c2:3c:
69:7a:8d:ae:a1:65:b2:93:a3:57:68:f2:05:c4:53:
3b:c5:e3:60:b8:71:0a:48:56:9a:4e:3c:0f:ef:a9:
3f:1e:70:29:1c:b8:ff:88:f0:e9:cb:a8:2b:60:56:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:52:99:4E:94:9C:E5:C1:74:77:BA:E3:BD:D7:B0:9C:C4:50:98
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6PVSmU6UnOXBdHe6473XsJzEUJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:35:6c:13:a6:cd:0a:0c:a2:ec:76:75:28:41:fe:0b:83:3b:
92:38:47:e5:a7:c0:11:99:e1:db:ce:3b:06:32:cb:45:1f:17:
3d:d3:4c:c2:f7:10:9c:df:0b:dc:14:db:97:2b:32:5d:0d:17:
1c:36:21:31:35:ed:3b:32:b1:5b:14:1e:a7:b0:63:91:f5:22:
4a:50:49:0a:fb:ca:c1:88:50:b0:bc:aa:f2:0a:10:49:5e:0d:
e7:29:33:82:22:c0:c3:54:d0:95:2d:c3:63:a3:5b:04:23:93:
70:19:0f:66:d2:72:b2:5a:e8:85:23:ff:76:e9:14:94:0f:55:
07:9b:6b:e3:31:57:d7:df:dd:c0:25:82:c4:82:52:56:fb:20:
f0:51:5f:9c:51:d0:0b:3d:08:4c:21:d7:7d:dc:4f:6d:ec:9e:
d3:b6:2c:36:a6:bf:d5:9e:f1:06:ac:59:0f:e9:7d:44:ff:f1:
6a:77:46:1d:63:8c:14:d9:92:11:72:6e:38:0f:b1:9d:c0:ab:
f0:aa:13:06:c2:5e:95:67:6d:f6:a9:c6:16:1a:05:42:b8:4b:
fb:e4:56:d7:b5:56:62:ad:82:29:eb:29:78:16:fa:ce:9f:0d:
43:89:bc:42:c8:68:fe:9b:64:c2:52:0e:5e:f6:88:c3:d3:5d:
85:7d:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:42 2024 by rpki-client on console-ams.rpki-client.org