Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/6H5YzNsbrdSz_Pvl0aq6Xmp-rOU.roa
File: 6H5YzNsbrdSz_Pvl0aq6Xmp-rOU.roa (raw, json)
Hash identifier: gmEnOfuvF+Ps4CrBMCYgn3xOLIIZ5Fc46YWz8m+y0qw=
Subject key identifier: E8:7E:58:CC:DB:1B:AD:D4:B3:FC:FB:E5:D1:AA:BA:5E:6A:7E:AC:E5
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188BF93077224445BA5B6E0F7C406032B78
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/6H5YzNsbrdSz_Pvl0aq6Xmp-rOU.roa
Signing time: Thu 15 Jun 2023 15:01:03 +0000
ROA not before: Thu 15 Jun 2023 15:01:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
194.190.146.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
194.85.16.0/24 maxlen: 24
193.232.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 15 Jun 2023 15:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:93:07:72:24:44:5b:a5:b6:e0:f7:c4:06:03:2b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 15 15:01:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87e58ccdb1badd4b3fcfbe5d1aaba5e6a7eace5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:f1:66:f0:f0:e4:4e:8f:61:ec:d2:79:5d:
ba:4f:ab:b3:fe:bd:63:e9:60:6b:aa:2c:11:33:2f:
ff:c8:28:2a:70:c1:d7:89:46:d3:82:85:67:84:e1:
94:71:05:34:1c:20:43:61:be:d0:40:b6:ba:45:9e:
fd:89:7c:d8:a0:13:71:bc:55:99:00:c1:a3:74:0f:
c9:9e:ef:ac:65:51:0d:d6:63:04:b8:83:89:6b:13:
aa:d3:ea:76:d6:25:b8:1c:d0:1e:d8:b4:8c:9b:6a:
ae:7e:8f:cf:a2:85:fa:4c:28:19:53:48:51:87:ae:
27:b1:71:e1:31:38:2f:cc:07:a2:20:59:74:96:6c:
49:c5:ff:16:07:ae:a2:5e:11:f6:b5:c3:a9:fc:e3:
37:50:04:3a:c9:b4:0f:7a:3b:0d:dd:64:e7:c1:67:
f7:d0:92:bf:9b:4e:9d:01:56:22:9a:0a:7d:e7:f0:
f8:ef:84:04:05:74:f6:5f:6c:db:35:e8:82:8d:c5:
3b:42:84:80:1a:3e:8d:2b:13:e8:a5:f3:df:82:21:
a6:92:90:71:6d:95:9b:ee:33:55:3c:93:71:06:07:
67:aa:a0:35:b6:14:2c:98:4e:e8:c7:98:5d:06:36:
9c:ce:3c:4d:db:79:0d:2d:5f:e4:2f:66:3e:53:55:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7E:58:CC:DB:1B:AD:D4:B3:FC:FB:E5:D1:AA:BA:5E:6A:7E:AC:E5
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/6H5YzNsbrdSz_Pvl0aq6Xmp-rOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
193.232.226.0/23
194.85.16.0/24
194.190.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b2:99:dc:b2:03:f4:73:5b:07:a3:76:99:c5:b3:b7:35:ae:
60:95:89:ae:a0:6c:e4:ed:06:e1:b8:d6:82:a5:3d:14:9b:d9:
fc:c3:ee:04:50:e7:20:6f:31:71:47:a3:74:e7:6a:56:df:9b:
6a:ad:70:88:0b:d3:cd:07:3b:72:fd:dc:8b:a5:1d:64:73:29:
d0:ea:45:76:7e:8b:06:d9:bf:84:af:06:43:23:45:a8:93:82:
63:95:ec:fa:70:54:68:92:63:67:86:e4:3f:fb:c7:9e:44:d3:
64:2c:32:66:0c:48:37:df:d3:fc:f6:6b:07:28:8d:8f:63:c5:
92:74:80:d8:c8:9d:55:01:b1:ae:4a:2d:e5:b9:c3:22:d4:bc:
97:e5:33:ff:12:c9:34:f4:d8:b6:12:00:a6:47:a0:ab:78:3c:
68:92:27:dd:2a:78:85:a0:24:63:56:1b:03:f3:12:b8:f3:41:
32:e9:62:99:fb:92:ad:dd:bc:aa:4a:1a:21:a5:39:be:ce:19:
28:c2:65:b4:98:6b:bd:f6:32:2a:18:1a:af:89:fd:bf:ca:06:
d1:b4:59:22:e7:6e:c9:61:40:90:86:84:24:54:94:8d:50:7c:
c6:b2:7a:02:5b:18:e0:ff:2a:4c:f7:0f:75:3b:c0:6d:87:26:
ed:5a:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org