Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/w1WnTAWIYu7A67b0_Yt2XRMPffo.roa
File: w1WnTAWIYu7A67b0_Yt2XRMPffo.roa (raw, json)
Hash identifier: 0Z5ZEMx3W7oP/YGyzjXcfsN1iyEHVWIxEygItILZBgg=
Subject key identifier: C3:55:A7:4C:05:88:62:EE:C0:EB:B6:F4:FD:8B:76:5D:13:0F:7D:FA
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 018A03B222C5C3DAEBCA52947BE8492DB2C1
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/w1WnTAWIYu7A67b0_Yt2XRMPffo.roa
Signing time: Thu 17 Aug 2023 13:32:00 +0000
ROA not before: Thu 17 Aug 2023 13:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204465
IP address blocks: 94.199.6.0/24 maxlen: 24
2a13:4600::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:b2:22:c5:c3:da:eb:ca:52:94:7b:e8:49:2d:b2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Aug 17 13:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c355a74c058862eec0ebb6f4fd8b765d130f7dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:c6:da:55:23:61:41:b0:29:79:4c:9c:df:
a6:00:0d:02:82:1b:11:79:92:08:8c:9c:b2:a5:84:
d2:0a:5e:56:80:5d:68:23:1c:01:d0:26:91:e5:16:
c6:96:b9:98:23:2f:35:c0:2b:1c:e9:66:20:a3:88:
3f:9b:92:94:84:55:74:61:a0:87:98:95:16:ab:43:
db:3c:10:2b:53:ec:e0:4e:f2:e8:d8:44:bc:0f:b5:
da:cc:bd:2d:db:5f:10:a9:8d:1c:4d:ee:ef:d0:72:
23:d6:05:11:93:b6:49:9b:c5:83:21:d7:3f:cc:cf:
dc:6a:1f:67:d0:d5:c2:ef:78:28:a1:72:90:2e:ee:
60:01:bb:f8:90:92:ef:4f:ea:73:0d:8b:4e:25:23:
4d:e1:fe:c0:53:fa:dd:ac:28:1f:9a:14:a6:68:2d:
29:ef:ac:f5:4c:2b:40:6f:8b:ca:1f:67:96:62:d9:
fb:9a:a6:14:3e:80:25:58:7b:ed:97:66:f4:f1:e8:
90:5a:a4:dd:77:88:d3:13:f4:13:08:35:40:66:7b:
6a:12:f2:23:c7:dd:3f:18:fa:41:d5:f5:3f:39:f4:
b7:60:84:bb:13:24:69:4f:4b:ab:5a:19:7e:e5:15:
5f:7b:db:bb:9b:21:46:a9:8a:7f:2b:45:43:d0:2b:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:A7:4C:05:88:62:EE:C0:EB:B6:F4:FD:8B:76:5D:13:0F:7D:FA
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/w1WnTAWIYu7A67b0_Yt2XRMPffo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.6.0/24
IPv6:
2a13:4600::/29
Signature Algorithm: sha256WithRSAEncryption
35:00:74:89:c3:23:10:b3:9a:a8:c1:79:3a:e4:86:f1:bc:3e:
41:8f:c6:c7:0e:f9:be:d7:8d:6b:52:08:93:98:ea:5f:36:b2:
3f:96:a8:e6:39:76:ca:2e:3e:08:f4:5a:54:e3:78:78:26:7b:
30:79:26:5c:f1:a5:08:ec:ad:5e:32:b7:5a:69:66:62:69:f4:
7a:ef:b4:13:6e:9b:a9:17:b4:64:db:66:39:7b:1b:96:2e:46:
84:ae:ac:10:00:80:8c:8a:18:bd:4c:68:7c:87:b3:ea:bd:82:
29:c5:88:c9:7a:20:32:cd:af:f0:12:75:40:14:4e:7e:f3:70:
11:ec:52:da:4f:bd:36:dc:dd:99:5d:8d:d9:fe:96:3b:13:dc:
a2:1a:33:5c:a3:c0:0c:70:3c:6a:e8:92:b8:24:49:3e:d9:33:
53:d4:ee:dc:87:eb:ad:a4:3b:3f:19:ed:b3:e3:06:4c:a1:35:
c3:ed:22:2a:b7:33:2f:f3:18:f2:e1:ad:fd:c0:17:06:2a:19:
d0:40:8b:c5:e2:0b:7a:ac:2d:d2:40:d7:b5:b8:2d:fe:cd:47:
97:7e:29:9a:4e:d7:0c:25:05:a1:96:f5:c6:b5:37:0c:78:74:
25:bc:dd:16:8d:96:11:0e:02:15:8b:c9:2f:1d:5a:eb:15:c1:
42:c3:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org