Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/6jSMJtVDlws8lbXZW6AsWpUXsys.roa
File: 6jSMJtVDlws8lbXZW6AsWpUXsys.roa (raw, json)
Hash identifier: weGHUQPwa54/u6+O9FPgvhSk6gPg6kHREUEq6lSINpM=
Subject key identifier: EA:34:8C:26:D5:43:97:0B:3C:95:B5:D9:5B:A0:2C:5A:95:17:B3:2B
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 01866E89E8AF5AC1D96CBAF350F36D915B24
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/6jSMJtVDlws8lbXZW6AsWpUXsys.roa
Signing time: Mon 20 Feb 2023 11:16:17 +0000
ROA not before: Mon 20 Feb 2023 11:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 78.136.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:89:e8:af:5a:c1:d9:6c:ba:f3:50:f3:6d:91:5b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Feb 20 11:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea348c26d543970b3c95b5d95ba02c5a9517b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2b:a0:db:c0:9f:56:b6:b9:ee:92:65:2d:ef:
48:75:6e:0e:86:76:d1:a5:42:c5:a0:f6:d0:98:05:
c3:ec:ed:e2:fb:8a:db:bb:07:5b:f2:aa:bf:2b:9d:
9d:f3:89:73:b7:35:f0:02:fc:ee:df:67:82:9f:32:
73:22:8e:15:af:b0:0e:05:f5:4a:a5:2f:84:c7:ac:
3e:e5:66:99:00:00:9f:7d:af:f6:0f:36:7e:20:1f:
42:5b:6f:4f:14:d3:88:b2:12:0b:2a:a3:b1:08:b2:
d4:c2:15:22:18:85:43:46:b0:87:be:e0:42:a6:7f:
70:ec:92:b5:e4:24:31:d1:68:b3:d7:db:4c:3e:3d:
39:76:cd:b3:17:75:53:9d:9d:ed:61:63:bf:f7:88:
22:ab:f8:64:f1:27:d7:09:fb:e5:8b:b1:98:52:40:
bd:96:75:c8:7d:b7:5f:ad:d6:be:f7:35:fd:f3:19:
de:1a:67:53:44:91:bc:31:6d:e7:92:67:77:ab:1b:
a0:7a:eb:19:36:1f:e1:b6:64:dc:a6:d8:21:b9:b5:
a5:cf:39:a0:99:fe:9d:2f:6f:c6:c4:92:c8:48:28:
8c:84:87:48:2f:08:74:41:75:d9:a0:3c:87:f3:b8:
fd:23:e9:b7:dc:f8:1e:b2:66:6d:71:32:1e:e2:d5:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:8C:26:D5:43:97:0B:3C:95:B5:D9:5B:A0:2C:5A:95:17:B3:2B
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/6jSMJtVDlws8lbXZW6AsWpUXsys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.255.0/24
Signature Algorithm: sha256WithRSAEncryption
50:12:14:71:6b:a4:f1:84:6f:b8:0f:0a:1a:55:e4:af:ae:c8:
75:6e:5c:ab:1a:cd:4b:05:90:ad:3c:29:52:a8:71:da:05:8b:
0d:98:84:66:1c:5c:1b:0c:ce:65:e8:d3:42:04:e1:a2:8e:84:
f0:50:e7:0a:c9:83:eb:e3:a2:dc:2e:08:65:d5:23:c6:07:ad:
aa:a7:7f:fe:e6:b7:56:b0:cc:0d:95:9c:bc:5f:0b:96:48:27:
7a:6d:f6:5c:72:01:86:17:35:cc:d6:9f:4e:ad:78:db:45:13:
10:ee:9e:ff:b9:0b:57:51:42:ca:c8:5d:63:0f:c2:ba:b2:3f:
19:69:7b:2c:0e:03:ae:31:34:84:c5:ec:3f:21:0f:35:6f:fa:
41:4e:1e:6e:10:1e:80:4a:8f:91:b0:13:f3:a4:97:95:3e:18:
97:58:10:d1:81:db:4e:f9:0a:4d:9f:ae:a1:70:71:c4:98:f4:
e3:03:94:28:bc:a7:01:29:ab:06:ff:06:b1:b5:1e:88:b8:1d:
b3:79:a5:23:4f:b8:18:92:7a:95:f0:0f:a4:0b:05:d8:81:74:
0f:8d:69:07:46:50:cc:31:c5:aa:41:97:76:a8:fb:3b:b6:3b:
6f:90:7f:0f:8c:1b:a0:74:dc:0c:e3:cd:73:a6:59:52:01:a0:
54:c4:77:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-ams.rpki-client.org