Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/6TvSnhCs866FiIzppVq4jJeSOLc.roa
File: 6TvSnhCs866FiIzppVq4jJeSOLc.roa (raw, json)
Hash identifier: jnsFAf+HD16S2kchYe/E5wD4q0X2oizuugG4gVZKuuU=
Subject key identifier: E9:3B:D2:9E:10:AC:F3:AE:85:88:8C:E9:A5:5A:B8:8C:97:92:38:B7
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01901E4285E1CE861889E7AA9CE7BFFAAF4F
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/6TvSnhCs866FiIzppVq4jJeSOLc.roa
Signing time: Sat 15 Jun 2024 23:36:34 +0000
ROA not before: Sat 15 Jun 2024 23:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51020
IP address blocks: 5.62.128.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
37.77.48.0/23 maxlen: 23
37.77.48.0/24 maxlen: 24
37.77.49.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
185.69.4.0/23 maxlen: 23
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jun 2024 08:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:42:85:e1:ce:86:18:89:e7:aa:9c:e7:bf:fa:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jun 15 23:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93bd29e10acf3ae85888ce9a55ab88c979238b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:a3:79:7a:71:da:b6:c1:ab:a8:ba:4d:2d:
04:be:01:88:c6:db:c7:b5:40:8c:98:06:5c:7d:b7:
29:b6:ac:98:e6:25:b2:4f:d3:a4:d9:86:8f:28:9c:
d0:f2:f9:b4:51:53:ae:3a:18:81:7c:80:a1:0f:b3:
de:8b:ab:e0:5a:1f:e2:a2:81:b6:90:cf:7c:51:5f:
3d:8a:be:f5:ec:13:d8:2c:14:97:27:40:4f:92:ca:
68:95:ca:f6:cc:44:fe:e6:2a:74:74:81:be:72:be:
98:0f:d0:bf:f9:24:9a:fe:4f:fb:8e:3f:b9:a7:39:
20:d1:42:96:1f:95:45:aa:59:e0:ab:34:5a:24:cf:
33:60:2c:11:8a:df:a7:ee:4a:ec:5e:1f:d0:bd:52:
38:0f:62:2a:33:c3:46:b0:a1:2e:ad:87:ad:d9:ab:
7f:ad:f1:69:48:7c:4f:ee:2e:bd:ae:85:7a:e6:ed:
88:8a:fb:a7:9f:76:68:f5:9e:fb:58:c5:47:e5:81:
b7:f7:e2:35:af:2e:1c:d0:d4:b2:17:70:a3:05:1b:
9f:ad:30:20:a7:ab:99:ad:42:e4:ab:ab:c1:c0:ab:
92:50:8f:e4:d9:27:ab:80:19:06:d6:1c:0f:d7:a0:
4c:20:74:e7:11:8e:1d:d6:ba:5a:94:c0:78:5c:9a:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:D2:9E:10:AC:F3:AE:85:88:8C:E9:A5:5A:B8:8C:97:92:38:B7
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/6TvSnhCs866FiIzppVq4jJeSOLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0/23
5.62.136.0/23
31.7.80.0/23
31.7.84.0/24
31.7.86.0/24
37.77.48.0/21
185.69.4.0/23
Signature Algorithm: sha256WithRSAEncryption
03:e7:e2:5c:43:6d:a4:2f:01:89:e5:86:02:4b:ae:09:6b:e2:
67:6a:1e:5a:ff:a8:40:a2:73:c3:c7:aa:b2:08:7d:37:d8:f0:
88:ec:ce:3c:92:e8:0c:41:9e:67:dc:d9:ac:ff:97:2b:a6:6a:
fb:f1:22:7d:8b:be:3d:1c:91:01:6f:9d:5a:8c:87:b6:3e:21:
17:5b:2f:d4:b0:95:17:97:c8:77:c6:76:76:c8:7f:ff:0b:8a:
26:4d:df:e8:a9:cc:73:40:9c:81:cb:e8:94:65:cb:d0:27:44:
db:32:19:97:16:65:4a:01:1f:02:93:b5:0e:ac:2c:7f:4d:ae:
8f:35:ad:e6:44:aa:a5:85:09:13:de:92:3b:dc:a1:3d:4a:7c:
ea:6a:0d:e2:69:8a:45:94:e7:05:3a:9a:be:fe:ea:1a:85:77:
bc:97:bb:fc:b4:9d:47:97:63:4c:c8:59:e8:e6:a9:da:18:be:
ab:ea:dc:3f:d1:dc:86:9c:e9:5e:3d:c1:4c:2e:b7:37:2f:96:
06:4e:ab:59:3a:ce:2f:30:48:90:be:53:ef:3f:68:c6:ad:b7:
4d:06:54:28:20:f5:7c:3e:81:4a:28:bd:27:97:60:2f:b0:0a:
f0:83:8a:58:30:73:e0:bc:15:ea:cd:f8:0b:30:77:38:c7:73:
5f:31:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:18:29 2024 by rpki-client on console-fra.rpki-client.org