Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/6dDVTt1J19OI9iGFB82pLYgMWvU.roa
File: 6dDVTt1J19OI9iGFB82pLYgMWvU.roa (raw, json)
Hash identifier: K4656lxmDyXLr0rbbgQU9p4OIw3Uayd4c9vRe8YiFFw=
Subject key identifier: E9:D0:D5:4E:DD:49:D7:D3:88:F6:21:85:07:CD:A9:2D:88:0C:5A:F5
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 01856FDDD2D5E52AE2A9C912F0BBB26CF128
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/6dDVTt1J19OI9iGFB82pLYgMWvU.roa
Signing time: Mon 02 Jan 2023 00:24:46 +0000
ROA not before: Mon 02 Jan 2023 00:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42068
IP address blocks: 195.242.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:d2:d5:e5:2a:e2:a9:c9:12:f0:bb:b2:6c:f1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 2 00:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9d0d54edd49d7d388f6218507cda92d880c5af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:f8:24:57:55:18:a5:c4:05:fe:64:3a:08:
49:9b:14:ac:fb:ff:9d:27:69:30:0f:73:8d:f8:93:
26:c1:6b:72:6c:e7:52:f0:49:32:68:ba:d7:36:86:
2c:92:55:90:ce:d5:e0:ad:96:93:f6:92:b2:88:f0:
9f:57:a6:0f:74:55:82:64:f0:55:1d:82:55:96:32:
90:ec:31:d8:f0:03:28:83:19:a2:3d:96:0d:08:3d:
90:56:bb:db:49:59:30:b9:9a:55:65:b4:de:ee:ec:
c2:8f:28:2d:3d:56:58:dd:67:47:29:13:5d:3e:69:
e5:2e:f0:e3:21:25:48:91:1f:10:80:a7:35:5e:a5:
7b:b9:62:8c:ac:d8:20:b4:5f:ae:95:de:bf:27:d0:
71:93:4b:5a:34:91:07:f0:3f:b9:43:7b:63:d3:a1:
d4:8c:64:89:f3:03:aa:2d:29:44:45:fd:dd:c4:a8:
36:eb:3f:a6:14:09:0d:e0:25:8b:75:af:ca:4b:8a:
03:bc:d8:33:8e:c0:81:5c:26:a5:80:68:e4:00:1d:
b7:ca:b1:22:e9:2b:4f:db:11:e1:8c:bc:46:aa:8b:
c2:53:6d:f0:39:0c:12:e0:92:52:f1:f1:ee:31:83:
e3:a2:85:2b:8c:74:a4:d0:f5:4e:dc:7d:43:a3:f9:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:D5:4E:DD:49:D7:D3:88:F6:21:85:07:CD:A9:2D:88:0C:5A:F5
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/6dDVTt1J19OI9iGFB82pLYgMWvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:81:3d:01:1c:86:b1:30:6e:da:31:60:4e:50:27:d3:d9:ee:
a1:3b:15:3a:95:10:84:ee:f4:43:17:79:ee:f7:01:de:88:23:
5c:c5:21:e5:03:cc:f7:cb:55:db:66:4f:12:eb:a6:2c:89:04:
a9:ff:8c:dc:a0:f8:02:43:e7:57:15:cb:9b:e9:fa:ba:19:ca:
4c:1d:67:d9:75:88:ae:b9:0a:ff:22:c5:26:48:e2:fd:42:2e:
5a:df:d5:b5:7b:22:c1:ad:90:08:dd:c5:59:b6:18:c4:e8:11:
f0:c4:47:5c:40:73:99:5b:4c:6b:f1:81:8b:24:b9:ad:2d:5a:
70:85:c8:67:ce:c0:4f:1f:5b:a7:be:0c:b6:da:2f:7f:6d:dc:
29:4c:9c:13:2c:de:19:3d:ae:7f:d0:9b:db:70:d8:ae:9c:10:
1f:a2:f1:58:a7:e1:ed:14:e7:56:14:66:56:69:f9:eb:6a:ca:
dc:a5:4d:f1:a8:8f:17:26:0b:fb:e6:d8:0c:e7:fe:ff:e8:29:
af:12:fb:80:10:65:ac:17:c8:06:e5:0c:9b:3c:dc:f5:6b:83:
c2:d9:9a:a7:ff:52:d9:f7:30:e7:62:76:54:29:9d:43:f7:0b:
d0:0b:6c:41:bf:40:cc:6a:a4:4e:24:58:7c:6d:64:8a:17:3e:
90:30:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:18 2024 by rpki-client on console-ams.rpki-client.org