Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/6_1EheKsghHGq_9wmS_t2Miy52I.roa
File: 6_1EheKsghHGq_9wmS_t2Miy52I.roa (raw, json)
Hash identifier: /JdPGdHr0tFMHFiurBCvjZYjR0SBy5wXYzwtMhQXQJA=
Subject key identifier: EB:FD:44:85:E2:AC:82:11:C6:AB:FF:70:99:2F:ED:D8:C8:B2:E7:62
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 01857227EB77F3F468C9481D3369103E2AA7
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/6_1EheKsghHGq_9wmS_t2Miy52I.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24634
IP address blocks: 77.246.64.0/20 maxlen: 24
92.242.168.0/22 maxlen: 24
2a0d:b340::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:eb:77:f3:f4:68:c9:48:1d:33:69:10:3e:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebfd4485e2ac8211c6abff70992fedd8c8b2e762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:48:39:9c:e5:72:94:b6:49:ab:59:c1:96:
cc:8f:44:e7:68:2c:a7:0e:45:92:93:1a:c3:1e:74:
b5:c2:aa:3b:9b:98:66:ab:6f:ac:26:a1:39:dd:1b:
d9:7b:8d:86:27:c1:a6:66:15:51:31:3c:c5:32:2e:
e2:53:97:dd:63:57:64:11:32:31:5c:b3:f2:c5:56:
f4:35:96:4d:a0:ef:f7:7a:3d:f2:68:3a:15:49:7b:
38:a0:8c:99:9e:b9:74:2e:94:ad:73:be:b6:b1:6b:
94:8b:66:19:c1:53:10:6e:8c:82:e0:6c:83:5b:3f:
54:8f:3f:ec:ef:2c:83:b5:24:5d:c5:68:41:d8:18:
47:a9:79:40:75:66:ea:c4:76:47:dd:f9:e6:19:f8:
34:8a:d0:94:f8:70:8a:3e:49:e3:be:aa:70:68:12:
6f:6e:4b:be:fc:ba:cc:ce:cb:ba:81:65:db:8f:a6:
46:ee:3e:b0:f5:72:90:a9:e3:e2:ba:08:a4:71:87:
25:4e:73:9e:55:9b:6c:0d:53:23:a7:02:c8:df:a6:
5b:a7:f3:6a:1a:80:0b:f9:d9:e4:d8:de:16:02:00:
c4:a6:b8:ef:af:69:15:31:44:45:70:76:0d:57:e7:
31:73:88:65:7c:20:af:97:ee:ba:0b:26:1e:11:2c:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FD:44:85:E2:AC:82:11:C6:AB:FF:70:99:2F:ED:D8:C8:B2:E7:62
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/6_1EheKsghHGq_9wmS_t2Miy52I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.64.0/20
92.242.168.0/22
IPv6:
2a0d:b340::/29
Signature Algorithm: sha256WithRSAEncryption
a3:5b:97:50:1d:b6:0f:69:af:69:97:62:e4:6f:8c:40:f3:81:
fe:a0:58:1f:e4:ce:e3:08:b7:40:97:5e:70:29:9a:72:64:b9:
08:8a:11:88:a9:fe:37:4b:7e:55:a9:69:c3:a5:db:9c:1e:bf:
b4:2f:1e:10:a7:47:0e:19:ea:11:4c:d7:9b:b0:9e:39:22:98:
ac:9c:4d:69:85:1d:ec:5e:f4:f7:96:e9:3b:5f:a2:2d:ea:54:
9a:7c:de:9a:a4:09:9b:34:9b:c3:b3:e9:9f:1f:d0:3c:a9:26:
e5:fd:57:d9:1a:47:06:50:79:1e:ce:f4:a0:b6:89:6c:c0:03:
f3:9c:3a:64:16:d1:12:34:0e:3b:3e:13:54:61:29:98:45:03:
0f:1c:b7:c6:1f:84:fe:ce:11:54:41:c9:40:bb:b5:cb:cb:5f:
98:fb:7c:18:3a:0a:fe:e8:41:d1:25:14:f4:b4:2d:c4:51:0e:
d5:5d:27:b9:6a:eb:33:f8:51:48:8a:b4:3f:3f:5d:bc:7b:c5:
8e:f1:cd:40:60:84:1e:70:cd:3e:cb:6b:73:7e:17:be:ec:20:
bb:d4:45:64:b7:31:13:94:4a:bf:5c:e3:ed:7b:26:a8:a7:3c:
ff:08:ca:02:60:af:a2:fa:cf:91:78:76:00:ad:06:d8:34:78:
01:0e:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org