Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/6jMAVZ6oQV0DsZjp81wNluBOtEg.roa
File: 6jMAVZ6oQV0DsZjp81wNluBOtEg.roa (raw, json)
Hash identifier: etbdrpXoIhf0lWUtPEhewqahMqPtxdYmXc+//G1bLdA=
Subject key identifier: EA:33:00:55:9E:A8:41:5D:03:B1:98:E9:F3:5C:0D:96:E0:4E:B4:48
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B246EFFCCA999F5133F6F033176F0822B
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/6jMAVZ6oQV0DsZjp81wNluBOtEg.roa
Signing time: Thu 12 Oct 2023 15:08:56 +0000
ROA not before: Thu 12 Oct 2023 15:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216184
IP address blocks: 188.132.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:6e:ff:cc:a9:99:f5:13:3f:6f:03:31:76:f0:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 12 15:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3300559ea8415d03b198e9f35c0d96e04eb448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:b4:bd:f3:33:bb:de:39:5c:6a:ae:3e:4c:
52:2c:1b:ae:84:7b:f2:82:8f:ec:83:65:0a:9e:0d:
85:52:2a:e0:93:58:8e:dd:df:f7:49:55:5f:7d:53:
83:cb:62:a1:24:d0:7f:80:2b:9e:95:3c:3a:a1:74:
82:15:1c:da:da:87:62:2c:8e:50:b4:b6:a0:2e:50:
e2:94:05:ac:ad:6c:7b:e6:c6:96:ed:cd:49:b9:5f:
65:f4:bf:01:58:c6:e3:a3:29:0d:35:dd:77:72:50:
9b:c2:33:e7:7a:c4:aa:55:95:11:3f:db:d0:cd:03:
27:9f:63:15:d2:aa:76:3f:c8:9a:8b:72:9b:f3:c7:
c5:1f:27:e7:fe:60:3e:20:46:f4:95:eb:f2:97:72:
f7:99:8a:15:38:ca:73:c9:d2:26:16:53:7a:3b:ce:
c7:d2:a1:63:23:0e:19:b1:25:99:fb:bd:95:56:e9:
71:1f:e5:49:c7:47:e6:8b:02:74:59:43:0e:0f:62:
6e:dc:2e:f4:41:f0:c7:22:31:5a:74:b6:75:fc:0b:
26:7c:86:3b:51:5d:d6:ef:7c:72:d1:9a:5e:07:52:
75:22:f3:5c:b7:e9:77:1a:a7:f2:4b:e7:db:c5:53:
ef:7a:33:c6:2b:dc:f4:79:5c:c6:52:21:b3:9b:28:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:00:55:9E:A8:41:5D:03:B1:98:E9:F3:5C:0D:96:E0:4E:B4:48
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/6jMAVZ6oQV0DsZjp81wNluBOtEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e1:06:9d:5b:c3:58:57:1d:8a:93:39:df:97:4b:0b:b8:7a:
d0:cf:dc:98:16:19:1e:02:b5:39:c2:c7:3a:02:8e:23:da:d2:
65:98:24:09:f3:ca:b7:54:80:c5:54:dc:eb:9c:9f:1e:4c:54:
15:c7:17:27:8a:cb:55:0a:b9:c7:fc:05:fc:5d:06:24:44:71:
0d:2d:4c:d4:5a:aa:12:0d:09:bc:df:81:2b:0d:01:c4:62:7c:
67:05:61:de:71:0a:f6:0c:d0:52:22:5a:59:fe:18:1b:68:34:
33:3c:19:a1:56:75:8a:29:1a:ed:76:e3:e0:1b:4a:87:d7:3e:
83:b3:6b:89:d0:fa:97:80:e6:83:ea:93:cd:74:0a:f8:84:ae:
2e:52:12:24:56:05:d8:1c:1f:2e:dc:f2:13:dd:f8:89:d1:4c:
51:84:92:ab:03:bd:5e:15:3a:43:d3:fb:d4:2e:29:45:c2:97:
8e:22:b7:6d:1c:4f:4a:12:53:81:34:eb:71:37:85:5c:54:9e:
2a:f4:ed:dc:c6:16:3c:58:da:9f:9f:d1:7b:6b:57:89:35:13:
62:d2:2a:d9:ea:8a:18:6c:02:b1:2c:e4:08:6e:25:70:9f:7f:
a5:f7:c0:e2:47:5c:79:82:80:0c:5a:05:ac:0f:76:d3:ec:0e:
cb:0f:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 09:30:04 2023 by rpki-client on console-ams.rpki-client.org