Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/4mExEiSwDjmbO14SJIwhV9pnmX4.roa
File: 4mExEiSwDjmbO14SJIwhV9pnmX4.roa (raw, json)
Hash identifier: SAbLj/EiPE9yiz0ep0z+p/R5LdN1cH3Znyz1DOwvh0k=
Subject key identifier: E2:61:31:12:24:B0:0E:39:9B:3B:5E:12:24:8C:21:57:DA:67:99:7E
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 01895855970A11609C3065E36F14706E2E0D
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/4mExEiSwDjmbO14SJIwhV9pnmX4.roa
Signing time: Sat 15 Jul 2023 06:55:51 +0000
ROA not before: Sat 15 Jul 2023 06:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 185.217.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:55:97:0a:11:60:9c:30:65:e3:6f:14:70:6e:2e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Jul 15 06:55:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e261311224b00e399b3b5e12248c2157da67997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:ea:e9:46:36:7c:5a:a7:7d:b5:7b:e9:0d:
24:bf:5c:3e:30:b2:77:1a:a2:a7:f0:7f:a6:c0:d7:
08:8b:a9:b3:6e:f3:5d:87:24:42:57:cb:b6:23:45:
a8:45:9e:9d:92:ae:0e:8f:2b:86:9b:49:e2:b2:ca:
06:40:c2:8a:86:a5:e8:c9:24:02:54:f2:cd:33:ed:
ef:3f:5b:da:44:bb:35:f8:e1:8d:84:bc:1e:bc:d3:
94:47:37:2f:a3:fc:10:4c:5d:80:e2:5b:4f:25:b4:
82:63:81:a0:f8:eb:d0:66:a7:b4:70:45:32:25:4a:
b7:7d:02:62:ed:00:4e:a4:63:52:8d:d4:90:39:3a:
6f:1d:3f:58:74:33:81:cf:52:9f:3a:69:67:d3:7c:
dd:17:f1:22:93:09:ee:d0:1b:df:c6:e2:e8:3c:62:
79:b6:7b:d8:30:08:09:7b:09:79:15:da:6d:d4:d8:
2b:8c:fb:0b:0c:1a:2c:8f:8d:08:78:21:bd:33:99:
2a:28:a5:fc:1a:2d:02:1d:f0:c9:b7:ef:32:25:c7:
75:ee:1a:e1:c5:44:33:18:8b:f6:24:54:45:ba:22:
6d:6e:1e:e6:27:26:12:c1:96:4d:de:65:df:ff:39:
a8:4c:44:71:56:bd:0c:7f:06:a8:6c:6b:4e:af:35:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:31:12:24:B0:0E:39:9B:3B:5E:12:24:8C:21:57:DA:67:99:7E
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/4mExEiSwDjmbO14SJIwhV9pnmX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2e:ab:26:f7:51:8d:b5:46:c2:56:d8:93:e4:91:37:47:16:
16:fb:47:6f:84:6d:09:ae:99:f7:f3:ef:86:96:be:3f:b2:0e:
60:93:a8:de:6e:90:4a:3f:c9:cc:8d:f4:13:9e:14:73:1a:4e:
21:62:73:54:16:f9:49:fd:ec:f2:a6:fb:25:a4:9b:0d:e9:e3:
1b:a9:50:09:bc:be:a1:fb:2a:c1:8f:56:45:9e:58:11:6e:f3:
b0:9e:ce:29:62:ed:17:b4:0a:d7:d5:c5:77:28:37:a0:d3:1e:
e1:1e:13:28:9f:0e:06:31:d6:5b:01:18:a1:c3:8c:a9:18:65:
86:59:ee:45:88:f2:9c:89:0d:4a:05:f3:64:b0:4d:97:ae:3e:
f1:83:6d:0d:54:06:37:00:74:61:7d:46:76:fa:89:1a:1a:5e:
39:30:cd:72:37:96:d6:af:c5:d2:7c:da:4e:40:68:75:7e:57:
f0:52:87:8c:9a:cf:35:74:aa:1c:95:e1:f2:34:c8:8a:2b:40:
e4:93:41:cb:fd:d9:a9:a3:6d:cf:80:96:16:bf:79:78:19:c2:
22:12:33:cc:72:15:7d:38:7e:9c:31:55:ef:60:af:0e:f6:74:
5c:c6:9d:b1:fe:c7:d3:22:f9:7c:a5:b7:52:83:9d:d7:7c:6c:
31:a8:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org