Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/6ovnFCNr49f78sVspFZL71aV9X0.roa
File: 6ovnFCNr49f78sVspFZL71aV9X0.roa (raw, json)
Hash identifier: ZLmCKWJNq0T4vv0BkCqSgMkMaswJO3zzdpXALDmfpB0=
Subject key identifier: EA:8B:E7:14:23:6B:E3:D7:FB:F2:C5:6C:A4:56:4B:EF:56:95:F5:7D
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 018AAAE5A061BF1E8C42B4D0CAED556B082E
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/6ovnFCNr49f78sVspFZL71aV9X0.roa
Signing time: Tue 19 Sep 2023 00:44:50 +0000
ROA not before: Tue 19 Sep 2023 00:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197075
IP address blocks: 45.156.60.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:aa:e5:a0:61:bf:1e:8c:42:b4:d0:ca:ed:55:6b:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Sep 19 00:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea8be714236be3d7fbf2c56ca4564bef5695f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8a:d2:61:64:5a:1e:a5:d1:df:e4:38:6a:24:
aa:96:9f:30:c5:be:9c:7f:ab:b3:77:16:84:ce:12:
f8:04:82:61:e7:ab:8b:a0:e7:44:00:85:cc:3e:70:
43:a3:40:65:d1:e9:16:60:e0:b9:cc:c9:19:d1:4c:
f6:ec:80:d0:0e:91:77:85:77:52:81:51:c4:fa:b5:
0b:72:c8:49:fa:7b:57:33:35:e6:dd:7b:5c:9f:83:
d8:fe:6f:0e:90:66:1e:ef:c0:05:c3:f6:9a:ab:51:
2c:9c:68:4e:1c:e5:94:e2:60:eb:e8:f1:1d:8e:96:
6a:93:3b:da:f8:27:fa:61:55:cd:11:b8:88:e4:67:
6a:f5:c0:0a:b1:7a:72:1c:e6:17:67:62:42:cb:0d:
45:68:8a:58:85:52:49:6a:32:77:83:c6:cf:7b:77:
ac:a3:3b:57:ee:0a:fb:29:55:ea:2c:23:dc:b3:69:
11:d0:b7:9a:75:e0:ad:a4:16:49:7c:2b:19:5d:9f:
15:65:9b:73:d8:59:47:2e:d1:7e:0d:7c:08:eb:08:
87:73:fd:5c:22:1d:f4:73:ea:d0:dc:b2:93:12:a9:
83:c2:e6:00:97:92:1b:5c:3a:cb:e8:b8:61:ca:c5:
dd:6a:a5:d2:c7:99:33:c5:43:2d:e4:8a:21:37:7b:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:E7:14:23:6B:E3:D7:FB:F2:C5:6C:A4:56:4B:EF:56:95:F5:7D
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/6ovnFCNr49f78sVspFZL71aV9X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:eb:26:12:14:ea:cb:78:a2:de:67:84:38:f1:23:84:ba:9e:
64:a1:35:d5:3e:6d:9d:bb:16:27:3e:27:7e:28:aa:ab:8b:49:
24:f5:73:32:8a:6c:03:ba:39:a6:a6:55:65:48:d5:e6:ac:0e:
f5:4e:44:b8:32:82:e1:ba:b8:bc:bb:c3:fe:14:27:d9:f4:72:
70:48:4d:12:96:8a:a0:c4:a7:5c:8c:da:6c:b6:1b:e6:a5:2e:
0f:7e:56:5a:7c:26:48:d3:25:ce:c4:aa:ce:8e:c4:ce:5e:17:
a0:10:3d:62:ed:e4:52:a8:68:ab:d6:16:7b:a7:6b:39:32:c5:
bc:4d:42:60:a9:4a:59:25:c9:0d:56:f8:72:53:c3:84:e7:7e:
3a:a7:82:02:95:67:d9:56:96:5e:e5:57:3a:0c:04:37:b0:43:
9f:c9:9d:95:fe:e9:32:c6:3a:fc:89:e3:84:a3:60:0e:ca:da:
16:ca:fd:f2:c9:b0:25:00:91:0b:56:a8:c2:28:b3:59:fe:b4:
5f:00:8b:e8:17:10:0c:f1:2b:36:d6:01:63:c8:90:8e:71:75:
72:2a:c2:49:37:e8:f8:b0:32:6a:31:1b:6f:38:df:a9:52:64:
53:27:1b:15:33:9e:f1:12:bf:95:24:ee:67:1c:af:91:02:57:
7b:0d:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:03 2024 by rpki-client on console-fra.rpki-client.org