Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/6Hn0ejGKyfs7YK1rXIjPo96_PjU.roa
File: 6Hn0ejGKyfs7YK1rXIjPo96_PjU.roa (raw, json)
Hash identifier: Xfw+9TUPsyvGJ12HPGh1/EdQXDqe8/vH0Jjr1a9PYVM=
Subject key identifier: E8:79:F4:7A:31:8A:C9:FB:3B:60:AD:6B:5C:88:CF:A3:DE:BF:3E:35
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 0190C62C5C4003FD9C748BCA7EDDC968FE3E
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/6Hn0ejGKyfs7YK1rXIjPo96_PjU.roa
Signing time: Thu 18 Jul 2024 14:08:34 +0000
ROA not before: Thu 18 Jul 2024 14:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401104
IP address blocks: 176.97.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 17:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:2c:5c:40:03:fd:9c:74:8b:ca:7e:dd:c9:68:fe:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jul 18 14:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e879f47a318ac9fb3b60ad6b5c88cfa3debf3e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:e7:be:67:93:1f:04:fb:b6:a3:0b:59:17:
31:c6:ff:f1:35:68:e7:2c:41:21:d8:20:fe:97:a8:
23:dc:98:26:6f:fa:5e:1b:5c:b5:39:5d:6c:fd:a4:
79:2c:be:49:c4:75:ed:2a:e6:61:9b:fe:e1:81:43:
5b:20:6d:e5:da:95:c8:6c:06:c4:b8:ea:64:cc:c7:
bc:26:32:3a:e3:14:4c:2f:78:6c:27:0e:f5:4a:be:
e6:eb:97:ea:3b:42:99:85:c3:40:34:92:b3:80:e1:
a8:b4:0f:f9:d3:01:68:86:7b:55:60:83:30:1b:a4:
7f:68:3d:ef:4e:de:a5:24:f6:51:a2:f5:37:8e:78:
eb:f7:a0:36:2c:e8:7d:45:fc:65:7d:b4:71:cd:db:
82:55:40:70:15:9e:6d:d5:ed:1e:23:9b:e1:78:83:
6d:90:73:3c:64:6d:6f:68:c3:04:cb:6c:bc:c9:7c:
fb:b0:f5:8f:9c:39:c1:4b:1e:c0:5d:5a:cf:c4:9d:
c0:0a:ae:40:c6:81:3d:b0:da:fc:b9:8d:f6:3d:c2:
70:39:a1:0c:6c:88:47:ce:1d:12:18:47:44:73:42:
36:c0:66:88:dc:6d:ae:84:40:1b:55:54:92:8e:e6:
59:4d:80:42:44:61:ad:cf:39:a2:28:a2:dd:54:e4:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:F4:7A:31:8A:C9:FB:3B:60:AD:6B:5C:88:CF:A3:DE:BF:3E:35
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/6Hn0ejGKyfs7YK1rXIjPo96_PjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7f:64:00:5e:94:60:39:5b:f7:89:aa:bd:f5:06:c6:14:05:
82:b6:46:e1:1e:df:94:74:b6:f1:89:44:76:57:92:99:e4:ec:
5b:03:ef:3c:5f:e8:ed:51:1d:45:d0:e2:5e:02:c5:c3:54:3e:
90:ee:cb:79:bf:95:6c:fb:70:73:8b:4e:07:80:ef:b4:e0:9a:
50:a1:ee:4a:36:ed:13:87:01:77:80:c2:3a:da:e5:82:63:60:
e2:6a:bb:d0:34:4e:90:bf:b7:95:87:37:6a:a0:d8:5e:f9:8e:
2f:21:b1:9f:b9:a8:a1:42:7c:48:5c:8f:3a:20:77:f2:0e:03:
de:3a:f8:a1:b5:77:64:51:53:6d:86:e5:97:ea:1f:47:9a:0d:
f8:2d:5c:f4:5a:d5:32:98:d8:e6:b0:30:a8:e3:76:5f:c0:a7:
d8:0f:68:76:d2:9b:14:1c:7e:87:38:4a:f3:12:28:71:54:7f:
23:2d:61:e0:c7:76:5c:f8:24:e0:c2:83:bb:df:6a:b8:aa:fe:
07:28:b3:b9:3c:93:84:2d:8c:3f:46:e6:da:77:55:56:5d:56:
b1:59:a8:47:c4:b4:af:fd:2f:8f:1d:e8:2f:25:a4:55:68:8f:
63:e3:86:99:95:3b:46:ba:4d:e4:c0:9c:1c:4b:15:24:20:76:
47:8c:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:29:06 2024 by rpki-client on console-ams.rpki-client.org