Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/V6HBWn90Sq8oIJm_whplyrEegro.roa
File: V6HBWn90Sq8oIJm_whplyrEegro.roa (raw, json)
Hash identifier: +4sw4j6gXOMFJ9K0pBjq7aQ3ddk8XFFK/hfPazEOEnI=
Subject key identifier: 57:A1:C1:5A:7F:74:4A:AF:28:20:99:BF:C2:1A:65:CA:B1:1E:82:BA
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 01856F94DD808321B9A92B5F803A8B07ABD4
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/V6HBWn90Sq8oIJm_whplyrEegro.roa
Signing time: Sun 01 Jan 2023 23:05:05 +0000
ROA not before: Sun 01 Jan 2023 23:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25115
IP address blocks: 193.201.236.0/22 maxlen: 22
193.23.243.0/24 maxlen: 24
194.15.176.0/23 maxlen: 23
2a09:20c1::/32 maxlen: 32
2a09:20c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:dd:80:83:21:b9:a9:2b:5f:80:3a:8b:07:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Jan 1 23:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a1c15a7f744aaf282099bfc21a65cab11e82ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:42:ca:63:60:6f:5e:7f:19:b3:0c:43:29:dd:
00:98:90:4e:6e:84:7e:33:6c:0c:3e:85:d4:35:d8:
30:34:33:10:18:26:0c:fd:eb:3d:61:dd:02:b9:ee:
dd:44:3a:c4:a2:c1:3e:76:2a:36:49:00:e8:de:07:
9d:a4:c1:1d:8e:72:13:9d:90:cb:54:b1:eb:53:3e:
0e:74:af:e0:e4:fc:ea:86:16:d0:cf:d2:49:ca:f3:
5d:fe:c4:fd:95:3d:af:54:38:63:2d:1e:f8:b8:3c:
bb:83:ac:3c:02:8d:9c:07:da:51:c6:eb:17:e5:ab:
47:c7:2c:ee:ca:4c:35:c4:54:20:e4:08:58:1a:8d:
79:7a:e3:50:37:bc:b9:b7:69:44:8d:b8:a5:4f:b0:
f5:df:20:64:57:cc:76:4b:cc:e1:9b:46:2f:18:7d:
10:16:ff:5c:4d:4f:95:bc:6d:01:aa:7d:94:89:c4:
e6:25:89:76:75:a7:af:2c:7b:ce:b9:4d:e7:3f:95:
cf:2c:fb:dd:cf:97:e1:17:9c:b8:fd:3d:dc:3b:73:
c9:3a:aa:87:3d:e3:12:e0:dc:f6:6a:cd:ee:44:c3:
ed:3f:81:2f:fe:57:0b:56:45:84:cc:32:f2:ba:8c:
59:cb:1a:9d:7d:22:9a:e6:6d:e7:a5:97:36:b0:3a:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:C1:5A:7F:74:4A:AF:28:20:99:BF:C2:1A:65:CA:B1:1E:82:BA
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/V6HBWn90Sq8oIJm_whplyrEegro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.243.0/24
193.201.236.0/22
194.15.176.0/23
IPv6:
2a09:20c0::/31
Signature Algorithm: sha256WithRSAEncryption
3e:ee:cf:c6:6b:1d:3b:79:d8:ae:e3:3f:91:15:7b:99:92:57:
5c:0f:7f:92:ea:e4:a2:90:2b:65:ac:62:c5:42:7a:a4:50:45:
fd:de:bd:5c:35:32:e6:37:d8:cd:ff:b8:e1:93:be:f4:f0:f8:
6d:b3:fd:67:48:e5:b7:7f:17:6c:53:a1:2a:5c:e1:ac:ad:fb:
a3:a5:69:51:42:68:72:9c:7f:2a:ba:2e:12:23:ef:be:6c:ac:
90:ea:21:92:c2:ea:c9:02:06:e2:ed:08:30:f1:46:43:d5:c2:
a2:17:b8:56:9f:6e:63:cc:40:97:6b:e1:5e:4e:e8:f6:e7:92:
4e:e1:0c:45:0a:79:f1:9b:3b:4a:1e:8f:56:eb:1a:8a:2c:dd:
3e:3a:b8:37:4f:44:1b:ad:dd:c3:ca:b5:84:e7:44:92:44:87:
53:39:71:b7:99:2e:ff:4f:84:1c:1e:03:3d:bb:c3:e3:21:71:
68:4c:38:5e:84:4b:25:13:e7:7f:a4:8f:bd:0b:d5:61:69:4f:
da:0b:be:e6:53:c6:9a:00:34:d9:3d:1b:74:8c:64:ab:a8:5c:
3f:41:2b:34:a6:5e:cd:ef:4f:d5:71:e1:63:22:50:43:8b:d6:
f2:37:d9:a9:3f:a7:3a:e5:9b:d3:2b:68:1a:cb:9d:8c:4a:34:
df:d7:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:08 2024 by rpki-client on console-ams.rpki-client.org