Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/6RAS4xIdmBQU8TWPpLE1fgififQ.roa
File: 6RAS4xIdmBQU8TWPpLE1fgififQ.roa (raw, json)
Hash identifier: R3HBHRWEdh2q1pdrty6bz4Z4uoB43D/pqmXt1xS56l0=
Subject key identifier: E9:10:12:E3:12:1D:98:14:14:F1:35:8F:A4:B1:35:7E:08:9F:89:F4
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 01902654DE1AD6A832A88E82F5DEA219E842
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/6RAS4xIdmBQU8TWPpLE1fgififQ.roa
Signing time: Mon 17 Jun 2024 13:13:34 +0000
ROA not before: Mon 17 Jun 2024 13:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 145.219.18.0/23 maxlen: 23
145.219.36.0/22 maxlen: 22
145.219.40.0/21 maxlen: 21
145.219.48.0/21 maxlen: 21
145.219.56.0/21 maxlen: 21
145.219.64.0/18 maxlen: 18
145.219.128.0/17 maxlen: 17
193.176.255.0/24 maxlen: 24
2a04:b0c4::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 17 Jun 2024 13:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:54:de:1a:d6:a8:32:a8:8e:82:f5:de:a2:19:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jun 17 13:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e91012e3121d981414f1358fa4b1357e089f89f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:bc:b2:35:24:04:1d:1a:ac:c7:bb:c0:c5:
6c:f6:58:80:35:04:c1:38:88:2c:59:9c:3d:7e:e0:
1a:3d:5f:d1:a5:7e:a1:f8:42:85:19:97:6b:ef:98:
9f:82:ca:50:24:d7:1b:da:1b:26:15:58:58:6e:4a:
ae:92:60:c2:c4:af:e8:48:23:d8:34:79:83:69:ba:
4d:b2:40:a9:09:00:63:a9:6e:9a:64:bd:f6:db:af:
60:9a:18:08:e9:30:4b:9a:6b:ff:e4:0a:3e:05:fd:
60:d4:6c:27:1c:1a:4e:fc:87:1e:a3:c8:a1:b9:35:
32:e2:fd:0b:1d:a6:16:1a:09:08:3e:78:6b:be:fa:
7b:6c:a1:75:81:aa:74:b0:47:ea:78:7d:9d:3e:d1:
a3:2f:37:52:07:98:cb:4d:3c:b0:a9:2d:88:0c:3e:
0e:ff:13:c9:9a:ff:69:a9:e2:fe:fb:d5:4d:d8:9c:
bd:98:9e:69:07:74:d9:48:e9:4f:9b:9f:50:d4:c4:
15:18:20:52:da:91:d4:f3:c3:c2:e5:68:73:a0:16:
99:9d:f1:a7:02:65:37:60:1c:32:97:81:a4:dc:2e:
b1:78:ef:5a:fc:75:47:c4:ff:ba:28:33:ce:18:7f:
71:57:bd:ab:cc:7f:b1:46:56:36:be:df:dc:57:ce:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:12:E3:12:1D:98:14:14:F1:35:8F:A4:B1:35:7E:08:9F:89:F4
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/6RAS4xIdmBQU8TWPpLE1fgififQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.18.0/23
145.219.36.0-145.219.255.255
193.176.255.0/24
IPv6:
2a04:b0c4::/30
Signature Algorithm: sha256WithRSAEncryption
2b:5f:ad:cb:7a:b6:50:ab:c4:47:62:ed:34:3b:90:5e:e9:c5:
9d:c0:db:19:a1:fb:7f:eb:f9:77:82:27:ce:4e:c3:86:2d:8e:
d0:53:ae:89:20:bd:57:38:70:bc:30:64:a0:8b:a4:f4:3f:41:
d1:ad:5f:09:39:e1:0d:2e:6e:a2:88:86:7c:b1:d5:b6:51:7f:
60:96:97:3c:c1:43:19:00:00:17:47:8c:5f:74:c6:aa:dc:a5:
63:51:65:4a:ca:45:64:c0:bd:f6:4f:fa:7b:32:04:56:e9:06:
9a:b0:5f:4f:51:74:07:b0:7b:0d:84:e1:a5:2e:fa:f7:b4:c4:
3e:44:da:35:2e:8f:5d:83:f4:15:35:d2:b8:fd:27:b9:03:00:
51:09:fb:0d:f9:4c:92:3c:68:2e:39:7a:b8:ae:4b:fe:e9:7f:
09:b6:71:88:c9:6c:06:6a:4b:f5:c7:59:6e:cb:8f:eb:83:a6:
ef:74:df:06:cb:72:6e:60:2e:8d:fd:a8:30:68:16:9b:2c:af:
d6:05:1a:81:e9:b9:86:9f:b8:2d:53:5d:cc:39:1f:ed:ab:ee:
d4:89:43:62:55:4f:f6:e1:09:6e:d6:21:ab:a5:79:7d:93:ef:
b9:f8:d7:58:95:e0:ce:b7:12:5b:30:9d:33:33:66:48:12:d3:
21:b1:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:18:01 2025 by rpki-client