Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/3W6sTyT81Jht4Z-xkF10_-XSlCE.roa
File: 3W6sTyT81Jht4Z-xkF10_-XSlCE.roa (raw, json)
Hash identifier: vtKBSENghX+/Id9DaXsBOE5l5EWbD1gmp2YGvOLABZs=
Subject key identifier: DD:6E:AC:4F:24:FC:D4:98:6D:E1:9F:B1:90:5D:74:FF:E5:D2:94:21
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018C6D66DA63DE3CA50547BCC3851B76F56D
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/3W6sTyT81Jht4Z-xkF10_-XSlCE.roa
Signing time: Fri 15 Dec 2023 12:15:06 +0000
ROA not before: Fri 15 Dec 2023 12:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8732
IP address blocks: 194.149.64.0/24 maxlen: 24
2001:b08:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:66:da:63:de:3c:a5:05:47:bc:c3:85:1b:76:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 15 12:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd6eac4f24fcd4986de19fb1905d74ffe5d29421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:97:71:d3:9d:b1:d6:12:6e:6a:c0:16:e6:
9c:fe:a5:ca:ce:e5:c8:ac:e0:3a:3f:56:cd:b0:ca:
f7:f1:92:c9:be:5e:d2:48:e2:09:04:27:24:20:0b:
37:cf:77:b4:27:70:11:e0:d5:7c:ae:16:e6:71:3a:
21:80:7a:c0:7a:75:f0:9e:70:26:12:38:60:53:0f:
24:fd:76:8c:95:ca:e2:cb:62:24:ec:a8:0a:3a:8f:
73:60:3a:c9:80:61:a9:33:81:3e:e8:42:ea:16:87:
80:2d:57:71:27:b8:99:7a:75:61:17:70:3b:aa:7d:
79:b6:6d:dd:3f:a7:2d:e3:1c:21:f1:89:42:5f:58:
c9:b5:3f:19:8d:05:89:27:cd:93:85:af:58:e2:5b:
5a:57:88:6c:e0:37:80:86:aa:5a:7a:a8:0a:e8:93:
01:de:83:d5:c2:bc:61:a6:cb:df:cd:16:83:a2:b3:
ff:37:67:a4:2d:6b:05:36:15:34:d6:43:ec:7b:87:
25:74:b4:f5:e2:da:45:f4:e2:c4:73:9a:b0:89:4e:
ce:45:98:30:eb:a1:04:ca:e7:6b:3d:93:50:09:83:
8c:70:5c:c6:0e:5f:43:e3:0c:48:14:88:15:75:6f:
7f:07:50:59:c8:cb:3a:d7:d2:3f:e1:da:b2:c2:b6:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:AC:4F:24:FC:D4:98:6D:E1:9F:B1:90:5D:74:FF:E5:D2:94:21
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/3W6sTyT81Jht4Z-xkF10_-XSlCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.64.0/24
IPv6:
2001:b08:22::/48
Signature Algorithm: sha256WithRSAEncryption
86:5c:d0:f6:98:6f:b1:66:22:42:6b:e0:88:04:e5:a2:06:74:
9f:18:e7:5e:8a:43:ca:65:25:6c:d7:03:10:fd:f0:aa:aa:25:
27:89:aa:c0:13:f5:8e:1e:5b:31:1e:c6:bc:6c:e3:98:8e:78:
ae:ee:b0:ea:bb:04:10:72:a5:c4:4d:c2:8f:2b:1d:e7:f6:8b:
0f:41:57:d8:de:50:76:c0:82:69:9e:a7:94:46:b3:77:8a:34:
4b:be:e2:b4:57:27:8d:25:70:17:eb:4b:0b:d0:d0:21:c1:e0:
0d:b2:eb:d7:f4:14:bd:1d:9a:cf:f8:7c:01:49:08:42:a6:a5:
45:77:26:27:8e:c8:f9:49:26:13:d5:2b:9d:a7:fc:5b:4f:a0:
6e:53:50:ce:b9:52:68:98:08:e0:b6:44:df:54:9d:8d:47:e4:
61:95:fa:d7:64:d5:3d:3a:3d:99:06:6c:5f:3b:a4:70:7d:67:
17:fd:ef:57:6d:99:4b:56:b2:b1:74:3c:f8:46:ac:e4:e7:f9:
96:7d:c3:7d:4d:d2:8a:2a:c7:d7:ee:2f:3f:5b:d8:5a:df:21:
5a:01:c5:a5:b4:dd:aa:79:d2:61:21:5a:e9:e2:72:13:c7:cc:
3b:f9:20:a5:eb:1e:a6:1c:e9:37:aa:90:69:89:4f:82:48:cb:
13:12:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org