Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/6JaZrh6Np7Fk1oepr3TkrNvtyE4.roa
File: 6JaZrh6Np7Fk1oepr3TkrNvtyE4.roa (raw, json)
Hash identifier: y2iBeGxwaNRVi3AtRj2ISbgWWihsTB6YLNHC2IDbUYg=
Subject key identifier: E8:96:99:AE:1E:8D:A7:B1:64:D6:87:A9:AF:74:E4:AC:DB:ED:C8:4E
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7D0F2F4D178C064D3B8BB820480BC
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/6JaZrh6Np7Fk1oepr3TkrNvtyE4.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201924
IP address blocks: 185.126.238.0/24 maxlen: 24
2a11:840:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d0:f2:f4:d1:78:c0:64:d3:b8:bb:82:04:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89699ae1e8da7b164d687a9af74e4acdbedc84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:f3:50:0d:59:34:1a:e3:1b:cf:38:21:83:
0a:3d:89:81:12:55:4d:57:f4:c4:9a:b2:11:1e:10:
d1:57:9d:00:0a:39:ab:61:47:8c:87:87:86:0e:ae:
11:34:98:f7:7a:eb:71:2f:23:13:82:10:3d:6f:89:
7c:a6:72:83:e5:59:b9:7c:3f:66:a4:da:53:02:3c:
d7:4d:7e:01:2d:86:50:92:fd:c5:70:2e:95:bc:50:
4d:96:7d:48:9b:80:a1:bd:5a:bb:24:cd:e2:1e:8e:
bc:b6:cd:8b:0a:a8:95:60:df:a4:f7:db:a3:df:57:
27:fd:c7:74:03:49:13:6d:88:77:84:e0:26:45:14:
3c:8d:aa:02:84:62:6d:85:70:d2:9c:97:33:c0:67:
53:e5:27:ca:b5:fd:c9:19:69:3b:8a:95:1f:35:c7:
ad:d1:90:ac:a9:de:e2:37:31:e8:51:4d:85:4f:11:
0b:c8:94:89:b5:ee:f5:b5:10:18:da:1c:0d:e2:3d:
b4:b4:88:cc:4a:61:6c:23:2d:91:2c:58:4a:23:72:
ab:3e:e2:56:7a:cd:84:63:69:57:e4:9b:54:3a:2e:
34:c8:bc:1e:39:b1:97:5b:cc:c5:01:d4:b8:b3:95:
e8:c5:79:f5:e7:56:6a:95:c8:b8:4d:87:03:65:47:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:99:AE:1E:8D:A7:B1:64:D6:87:A9:AF:74:E4:AC:DB:ED:C8:4E
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/6JaZrh6Np7Fk1oepr3TkrNvtyE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.238.0/24
IPv6:
2a11:840:20::/48
Signature Algorithm: sha256WithRSAEncryption
18:5e:70:82:df:8d:14:85:2f:d0:ea:14:54:2e:70:63:23:4e:
7a:17:18:dc:92:ff:fe:fe:fc:02:65:e2:29:d0:ed:52:18:93:
22:86:e7:87:4f:31:d0:e4:89:b1:b1:ff:cf:8e:ed:b5:fd:02:
82:55:c1:e5:82:fe:4d:df:85:99:fe:71:13:96:d8:27:7c:de:
65:bf:bc:f3:27:f3:ba:23:d1:76:c5:dd:11:16:1a:7a:c3:75:
15:b2:48:14:70:a4:d2:b7:97:60:44:e8:88:c3:95:db:1c:64:
0d:6f:41:36:e8:2d:50:79:0b:90:d3:c2:7a:bd:57:06:3c:e6:
f8:74:cd:52:47:22:4e:f1:7d:cf:18:28:c5:ad:d4:e6:be:a8:
1b:79:98:25:22:36:6b:93:da:1b:e2:31:ed:c4:d9:5f:c8:50:
31:13:09:cf:2f:7f:da:19:14:54:11:b5:e4:f4:ae:08:26:f8:
16:58:67:3e:3d:04:ed:3e:33:1e:b0:7c:5e:ac:41:44:8d:7f:
59:98:3f:44:a8:a2:9d:0e:70:4e:f2:29:0e:bc:0c:ec:79:0a:
35:18:20:80:8a:a8:d6:85:7a:fc:96:d9:3b:65:31:20:e0:26:
c4:dc:4c:b0:c2:6c:5b:30:52:38:4c:38:2b:c0:e5:21:6f:de:
60:7f:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org