Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/6AsfiWPf6t5ZobF4Svc5c_y1jBA.roa
File: 6AsfiWPf6t5ZobF4Svc5c_y1jBA.roa (raw, json)
Hash identifier: 3bTfyVnCxZlR0HjlCgV+wFKA7yJ+DCsSpqrhaOGsASI=
Subject key identifier: E8:0B:1F:89:63:DF:EA:DE:59:A1:B1:78:4A:F7:39:73:FC:B5:8C:10
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DC9DAD684B0EF44C9BB1A959A1C3A
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/6AsfiWPf6t5ZobF4Svc5c_y1jBA.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39879
IP address blocks: 212.183.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c9:da:d6:84:b0:ef:44:c9:bb:1a:95:9a:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80b1f8963dfeade59a1b1784af73973fcb58c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:74:37:47:ec:0e:06:43:3d:63:bc:67:f2:
21:50:96:be:51:2f:0e:70:4c:13:b8:28:29:e4:0d:
d6:c1:ec:21:76:c4:f5:c7:f5:37:59:b8:71:33:10:
51:d8:41:26:27:74:8e:cd:a0:fd:be:b7:21:60:ad:
d6:f8:eb:71:5c:76:2b:01:03:db:05:4b:c7:b4:32:
b8:42:24:e6:10:9e:7a:3a:6c:14:ad:ba:ac:49:e4:
32:ab:24:29:36:9d:e3:5f:15:93:15:d7:bb:2d:1b:
fe:77:4b:6d:03:33:c2:f2:56:26:dd:b6:a7:a4:0b:
27:8e:d7:24:57:5e:1f:2c:3b:d8:c9:26:38:d0:b1:
f6:fb:c0:2f:1f:87:4d:fd:5a:f2:61:7e:8c:cb:7b:
52:eb:19:60:bd:26:21:64:da:97:a3:86:cb:f5:f3:
09:d2:c1:7d:a8:35:d1:ee:6f:a4:ae:1e:04:b5:7e:
d7:d0:a3:ec:41:af:22:d7:44:4c:11:55:46:03:6c:
ed:14:0f:08:97:1e:2c:58:ab:6e:09:d2:59:46:ee:
1a:fd:14:be:1b:03:9a:5b:cf:21:6c:b1:b7:15:10:
2f:00:63:c2:db:37:ab:e9:1f:fd:de:f3:71:d4:4f:
e7:49:66:31:99:5b:ea:6d:72:2c:60:81:cf:76:52:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:1F:89:63:DF:EA:DE:59:A1:B1:78:4A:F7:39:73:FC:B5:8C:10
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/6AsfiWPf6t5ZobF4Svc5c_y1jBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:de:fe:4c:4f:07:38:dd:20:d9:5a:c8:bb:f9:eb:3a:f5:89:
4f:9c:ed:58:09:3e:aa:aa:60:31:49:4c:5d:1d:30:40:93:61:
33:8c:04:bc:e0:fb:d4:86:05:e4:ad:7b:59:cb:d8:f4:5a:3a:
b5:97:50:b1:56:89:dc:a7:e8:3c:7f:84:db:dd:96:1f:05:43:
2c:1e:96:84:d4:38:3e:be:ec:6a:69:10:83:ea:f6:16:e7:34:
0a:ae:59:a8:d3:f1:f4:6b:ec:42:cb:2a:9c:da:93:90:f9:89:
5a:66:28:55:b4:80:d7:02:a6:59:06:20:ff:2c:01:3f:39:c1:
49:31:b2:a7:1e:13:93:fd:fa:92:5a:e7:2a:14:57:b5:f0:63:
17:9a:44:c1:91:b6:46:dd:6f:9e:8e:82:68:3e:b8:33:fa:18:
be:d5:ad:4d:83:05:bf:8e:c8:74:97:f5:82:86:52:1c:f9:8e:
3a:46:ef:47:c4:3e:81:75:30:96:e0:6f:8f:13:20:fc:78:1c:
ff:34:56:fa:39:36:55:84:9f:58:be:29:59:74:15:bd:f1:1c:
e9:e5:bd:5d:a5:51:5c:87:b1:bc:ab:e8:59:72:a7:be:d1:f3:
de:67:2e:96:45:87:11:76:2e:25:e0:38:a7:de:91:ea:9d:37:
0c:20:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:34 2024 by rpki-client on console-fra.rpki-client.org