Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6mi8Lqoy9W-G5XK7BG1pAW7DTsQ.roa
File: 6mi8Lqoy9W-G5XK7BG1pAW7DTsQ.roa (raw, json)
Hash identifier: l1DjArmnUjD+GLNP5USJ5dWbgr9Qtjq1KeHZkYciMu8=
Subject key identifier: EA:68:BC:2E:AA:32:F5:6F:86:E5:72:BB:04:6D:69:01:6E:C3:4E:C4
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B012CA168F78943B79037BE531CF3ECE0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6mi8Lqoy9W-G5XK7BG1pAW7DTsQ.roa
Signing time: Thu 05 Oct 2023 18:49:43 +0000
ROA not before: Thu 05 Oct 2023 18:49:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
185.177.27.0/24 maxlen: 24
81.28.253.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.238.92.0/24 maxlen: 24
45.132.80.0/22 maxlen: 24
91.244.198.0/24 maxlen: 24
91.244.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 21:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:2c:a1:68:f7:89:43:b7:90:37:be:53:1c:f3:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 5 18:49:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea68bc2eaa32f56f86e572bb046d69016ec34ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:4c:c4:9c:9d:d5:52:9b:1b:f3:aa:39:2f:
cc:d3:dd:3d:05:ab:29:10:23:dc:f6:91:bd:00:82:
49:e7:26:9d:37:89:39:c0:4a:57:14:fe:fd:d6:dc:
0d:43:86:26:0b:67:b8:57:1a:fe:bf:5c:76:07:63:
3a:f4:3c:7a:c5:e7:13:9f:c4:12:fb:64:27:4c:cf:
6d:29:d2:5f:f1:7c:7e:4d:5d:e4:89:17:2e:19:d2:
af:45:35:3d:61:ce:96:99:ff:a7:41:fb:b8:46:a5:
bf:7f:95:7b:a8:88:a5:61:62:fd:4d:b4:87:14:c9:
f2:15:02:60:6e:e3:d6:4c:ce:c6:97:6b:d1:71:b4:
e7:f0:85:7b:66:db:f3:e5:fa:27:11:08:16:2f:8d:
cd:6e:1f:e5:74:21:9b:0b:46:c7:5e:84:3a:06:a1:
9e:69:16:ee:df:1c:ee:58:38:53:26:4a:ab:11:89:
d6:9b:aa:d4:c6:e1:0e:73:55:cd:a4:36:06:6c:dc:
f6:95:a1:ad:27:5e:4d:67:31:cf:a6:e0:df:61:66:
54:24:92:24:02:bb:9e:26:08:4d:11:a8:4a:07:28:
07:9a:94:49:e7:20:34:8b:d4:e6:4b:e0:e9:98:50:
a4:75:00:e2:26:9d:0a:b9:26:47:b4:d2:87:4b:2f:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:BC:2E:AA:32:F5:6F:86:E5:72:BB:04:6D:69:01:6E:C3:4E:C4
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6mi8Lqoy9W-G5XK7BG1pAW7DTsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.253.0/24
91.238.92.0/24
91.239.149.0/24
91.244.198.0/23
176.105.228.0/24
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0c:c9:eb:9d:d3:1d:57:a9:55:c1:32:b0:ef:52:8c:8a:0e:
ac:02:79:ea:69:11:6c:20:f9:19:00:25:ee:06:47:df:59:5c:
b8:7f:df:0b:b8:e9:8e:77:45:0c:d4:d3:2b:a7:1d:6d:6a:5f:
5e:8a:44:7b:14:3e:4a:46:5c:b5:b1:4c:26:8e:c6:0d:e1:59:
5a:65:dd:14:0c:32:77:31:9b:9e:66:4d:9a:c4:3c:48:e6:a4:
fc:91:a9:e2:f3:a2:b9:fc:31:a4:95:be:05:77:79:be:f9:8e:
10:ae:6c:96:19:55:f7:78:58:1a:75:16:94:bf:a5:9e:1e:c9:
c9:23:91:f1:53:79:1c:72:4d:45:a2:cd:63:50:90:f6:04:45:
08:38:da:08:92:b0:89:32:45:7f:4e:9d:8c:89:2d:28:a3:bf:
c4:b4:f3:1f:0d:df:8a:10:9a:a2:4f:13:9d:22:2a:00:5a:f0:
34:e4:54:6c:be:06:d7:a0:66:16:af:0e:e0:40:e9:d5:38:cd:
dd:91:e2:6d:dc:a8:8c:7a:91:83:05:9a:ed:26:26:46:24:5e:
d1:05:12:4c:67:f5:55:c4:64:91:bb:32:ac:7c:8b:dc:e5:eb:
91:05:10:e4:90:1d:e8:0d:21:81:a4:01:18:12:a6:48:0e:a3:
4c:3a:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org