Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/7M2UH2T33BsC76VJDKAoocBPPkE.roa
File: 7M2UH2T33BsC76VJDKAoocBPPkE.roa (raw, json)
Hash identifier: lFAS/4+k0DjLv9HYu0sfRsLmVd+Ezudi1ePiEUIZ200=
Subject key identifier: EC:CD:94:1F:64:F7:DC:1B:02:EF:A5:49:0C:A0:28:A1:C0:4F:3E:41
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 01856E142AB2EA8435EA38DD89CC607C0438
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/7M2UH2T33BsC76VJDKAoocBPPkE.roa
Signing time: Sun 01 Jan 2023 16:04:53 +0000
ROA not before: Sun 01 Jan 2023 16:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213206
IP address blocks: 91.239.145.0/24 maxlen: 24
2a07:e0c0:1::/48 maxlen: 48
2a07:e0c0:4::/48 maxlen: 48
2a07:e0c0:2::/48 maxlen: 48
2a07:e0c0::/30 maxlen: 30
2a07:e0c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:2a:b2:ea:84:35:ea:38:dd:89:cc:60:7c:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Jan 1 16:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eccd941f64f7dc1b02efa5490ca028a1c04f3e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:df:70:5c:00:ff:69:cf:ed:ee:0f:5d:2d:
34:6a:55:91:cf:a5:d6:33:c7:43:e0:d5:9c:de:76:
b1:86:98:19:d1:d2:d6:94:27:35:e7:2d:fc:d1:76:
3f:35:47:0e:79:31:85:5f:3e:de:c1:ae:39:89:32:
0b:a5:8d:8c:07:ef:25:94:23:6a:be:b1:07:73:d7:
e0:20:5d:26:bf:99:3a:02:ae:06:6a:6a:de:80:a5:
73:a6:62:78:23:ef:c2:d0:86:f7:79:46:7f:5d:ef:
d2:4e:81:1c:c7:24:c9:2d:2e:7f:bf:5e:23:cf:e1:
ff:e5:a5:c1:e9:5b:3b:df:5d:94:7e:d5:ae:47:d9:
33:03:a0:df:86:bf:98:29:e6:dc:af:fc:5f:95:58:
07:79:2f:1b:de:0b:3e:c3:10:d5:48:93:b1:dd:98:
b7:d1:17:3a:2a:79:7c:31:9e:89:9f:35:19:0a:78:
a9:7e:73:27:a6:a5:1e:ae:c1:e5:49:7f:da:61:e2:
b0:4d:c1:d1:0a:d7:30:92:75:fd:a5:16:ed:b5:5f:
54:7f:50:23:87:1e:39:b5:d8:1e:99:e3:c1:29:1a:
d8:2f:eb:cc:cd:a2:9c:d6:e2:07:70:72:31:a2:12:
06:ff:af:a3:41:fe:c1:91:2f:9f:0b:dc:19:ba:41:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CD:94:1F:64:F7:DC:1B:02:EF:A5:49:0C:A0:28:A1:C0:4F:3E:41
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/7M2UH2T33BsC76VJDKAoocBPPkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.145.0/24
IPv6:
2a07:e0c0::/30
Signature Algorithm: sha256WithRSAEncryption
31:ef:d1:95:0c:e6:7f:8c:60:d9:0e:bf:32:ef:91:e3:01:e9:
cb:7a:bd:50:71:40:58:c5:cd:0c:94:6e:7c:df:5d:cd:6f:34:
73:2c:08:3c:23:ac:c5:bd:67:c8:39:5d:de:75:e5:3c:e6:12:
d9:da:99:fa:05:ef:d4:1a:78:47:c0:af:b6:f5:5b:3c:68:1e:
83:b6:9d:5d:19:f6:12:2f:ac:5a:1f:20:cc:39:de:31:48:31:
71:fd:fb:98:d8:f2:ff:ef:4c:bc:58:33:b0:9b:00:72:98:cc:
3b:b5:e1:b8:33:0d:c3:60:07:bc:df:c5:08:9b:40:bb:89:cc:
f0:68:58:7f:29:31:16:82:a3:97:0d:2d:cc:e4:bc:e7:43:5e:
e7:0f:26:85:99:02:da:f5:55:e2:2f:99:87:f4:4d:4d:f6:c0:
30:ce:6e:70:0e:ab:fd:fb:0d:4a:0b:ac:17:ba:55:0b:11:c1:
e3:ec:b0:eb:f0:03:e1:4d:c7:24:0d:3b:62:e4:44:aa:70:8c:
58:c2:7c:fd:ca:41:5c:e9:4a:08:d3:cd:9a:5f:df:d3:3c:6d:
73:fe:5f:30:24:86:9b:b8:ab:cc:80:e1:dc:67:56:8c:6f:91:
20:50:55:f5:54:ab:15:43:9a:91:c9:c8:8c:14:5b:b0:08:c0:
6a:b2:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org