Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6IBP6aOs0cPw6QhyMxP0aZhcXuA.roa
File: 6IBP6aOs0cPw6QhyMxP0aZhcXuA.roa (raw, json)
Hash identifier: pHnMSwj1I6Hhv02f33aVwqxrt2y+5aL17Hc7O81t26o=
Subject key identifier: E8:80:4F:E9:A3:AC:D1:C3:F0:E9:08:72:33:13:F4:69:98:5C:5E:E0
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018B9A4419B6310788BB830AD5D7005863B7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6IBP6aOs0cPw6QhyMxP0aZhcXuA.roa
Signing time: Sat 04 Nov 2023 12:17:16 +0000
ROA not before: Sat 04 Nov 2023 12:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 94.241.172.0/24 maxlen: 24
94.241.173.0/24 maxlen: 24
94.241.174.0/24 maxlen: 24
94.241.175.0/24 maxlen: 24
178.253.22.0/24 maxlen: 24
178.253.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:44:19:b6:31:07:88:bb:83:0a:d5:d7:00:58:63:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 4 12:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8804fe9a3acd1c3f0e908723313f469985c5ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:68:5f:a6:cf:f5:2f:67:0a:a7:7d:b1:14:
10:53:62:75:7d:a8:d2:d6:95:4d:2c:fb:57:a9:df:
b3:48:01:21:d4:64:4b:98:40:82:2a:f3:51:d8:c2:
29:09:6f:90:bb:39:58:c3:cf:c6:9f:62:85:fe:45:
06:1b:e1:79:e1:10:ad:68:7a:90:7e:46:97:ce:2c:
c6:50:c9:6b:e8:b0:c0:2c:c3:62:b8:af:4b:47:8d:
44:0a:2b:93:36:60:93:93:42:81:10:81:99:32:d7:
0e:e1:d9:94:4b:c0:46:83:9d:76:17:53:c4:c7:75:
b4:3b:36:cc:ec:3f:5a:2d:4e:98:82:e9:a5:58:78:
fa:95:c6:bb:2a:31:4e:0b:a3:ee:a0:a4:66:0a:af:
c4:c1:c2:8b:c6:66:e9:1b:f8:1a:52:03:39:4d:d4:
22:fc:fb:14:eb:53:31:94:90:70:96:0a:fe:58:bc:
7b:22:4a:b1:de:19:23:21:01:5d:6c:00:3e:5b:96:
e9:20:1a:9f:00:0c:dc:7e:6d:e3:04:ab:4a:81:6b:
ec:f1:cf:1b:92:d9:dd:4d:be:47:5b:71:0f:2e:08:
06:be:29:07:01:06:ad:1c:02:c2:e0:73:e3:09:07:
a4:58:df:21:c5:46:a5:f7:49:73:d8:89:9d:7e:56:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:80:4F:E9:A3:AC:D1:C3:F0:E9:08:72:33:13:F4:69:98:5C:5E:E0
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6IBP6aOs0cPw6QhyMxP0aZhcXuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.172.0/22
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
27:ed:ff:cf:e0:cd:7b:2d:a2:40:be:02:72:98:dd:5e:22:4a:
94:c0:26:3e:ee:08:70:1b:c3:c9:7f:1d:05:ba:5c:47:a8:cb:
dd:4a:8e:73:58:cc:8b:91:cd:cd:09:54:54:2a:b8:e1:8e:98:
ae:ab:65:30:41:1a:36:d0:0a:e1:4c:ee:61:fd:f6:25:53:ba:
c3:24:96:68:7e:ff:e3:8c:2a:e8:26:6d:44:52:34:85:75:76:
da:69:1a:a8:64:f0:48:c0:a9:e2:b1:67:42:e0:48:22:13:e9:
ec:38:64:32:6a:d3:ca:aa:c3:ec:2c:0c:76:99:f0:3f:bd:fa:
a3:37:d5:ba:4a:3d:24:41:dd:9a:09:bb:62:da:af:0a:07:1c:
ee:ae:05:51:89:98:31:e7:a1:11:fd:e4:ec:24:56:bb:51:27:
03:77:9c:f9:f6:a6:79:92:15:03:02:a7:64:1f:60:00:ff:00:
07:d6:ca:67:f9:da:9a:8f:d1:2d:40:86:bf:58:71:b2:64:54:
42:3c:24:e6:91:b0:be:66:9b:53:ba:f9:7b:ce:c2:67:96:4a:
52:01:94:a4:39:d4:de:9a:cd:e3:17:86:16:0b:b5:71:ea:20:
65:f8:78:df:1f:5e:10:3f:6d:79:60:56:40:7e:0f:8d:14:67:
0d:cb:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org