Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6_fNM_dtZq6VvIzfeEO4k4pZEGY.roa
File: 6_fNM_dtZq6VvIzfeEO4k4pZEGY.roa (raw, json)
Hash identifier: T02bh4COyNZmXddaF6GaT8A4rx3nf3HFMf/oqpDQbkQ=
Subject key identifier: EB:F7:CD:33:F7:6D:66:AE:95:BC:8C:DF:78:43:B8:93:8A:59:10:66
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018FD41DB623C1F353AA045E865E2FC20ACB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6_fNM_dtZq6VvIzfeEO4k4pZEGY.roa
Signing time: Sat 01 Jun 2024 14:04:27 +0000
ROA not before: Sat 01 Jun 2024 14:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206286
IP address blocks: 45.141.24.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
91.217.236.0/24 maxlen: 24
178.239.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 09:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:1d:b6:23:c1:f3:53:aa:04:5e:86:5e:2f:c2:0a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 1 14:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebf7cd33f76d66ae95bc8cdf7843b8938a591066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:7e:b4:23:73:ba:a5:0e:32:dd:2b:f9:89:
81:ca:87:db:c8:23:24:45:21:20:da:f0:fb:d4:1e:
2e:5d:6e:9f:66:6e:23:3d:45:70:fd:b0:42:6d:a5:
13:fb:81:74:57:09:c4:2f:79:30:a7:19:f7:e5:84:
c3:e2:e6:8a:ea:65:79:46:80:11:86:44:b9:6b:49:
ab:41:ba:47:5b:3a:b5:d0:0c:cf:dc:aa:05:3c:43:
e1:72:57:3b:d5:a9:f3:ad:7f:9e:43:28:25:66:8d:
ad:81:10:76:dd:90:8a:5c:22:65:02:4e:a0:3b:00:
ed:21:18:ea:08:43:4b:ed:44:df:bd:b6:0b:83:66:
e9:d9:aa:85:05:8e:9e:03:f4:dd:4a:59:46:5a:75:
04:8f:0d:09:9b:58:06:9e:ae:f2:6c:8d:aa:d6:34:
db:61:a2:af:0c:40:06:f2:37:5e:8b:90:04:a1:b7:
2b:e8:f4:8e:cb:5c:d1:4e:50:33:e1:fd:ca:80:0e:
7e:61:84:bb:2e:a8:c5:f0:8c:62:d7:e7:92:67:09:
0c:6f:ad:c3:2e:14:92:14:60:43:53:8b:36:da:be:
c9:2c:98:42:2f:20:54:a9:f5:df:98:44:26:d9:37:
e4:4e:1f:e0:52:0d:1f:bb:f1:ec:5b:07:2c:86:35:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:CD:33:F7:6D:66:AE:95:BC:8C:DF:78:43:B8:93:8A:59:10:66
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6_fNM_dtZq6VvIzfeEO4k4pZEGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.24.0/24
45.144.225.0/24
91.217.236.0/24
178.239.199.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1e:c9:5a:07:83:4b:cd:76:9c:fb:46:ee:39:65:e1:1a:6f:
11:65:a3:2e:a0:b7:05:c5:36:9a:1e:78:b9:18:98:38:c3:1b:
fa:70:c8:34:1f:06:25:b6:3f:e7:1d:db:5d:6c:e6:1b:05:27:
89:56:3e:fc:b9:14:af:77:e9:33:a2:f3:39:d4:bf:04:33:9d:
2d:bb:d1:4e:56:b1:57:32:56:ec:ef:13:68:f9:5b:72:99:b9:
7e:47:71:43:e9:ab:be:8a:15:eb:36:ed:6b:cc:cb:f0:65:c9:
aa:7f:83:9e:c6:6f:23:34:7b:d7:59:5d:43:f9:40:95:7c:61:
e2:3b:72:e3:55:12:aa:fc:91:15:11:e2:c5:a2:6c:12:8a:6d:
ff:f5:69:23:44:ea:d4:36:38:a0:73:f6:c3:1e:a4:c7:6d:3c:
30:df:56:0e:4e:f4:09:b8:1d:91:ea:d8:b4:67:d0:e7:cd:42:
6c:15:73:4e:29:24:4d:be:16:ae:ae:76:cf:1f:6c:99:6f:b6:
7d:12:d7:4c:05:06:e8:de:6c:18:c2:ff:84:dd:a5:05:fd:54:
f3:c0:bd:5e:ce:78:63:06:1c:00:8e:52:b3:02:17:06:e8:d8:
ef:bb:56:98:64:46:ac:58:c7:3a:35:cd:b5:77:b5:d0:f5:01:
e7:b7:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 10:22:34 2024 by rpki-client on console-ams.rpki-client.org