Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/m6AY7Gl5krsknrvOvoRiAD-NUrU.roa
File: m6AY7Gl5krsknrvOvoRiAD-NUrU.roa (raw, json)
Hash identifier: qw65vK+2cFBNsxQdMRfKJ0kNvnRMhWoQdCCYfb7VsUc=
Subject key identifier: 9B:A0:18:EC:69:79:92:BB:24:9E:BB:CE:BE:84:62:00:3F:8D:52:B5
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 0188DDCC08396723EC73C27F9879310F3757
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/m6AY7Gl5krsknrvOvoRiAD-NUrU.roa
Signing time: Wed 21 Jun 2023 11:51:56 +0000
ROA not before: Wed 21 Jun 2023 11:51:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8697
IP address blocks: 217.23.32.0/20 maxlen: 24
213.186.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 07:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:cc:08:39:67:23:ec:73:c2:7f:98:79:31:0f:37:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Jun 21 11:51:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba018ec697992bb249ebbcebe8462003f8d52b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:8a:25:be:ab:42:b1:2b:d7:f8:6c:fe:5b:
5c:18:fc:be:43:69:88:8f:33:d3:86:40:e6:d7:ea:
0a:f8:f4:0a:36:8e:8d:b2:72:a6:55:f7:2f:df:0c:
28:56:45:d3:69:fa:f6:b2:a7:a3:4f:9c:3a:f8:86:
2d:73:f8:43:fe:7f:e7:e3:d9:15:ac:68:06:a2:a8:
a9:0f:6e:17:9f:2e:e3:fc:12:3e:fa:29:2e:f8:07:
16:16:21:58:b9:c1:7b:7c:6a:65:b1:a8:94:c3:32:
24:52:ce:aa:43:8e:a4:bb:17:e2:63:7e:26:9d:8b:
91:7b:82:65:af:ca:44:a3:5f:52:61:65:f8:ea:6b:
a6:54:46:2f:45:2d:ca:ef:26:5b:69:21:fb:60:72:
30:cc:e9:dc:4d:7c:16:0b:cc:52:e3:8f:2c:6c:f9:
fd:6c:16:78:0e:9a:18:38:53:a6:62:26:06:a7:52:
7a:77:b0:02:61:7d:10:6a:f0:17:64:9d:95:a2:39:
d9:9a:92:34:50:fd:72:ea:ba:db:91:6b:65:02:91:
25:83:a4:7d:e6:5f:80:62:f5:8d:ef:5c:26:a5:b2:
15:3c:58:0b:ca:13:73:0a:be:e7:f0:79:9f:95:ed:
4d:3b:aa:05:2e:be:85:85:d7:2b:d2:29:4b:74:ff:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A0:18:EC:69:79:92:BB:24:9E:BB:CE:BE:84:62:00:3F:8D:52:B5
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/m6AY7Gl5krsknrvOvoRiAD-NUrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.186.164.0/24
217.23.32.0/20
Signature Algorithm: sha256WithRSAEncryption
22:fd:8f:02:3a:b2:7e:ab:35:5c:5c:c0:cb:ae:ae:1a:c3:cd:
c3:1a:ca:fa:ed:dd:ea:53:cd:4d:21:df:16:56:e5:43:8a:cc:
91:05:fb:ce:52:a3:71:f7:d5:ba:7a:74:49:6b:31:0e:66:d6:
9c:6c:cb:70:88:42:32:f0:09:47:38:0a:99:52:59:85:4a:1f:
08:d1:e2:20:54:63:c2:e9:49:13:ad:a5:f6:c3:be:ba:22:ab:
7f:28:49:ad:42:7b:41:3c:04:13:2b:3b:c4:8a:e1:ca:2c:92:
90:23:34:7e:38:7e:75:91:9b:e7:73:19:5f:13:82:d4:c6:5e:
2d:61:23:f4:b4:a9:84:f8:e7:1a:1b:4b:c9:df:df:e7:7c:7e:
0b:2a:90:c8:2c:0c:34:0e:d3:de:8b:eb:2a:82:4e:a1:eb:b2:
13:44:a6:8e:56:26:20:c8:4d:ed:7e:1c:80:aa:39:71:38:dc:
43:b5:83:7a:f9:2e:9d:78:0c:96:f0:e0:40:82:9e:3d:f0:9b:
14:13:a7:f5:a3:fd:49:0e:4e:6c:27:b0:35:ba:d0:22:3a:98:
ac:1f:88:27:34:75:e4:94:a2:d7:0c:8e:34:be:2c:6a:72:09:
3d:76:35:15:7f:7c:b5:56:41:51:80:7d:c0:54:6b:34:42:c8:
a7:48:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:44 2024 by rpki-client on console-ams.rpki-client.org