Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/6NxZ9AobII-p5HWIeyxSnXmz9CY.roa
File: 6NxZ9AobII-p5HWIeyxSnXmz9CY.roa (raw, json)
Hash identifier: Xf2rQs9Nj0/+ggQFmiRJShquhf4zMHjgW6WF7IZMhnA=
Subject key identifier: E8:DC:59:F4:0A:1B:20:8F:A9:E4:75:88:7B:2C:52:9D:79:B3:F4:26
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 01856B6E885C89B334B53BEEE060D4119B1A
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/6NxZ9AobII-p5HWIeyxSnXmz9CY.roa
Signing time: Sun 01 Jan 2023 03:44:44 +0000
ROA not before: Sun 01 Jan 2023 03:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197792
IP address blocks: 185.37.184.0/22 maxlen: 22
31.209.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:88:5c:89:b3:34:b5:3b:ee:e0:60:d4:11:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Jan 1 03:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8dc59f40a1b208fa9e475887b2c529d79b3f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:1a:44:1b:9c:32:a4:5b:22:77:23:0e:a2:
fb:a7:f9:a9:b1:09:a7:15:36:dc:9f:f1:4b:29:01:
be:18:1c:f5:d6:fc:17:54:bc:62:d2:35:cd:52:2b:
54:77:6e:b4:d6:8c:48:45:8e:43:a2:59:a2:9b:53:
91:b4:5c:67:cc:9e:ce:c6:5b:00:dc:2d:93:dd:50:
dd:6c:99:01:cc:3a:47:74:64:a0:9f:da:fc:52:7c:
6e:bc:17:b0:16:e3:da:01:d6:ba:2a:da:58:3c:95:
e6:0d:29:db:6b:72:7b:a4:08:1d:45:5a:94:52:78:
7c:8f:21:7e:51:69:3f:9f:dc:16:5a:fa:f3:57:5c:
5b:95:d4:ce:e9:66:af:2b:5e:1f:16:25:bb:4e:32:
ab:71:ca:64:5a:a3:fc:28:0a:36:41:a8:b5:31:ab:
59:5d:3e:eb:cf:a1:c7:cd:2c:eb:74:e3:57:0d:c5:
de:df:20:d7:4e:2d:83:42:52:aa:41:0c:15:7d:5c:
01:b0:8b:73:46:b2:3c:a8:e6:d5:bc:e8:9c:25:e3:
ab:82:72:21:d5:3a:d9:a1:a7:2d:09:ba:e0:e6:58:
9f:bf:42:4d:b1:95:96:25:a9:e4:93:ff:72:86:c8:
04:63:f3:b5:51:37:f5:7b:e7:d6:f1:19:9d:49:c0:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DC:59:F4:0A:1B:20:8F:A9:E4:75:88:7B:2C:52:9D:79:B3:F4:26
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/6NxZ9AobII-p5HWIeyxSnXmz9CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.96.0/20
185.37.184.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b7:7b:b4:59:13:55:28:52:68:c0:cb:33:64:c2:af:13:76:
3d:30:6b:f9:d7:cf:de:ac:1a:5e:73:06:b8:d3:f8:2d:9f:b0:
ab:b0:4c:bb:74:8f:76:86:18:75:df:a7:72:22:50:80:d0:7d:
ef:b1:95:94:4f:76:33:cf:89:29:33:0b:bf:74:c9:5f:e9:f6:
22:cd:8b:dd:38:26:ee:cf:bc:d3:62:ef:90:f9:21:2d:17:2c:
ba:49:37:de:15:56:a2:28:75:c0:d9:4e:06:6b:01:62:85:fd:
21:4a:09:d5:1c:34:90:43:33:93:5e:11:9f:39:20:3f:56:5d:
ba:4c:c9:b6:66:c9:79:01:26:9d:fe:f1:a8:7c:13:7b:32:8b:
7e:7a:f7:cf:0a:d0:da:52:34:a7:16:f5:74:47:1d:f3:e0:8f:
c3:7b:c1:88:dc:7b:64:06:b9:5d:ce:38:cb:10:e4:e3:24:ca:
90:4f:dd:a7:60:1f:93:0c:de:45:d1:10:dd:1b:6a:b1:a5:ef:
02:0c:63:17:95:96:3e:b2:5d:29:24:91:15:97:fd:0e:4c:e6:
51:1b:34:bb:1d:9a:6b:11:3f:08:28:27:aa:13:7c:a2:ec:79:
fe:ad:c3:09:b8:8d:d2:da:41:4d:87:2e:0e:98:78:ef:d9:c6:
e5:bc:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:51 2024 by rpki-client on console-ams.rpki-client.org