Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/6ujKz4CnuFikU4LPWP4o2SgrPFc.roa
File: 6ujKz4CnuFikU4LPWP4o2SgrPFc.roa (raw, json)
Hash identifier: yoZualHyCg//Xwnf7DnkPQiZKFMye7VSmk4aPSWI/wY=
Subject key identifier: EA:E8:CA:CF:80:A7:B8:58:A4:53:82:CF:58:FE:28:D9:28:2B:3C:57
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 018CC7950DD4DA2FEABDA7C3E269D6862BDE
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/6ujKz4CnuFikU4LPWP4o2SgrPFc.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2a12:79c2::/32 maxlen: 32
2a12:79c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Jan 2024 19:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0d:d4:da:2f:ea:bd:a7:c3:e2:69:d6:86:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae8cacf80a7b858a45382cf58fe28d9282b3c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:53:c5:58:0f:29:b1:62:5c:16:64:c6:a5:
c5:f1:75:61:08:f0:55:de:4c:89:0c:bf:6c:9a:8b:
3e:25:be:ac:ee:22:90:aa:8c:b0:5a:64:02:7f:6e:
dc:63:87:70:3c:1f:2b:25:73:a9:cd:1d:45:8f:30:
c2:69:3b:c6:d6:03:af:de:85:6d:78:eb:a2:4a:2c:
09:4a:4c:d9:00:3e:b4:a8:44:c0:92:44:a6:da:40:
45:0a:c3:3f:b8:3d:9c:13:3c:88:e1:81:11:f2:d5:
a0:35:b0:47:84:e3:e8:46:6a:a7:d1:cc:59:97:09:
97:f8:92:eb:bd:15:62:1f:37:43:4e:a5:d0:dc:a6:
6e:d8:83:46:c7:74:e2:d2:a2:9d:be:bb:b2:6e:b7:
d8:99:3a:f3:6e:f0:92:a3:cd:96:51:03:e0:fe:92:
80:12:39:3e:70:8f:64:7a:7f:3f:f5:12:04:ee:0d:
ab:08:41:4d:90:32:5e:2c:3f:29:17:71:33:0d:a7:
28:1b:2e:9d:59:2e:41:c9:25:d6:19:3e:c9:10:1a:
07:2c:93:47:07:75:9a:d6:1f:04:e5:2d:d8:ee:c7:
81:f2:3d:18:9a:b5:f1:7c:de:24:74:b6:3d:08:fc:
8b:de:37:4f:29:8f:22:f1:f9:49:ea:ad:e0:6f:16:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:CA:CF:80:A7:B8:58:A4:53:82:CF:58:FE:28:D9:28:2B:3C:57
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/6ujKz4CnuFikU4LPWP4o2SgrPFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2a12:79c0::/32
2a12:79c2::/32
Signature Algorithm: sha256WithRSAEncryption
06:15:1e:51:f3:76:56:7e:f5:7e:bc:d4:0d:0c:33:0d:8e:c3:
6d:35:f5:d7:a7:b9:e0:88:8a:75:33:2e:4b:a5:9a:66:9a:1b:
d7:a7:8d:e2:68:2f:76:82:0c:4d:9c:d6:7e:dd:8e:ba:d0:0e:
e9:73:a5:04:cc:b5:0b:86:19:b2:a3:8c:5a:aa:e7:cb:31:df:
df:d6:a2:c2:ac:b4:c1:0b:cd:81:96:d1:53:64:6f:c1:5f:35:
c2:9f:09:9a:29:d1:04:54:8b:87:13:56:63:a4:d2:de:6e:fc:
05:49:15:59:b2:60:ce:e9:2f:e3:13:0e:7f:5c:99:60:27:53:
3b:4c:7c:ee:0d:b1:46:b6:3f:17:52:33:9e:db:b1:09:28:78:
95:bb:69:1e:e1:c0:0d:a6:3a:65:a5:45:e0:7d:da:1c:04:05:
28:ba:c5:0d:95:88:0f:7a:6c:11:be:ae:26:41:f4:78:36:61:
28:bc:1d:3a:7c:27:4b:37:c0:0c:40:58:c4:b0:13:dd:88:4f:
57:ad:23:d4:1c:53:7b:96:b6:19:5d:eb:d4:65:7b:ef:76:bc:
79:0b:43:74:68:1b:80:0e:09:0e:7b:52:24:18:6c:8b:23:63:
ad:2f:5c:c7:db:b3:ef:5f:a0:b9:ee:89:52:0f:79:12:34:98:
8d:88:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:52 2024 by rpki-client on console-ams.rpki-client.org