Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/m6FMI3L2WIsuYrLiynoREJLEguU.roa
File: m6FMI3L2WIsuYrLiynoREJLEguU.roa (raw, json)
Hash identifier: AAwuSAZZTumBxmpbYaxg8GuoMx0FCDYA3mla2HCUa3I=
Subject key identifier: 9B:A1:4C:23:72:F6:58:8B:2E:62:B2:E2:CA:7A:11:10:92:C4:82:E5
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018CC41632F4D199B7E9C12F457E4B3D6157
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/m6FMI3L2WIsuYrLiynoREJLEguU.roa
Signing time: Mon 01 Jan 2024 08:13:58 +0000
ROA not before: Mon 01 Jan 2024 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60647
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:16:32:f4:d1:99:b7:e9:c1:2f:45:7e:4b:3d:61:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 08:13:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba14c2372f6588b2e62b2e2ca7a111092c482e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:7c:c3:b5:af:15:cd:f1:e2:e9:da:42:59:
02:9e:24:2d:9e:a2:f9:17:d8:f4:c8:5e:b6:c7:cf:
32:5e:2f:9f:a8:8a:2b:0d:b3:a6:22:74:a4:4f:f7:
a6:33:c1:16:b9:c4:a6:3a:30:60:7a:85:b7:8f:85:
39:b5:d8:b0:fd:71:6a:9e:02:c0:62:32:67:00:da:
02:ee:13:0f:ca:a4:f9:b6:86:12:14:50:cd:83:8e:
f0:b9:6e:d2:fb:9d:a6:df:d5:49:83:26:d8:ec:e9:
3b:fe:0b:2f:c8:a6:01:ed:e0:74:b2:27:c5:5a:3c:
03:89:e7:b5:8e:4d:74:29:b3:97:93:12:0c:94:84:
a0:53:9b:e6:6a:33:3a:39:60:63:70:3c:58:2d:9b:
da:df:6b:68:88:b8:0c:85:6a:81:32:be:08:c2:6a:
82:76:ff:e3:12:02:31:39:48:02:a5:95:ac:79:8a:
b0:d7:78:6c:3d:48:3a:e2:0c:db:f9:08:3a:e7:ea:
62:5f:b2:65:b9:25:36:df:d3:51:ed:5c:9d:2a:af:
e1:bc:9f:2c:e2:50:51:0e:f0:4d:43:3f:91:9a:ab:
78:56:55:e8:03:b1:08:7d:fc:13:28:0f:5d:d2:4a:
bd:d3:47:3f:62:f7:89:de:76:80:a2:a5:3d:32:dc:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A1:4C:23:72:F6:58:8B:2E:62:B2:E2:CA:7A:11:10:92:C4:82:E5
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/m6FMI3L2WIsuYrLiynoREJLEguU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7b:2a:23:fe:e1:35:d0:04:ef:8c:dd:0d:f7:4a:de:a1:a8:
f8:c1:f2:ba:5d:da:fa:e4:40:19:09:78:88:7b:ef:e1:b4:8d:
4e:88:d3:96:f8:cf:9b:e5:0c:a9:f4:e9:b5:0b:3d:2c:18:cf:
67:ae:c2:9a:62:46:42:8f:b4:1c:6c:bc:0c:32:ba:66:e6:5d:
a7:0d:9d:3d:1d:03:3e:fe:f5:5b:b3:14:3c:d0:ac:98:02:46:
6f:26:6a:9b:a2:96:62:82:8c:42:34:cd:a6:02:5f:5c:51:64:
3d:b0:30:80:2c:65:27:da:53:98:27:17:79:9e:f1:43:28:b8:
57:df:4f:77:de:a7:6a:3c:7d:5e:b3:bb:56:b8:8a:b6:d8:7d:
32:5f:95:43:b8:6d:c0:0b:3a:21:d2:dd:88:c6:4b:c8:13:ee:
0f:47:4c:c2:d5:3b:e7:ea:a3:93:8a:52:70:e3:6f:0c:a8:19:
ab:80:62:8e:02:54:f7:d7:b2:b2:c2:ed:fd:61:d4:64:21:6b:
d7:2e:f4:fd:72:00:18:87:39:9a:1e:d3:53:eb:21:be:ae:04:
b2:90:0e:19:24:27:51:5d:dc:94:79:8e:45:1e:e7:c1:2a:ef:
d8:50:88:dc:50:bc:a4:1b:20:4a:f1:d4:95:be:66:d0:f8:3f:
3d:58:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org