Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/6QF63duaFcsKF9p2eOZ64f_6Pp8.roa
File: 6QF63duaFcsKF9p2eOZ64f_6Pp8.roa (raw, json)
Hash identifier: QWKyWLzdglLjFV55Eq7AFfHAOgSbUYqceFJAbphGoRg=
Subject key identifier: E9:01:7A:DD:DB:9A:15:CB:0A:17:DA:76:78:E6:7A:E1:FF:FA:3E:9F
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 018973030F0B1C0FECDB0BF172D39560047F
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/6QF63duaFcsKF9p2eOZ64f_6Pp8.roa
Signing time: Thu 20 Jul 2023 11:15:27 +0000
ROA not before: Thu 20 Jul 2023 11:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 145.46.168.0/24 maxlen: 24
145.46.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:03:0f:0b:1c:0f:ec:db:0b:f1:72:d3:95:60:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jul 20 11:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9017adddb9a15cb0a17da7678e67ae1fffa3e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:74:b0:8c:49:4f:9a:0e:d0:b3:5e:f3:76:
0a:26:fc:c6:e6:26:4d:7f:bb:15:51:1c:8c:0d:f7:
76:0a:21:ce:f1:dc:56:06:80:55:7a:06:a4:36:b6:
8d:6a:ad:03:8a:b7:da:02:7f:b0:4a:52:da:8a:55:
e2:84:8c:cc:08:cb:9f:ea:0f:87:5a:71:74:6c:ca:
26:14:8e:c7:c7:e1:6d:19:17:b4:25:d0:6e:84:53:
8c:7e:bd:3b:9c:db:10:d6:6a:b3:1f:b0:31:b9:a2:
2b:8e:cf:03:66:1a:12:09:40:d0:82:f9:b0:2b:1b:
cd:23:a6:66:f3:d1:83:c8:4a:f6:49:74:e6:e4:a7:
b6:48:4b:b8:6a:59:20:62:3b:bf:0a:79:db:e2:04:
f1:2d:ce:38:8c:75:68:03:a7:0f:0a:31:a7:c2:4e:
9d:69:8f:f9:4e:54:c1:5a:28:80:83:42:61:d2:1b:
d5:6d:ce:a5:65:23:11:e0:f2:c5:2b:95:6c:b3:4f:
e6:76:18:f8:9b:8f:d8:d4:55:0b:89:fc:74:6b:10:
57:f1:3c:88:e6:1a:4e:f5:0a:17:5b:87:8d:70:bc:
9a:f7:34:ee:16:52:d1:a8:4b:04:d2:98:01:46:a6:
85:93:68:33:cd:aa:1c:23:cf:db:e8:40:db:f0:1e:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:01:7A:DD:DB:9A:15:CB:0A:17:DA:76:78:E6:7A:E1:FF:FA:3E:9F
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/6QF63duaFcsKF9p2eOZ64f_6Pp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.168.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:0d:26:fd:35:e4:dd:a7:d4:6d:03:94:43:e2:7b:80:05:af:
35:d4:30:bc:2f:15:4d:51:73:9a:cb:36:76:af:70:cd:87:50:
8d:fc:7c:c6:aa:c1:6a:d3:42:93:2d:82:8c:d9:5f:df:e8:4e:
5b:8c:f1:31:15:6d:ba:72:f3:8f:ee:8e:a1:fc:7c:65:04:75:
c8:4d:96:5d:89:ad:1b:0f:1a:4c:98:13:6a:3b:31:b7:f8:9a:
35:72:6c:64:d9:fe:da:ca:ca:cc:c7:af:26:64:38:11:d6:62:
6e:89:30:90:b8:db:a1:12:a2:1e:41:2c:a7:8d:ce:2b:1b:07:
12:f1:22:ab:5a:7c:f2:84:4d:d7:6b:2c:7a:b4:50:d0:68:24:
4b:bc:33:8b:ee:a3:07:c0:47:59:a5:7e:f6:ea:db:ab:db:67:
7c:ae:39:0e:cd:48:8f:a6:f0:06:aa:02:23:63:a6:9c:d8:09:
a9:26:58:e3:38:7b:30:af:95:b4:56:76:d3:04:aa:49:a4:b3:
a2:fb:bb:93:4d:b3:88:57:9c:91:07:e3:e8:cc:eb:52:23:85:
23:3f:4b:bb:4e:98:ea:1b:c1:f8:b3:91:a4:a7:89:cb:ee:34:
84:c1:f1:00:91:52:29:aa:56:a9:1f:e1:60:5a:f6:08:33:f9:
cb:cc:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 10:56:20 2023 by rpki-client on console-ams.rpki-client.org