Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/6vy-H64rK_7AhNxEMDDMEcxbrFE.roa
File: 6vy-H64rK_7AhNxEMDDMEcxbrFE.roa (raw, json)
Hash identifier: DMP1NI0KoQAxuJ7iDgLFpUHdiMuriwjtf3F9H2V8XEI=
Subject key identifier: EA:FC:BE:1F:AE:2B:2B:FE:C0:84:DC:44:30:30:CC:11:CC:5B:AC:51
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01856CE5E689C4672FA5F1541F41050A5800
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/6vy-H64rK_7AhNxEMDDMEcxbrFE.roa
Signing time: Sun 01 Jan 2023 10:34:44 +0000
ROA not before: Sun 01 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 176.67.160.0/20 maxlen: 24
185.7.224.0/22 maxlen: 24
176.67.169.0/24 maxlen: 24
109.123.64.0/18 maxlen: 24
83.170.64.0/18 maxlen: 24
82.163.72.0/21 maxlen: 24
88.202.224.0/21 maxlen: 24
77.92.64.0/19 maxlen: 24
31.24.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
46.23.64.0/20 maxlen: 24
46.23.74.0/24 maxlen: 24
88.202.176.0/20 maxlen: 24
2a02:2498:8000::/40 maxlen: 40
2a02:2498::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:e6:89:c4:67:2f:a5:f1:54:1f:41:05:0a:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jan 1 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eafcbe1fae2b2bfec084dc443030cc11cc5bac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:1d:39:aa:d6:fe:c3:cc:c6:a4:ad:6b:89:
5b:8b:01:54:66:5e:76:6f:0a:71:28:ec:25:34:9d:
0d:6f:15:94:cd:41:34:ee:55:1e:78:ed:41:bf:e2:
8e:23:d0:8c:ba:7f:e0:24:ca:9c:1b:26:fb:5f:c1:
35:a2:1b:b0:0d:8d:f3:7d:1e:d6:21:00:02:97:c1:
78:38:2c:de:51:7b:91:48:47:e6:18:47:fa:a1:01:
af:e9:7e:61:17:79:5e:72:82:7d:99:6a:3f:3a:75:
a6:4a:50:58:67:fb:fe:5e:ab:ac:d4:0f:c1:1a:94:
3e:2f:08:a5:a2:b7:44:6d:fc:8d:8e:3a:05:ba:4a:
b4:8f:3b:5b:bc:92:a3:cf:c1:53:ba:c7:87:ed:a0:
49:2d:7a:d4:d8:c6:c9:27:e6:bc:10:96:79:77:74:
38:ed:a2:3e:3b:e7:57:d3:84:8c:b2:09:93:82:bf:
6a:c0:b9:63:84:d2:59:31:9b:cd:e1:16:9f:05:84:
cc:46:48:e3:7c:0c:71:80:0f:2f:6d:ae:d3:50:b2:
c0:2d:54:3f:7c:8a:26:75:0b:58:49:c8:6f:98:ce:
f8:ad:37:c7:79:a5:4e:98:44:bf:e7:81:3a:8d:79:
7f:5f:c7:c9:72:99:0a:fd:bf:5b:16:52:44:f9:89:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FC:BE:1F:AE:2B:2B:FE:C0:84:DC:44:30:30:CC:11:CC:5B:AC:51
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/6vy-H64rK_7AhNxEMDDMEcxbrFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/20
185.7.224.0/22
IPv6:
2a02:2498::/32
Signature Algorithm: sha256WithRSAEncryption
b4:4f:a2:47:fe:e3:99:00:73:b3:a8:af:18:de:5c:78:37:8e:
f0:70:2d:ef:58:81:60:6f:87:c0:43:ec:d8:fd:21:9b:fc:83:
c0:85:e9:e6:7e:f6:89:6f:59:09:f8:7f:95:99:8e:90:37:c3:
32:b3:48:8b:4d:ff:31:8f:76:b6:62:e5:35:36:d2:1b:c6:18:
70:a0:72:09:25:f0:9b:6f:c5:23:6a:7f:1f:74:81:52:d9:09:
d2:cd:b4:69:91:80:cb:fc:50:17:8e:e3:81:9d:31:b1:32:fb:
6f:e0:01:9b:50:6f:6d:e7:18:77:dd:57:12:63:a2:1d:7e:d2:
47:79:f3:29:1a:1b:f9:7d:11:3c:c7:94:fc:52:5c:a2:9a:b9:
f3:8a:58:c2:05:11:19:8b:0e:64:e5:89:a6:7f:9d:10:f3:5e:
09:ab:ed:2a:d4:d1:dc:03:b5:4a:6c:04:85:49:77:c4:08:47:
5a:80:0e:12:4e:72:c2:22:ce:b2:c7:c1:67:cd:98:aa:8d:54:
81:ad:d3:bc:72:f0:9d:07:7e:bc:73:aa:e9:6f:eb:7f:bb:8f:
45:0f:f8:d4:20:46:7d:18:eb:8c:a3:05:57:44:68:11:89:12:
36:82:19:e7:7b:6f:fd:bb:a0:c7:46:98:24:af:14:71:a6:e6:
c6:06:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:32 2023 by rpki-client on console-fra.rpki-client.org