Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/a6dNx7VV3RScYpGUDA3zblDvFHA.roa
File: a6dNx7VV3RScYpGUDA3zblDvFHA.roa (raw, json)
Hash identifier: k/9OpWBtV2xJo2BjX+j/VfJlw/YcEIVTNjR/no0bvI8=
Subject key identifier: 6B:A7:4D:C7:B5:55:DD:14:9C:62:91:94:0C:0D:F3:6E:50:EF:14:70
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018F5058A11A3C22F1B12A669B0ADA63EC43
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/a6dNx7VV3RScYpGUDA3zblDvFHA.roa
Signing time: Mon 06 May 2024 23:58:56 +0000
ROA not before: Mon 06 May 2024 23:58:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 79.139.80.0/23 maxlen: 24
89.40.164.0/23 maxlen: 24
94.177.6.0/23 maxlen: 24
176.126.198.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 02:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:50:58:a1:1a:3c:22:f1:b1:2a:66:9b:0a:da:63:ec:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 6 23:58:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ba74dc7b555dd149c6291940c0df36e50ef1470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:0d:e2:92:22:62:8c:6e:6d:a4:5b:7d:1f:
bb:85:fa:59:03:de:ac:91:ca:ab:2d:7e:b8:d8:95:
4f:b5:38:4c:e7:d6:14:04:53:41:9a:8d:10:87:7e:
c2:17:e9:fe:39:9f:59:d0:9d:6c:cc:d8:66:2f:35:
7d:e8:6d:1c:be:5e:41:56:fc:a1:d0:8b:06:0d:6c:
e1:78:1e:36:40:a3:20:44:0e:90:ab:2d:06:07:f1:
6d:5f:e9:76:94:00:3d:58:62:ca:72:d4:f0:c6:c6:
0f:cc:f1:ef:27:e0:d7:66:3f:38:01:96:d4:4e:6e:
ff:21:99:28:41:21:14:3c:32:fe:2a:ea:6c:71:5c:
5f:b3:8f:cb:39:a5:2f:87:78:de:ec:36:6a:35:9c:
5a:f4:66:02:7e:fb:68:9f:27:c6:da:0f:98:86:b5:
4b:02:39:b6:62:0c:fd:bb:35:88:80:29:1d:8e:c9:
8d:8a:12:f7:ad:15:c2:f3:51:bc:05:e4:60:50:0f:
8b:0f:67:ac:1a:09:0f:1d:55:f9:45:9c:1f:49:85:
99:c9:35:f0:11:51:9e:06:29:20:f2:e4:3a:e2:e9:
d8:fc:07:42:0d:04:16:22:2f:e3:e7:06:60:c2:28:
19:6f:cc:e7:c3:a7:f0:25:c3:3b:04:65:3a:1b:b3:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:4D:C7:B5:55:DD:14:9C:62:91:94:0C:0D:F3:6E:50:EF:14:70
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/a6dNx7VV3RScYpGUDA3zblDvFHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.80.0/23
89.40.164.0/23
94.177.6.0/23
176.126.198.0/23
Signature Algorithm: sha256WithRSAEncryption
86:13:87:e0:0e:55:03:ce:2d:e7:c4:ea:f2:73:64:07:fa:20:
13:73:a4:08:60:66:8f:71:e7:5e:8b:3d:c9:25:c2:2c:41:9c:
e1:fc:41:86:1c:75:76:03:4d:db:8f:1a:2b:40:0b:7b:d7:52:
f2:04:5e:16:f1:cc:04:18:da:c4:41:f5:1f:76:f2:21:1e:93:
fe:07:75:b3:30:6c:9a:93:a8:79:ac:cb:1f:33:c7:99:6e:b4:
4e:4f:ef:8a:76:20:6b:81:3a:e0:95:12:f0:92:cf:6f:03:7e:
50:f8:27:99:af:9e:ed:03:7e:b6:3b:e8:eb:a2:62:df:4b:bf:
77:2a:36:09:c6:78:6f:88:15:1c:7b:10:f0:b8:95:be:a2:1d:
28:09:89:01:22:35:27:20:06:26:ee:8a:97:70:ba:e4:ab:d1:
ac:8d:17:30:45:73:13:44:5a:3e:ec:3b:1e:88:dc:9a:34:b3:
8b:dc:d8:e9:29:8a:98:e2:f2:33:32:af:f5:78:4f:99:37:92:
8c:87:4f:58:5c:75:a8:6c:fb:df:dc:8e:b8:37:b0:2c:aa:b5:
52:62:1f:f1:53:1a:5c:03:4b:b6:6e:07:54:fc:ac:d3:ac:bb:
b5:53:b0:5f:3f:ae:b7:41:91:57:e6:1c:2b:8d:9b:96:de:aa:
3d:df:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:44:54 2024 by rpki-client on console-ams.rpki-client.org