Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6Xa-6vyUNpkEX-DF_DOz-nFqyF0.roa
File: 6Xa-6vyUNpkEX-DF_DOz-nFqyF0.roa (raw, json)
Hash identifier: HJNFeuRmuNdnWyvXs82fzgSnDEYwhJVOC0b+k7u0iAA=
Subject key identifier: E9:76:BE:EA:FC:94:36:99:04:5F:E0:C5:FC:33:B3:FA:71:6A:C8:5D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018E197FF9A70770028330E212993E35301C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6Xa-6vyUNpkEX-DF_DOz-nFqyF0.roa
Signing time: Thu 07 Mar 2024 15:20:01 +0000
ROA not before: Thu 07 Mar 2024 15:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60139
IP address blocks: 90.156.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:7f:f9:a7:07:70:02:83:30:e2:12:99:3e:35:30:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 7 15:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e976beeafc943699045fe0c5fc33b3fa716ac85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:e0:06:e2:41:2f:6f:e9:12:0c:57:87:6b:
83:6c:9f:42:03:85:a6:f0:2b:aa:9f:f8:db:24:aa:
ce:0d:06:30:1e:ad:da:4c:23:5e:a7:4e:f1:0d:5f:
38:21:64:aa:5d:7e:19:3e:51:63:35:40:d3:72:6c:
3a:25:8f:52:52:b1:7f:11:2c:b6:3c:a4:3d:26:b7:
fa:79:f4:30:1c:ad:07:93:33:03:6c:f7:fd:41:5d:
25:7a:e6:77:7b:ce:39:1b:c8:2b:b3:fa:8e:80:57:
d6:7f:68:85:18:19:6c:ad:c6:e5:a3:20:16:59:b6:
79:e0:4e:ee:96:d3:1c:cf:56:51:b3:6a:31:bf:34:
ab:26:9e:c4:d6:8f:8a:8c:8f:c0:59:58:a2:95:0f:
58:96:1c:ab:14:33:d8:b4:48:4f:ec:c6:91:3a:3f:
14:7b:1f:8e:dd:4f:62:39:59:a2:b7:3d:f6:fe:40:
14:62:e4:de:a6:f9:d0:4c:72:a6:d5:9e:50:1f:f1:
b3:96:bf:f7:22:79:73:5d:64:77:3f:aa:2f:8a:7b:
b6:c3:3f:87:1d:b5:db:bf:9c:55:a6:c8:12:51:4f:
6a:fd:9f:33:21:a9:35:d8:d6:61:19:11:f6:b5:12:
43:62:ba:a2:89:7d:17:0e:23:03:d4:d9:0e:cd:39:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:76:BE:EA:FC:94:36:99:04:5F:E0:C5:FC:33:B3:FA:71:6A:C8:5D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6Xa-6vyUNpkEX-DF_DOz-nFqyF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
66:51:10:b0:d0:3c:37:be:28:74:19:88:0a:46:23:f7:85:cb:
52:c9:89:54:ab:2d:8f:5c:d1:36:f0:28:47:c5:35:a4:a4:37:
7a:44:8d:de:da:2b:d6:93:09:86:7a:21:2f:0d:12:3c:74:c4:
20:be:22:7b:72:69:e9:a4:d8:9f:57:f3:27:ef:5f:88:4a:6f:
b7:b7:5e:eb:9e:1e:4e:fd:28:b5:02:d2:95:0c:58:59:39:75:
ed:c8:4b:28:bd:9e:d0:f8:61:61:17:5f:8a:fe:cb:9c:d6:2d:
da:ee:85:36:b1:1f:f2:be:3b:1f:f8:28:c2:f8:f3:a9:bb:b9:
c9:71:00:ab:7a:6a:27:77:d4:2d:bf:b2:92:0e:11:12:1c:b1:
c0:f8:4f:41:cf:58:53:dd:4b:17:d5:d6:5f:4f:c2:05:54:a7:
c0:96:6f:d6:cc:6a:81:e7:4c:be:4d:b5:57:45:ab:b9:3e:eb:
bd:aa:10:a8:cf:68:79:5a:fc:cb:33:43:83:27:66:09:b3:49:
ec:3f:2c:bb:19:d7:e0:00:ed:6a:10:01:2d:6c:42:10:c1:d9:
89:c2:84:5a:c1:26:c7:e2:8d:b7:b9:97:01:f1:62:a2:73:f3:
e7:0f:46:ea:81:2a:7c:ea:71:6d:67:69:5a:be:9d:f5:59:12:
2c:f7:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:32 2025 by rpki-client