Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6w7ZPNb6FP6JTXhL5Z3V1gWAzKs.roa
File: 6w7ZPNb6FP6JTXhL5Z3V1gWAzKs.roa (raw, json)
Hash identifier: OPz3xVHh/fMKcID1aqkRP3/u09VUet5mv1T+4isolbo=
Subject key identifier: EB:0E:D9:3C:D6:FA:14:FE:89:4D:78:4B:E5:9D:D5:D6:05:80:CC:AB
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC0218B2B97CD4B18518A8BD1C864964
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6w7ZPNb6FP6JTXhL5Z3V1gWAzKs.roa
Signing time: Fri 10 Mar 2023 14:52:14 +0000
ROA not before: Fri 10 Mar 2023 14:52:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47450
IP address blocks: 192.144.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:18:b2:b9:7c:d4:b1:85:18:a8:bd:1c:86:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:52:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb0ed93cd6fa14fe894d784be59dd5d60580ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:73:71:36:52:ee:54:bb:0c:97:33:ac:ad:
37:8d:dd:ae:bb:22:3f:88:7c:28:8f:b6:f5:a4:3b:
70:6d:c3:2b:70:3c:9d:13:9f:9d:6d:78:01:06:09:
1f:3f:0d:2d:d2:f7:76:e7:08:39:1a:2f:22:74:1e:
6a:1e:fa:82:31:c4:3f:68:98:08:49:d9:22:e5:eb:
1d:d3:19:7c:65:5e:19:92:68:14:6a:9b:5a:28:39:
8c:c8:0f:4a:aa:ea:30:34:af:19:41:4b:ef:b0:0c:
6a:94:c2:29:b7:08:14:38:a9:7d:6c:2a:9c:7e:2f:
44:0c:bb:b3:53:53:56:91:be:c7:06:61:39:d1:31:
d4:b7:1c:0f:81:cb:27:33:96:3f:b8:c4:ef:03:0f:
8d:77:8c:cb:4a:de:69:3c:00:73:39:4c:f9:61:02:
22:fe:a2:ac:7a:77:ac:9b:e8:97:ad:87:45:e9:bc:
c8:9e:78:62:98:3c:0e:e2:1e:5c:67:69:ee:f2:de:
3a:e5:71:73:69:79:17:65:01:c6:9a:f2:d7:e5:1c:
3d:d5:5a:fd:e0:5a:14:e4:0f:91:3f:f2:3d:70:0b:
b5:43:24:69:c2:6f:01:10:4c:f7:1f:b6:be:52:6f:
cc:20:c0:b8:18:f3:dd:ff:84:0f:f8:2c:60:fb:9f:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:D9:3C:D6:FA:14:FE:89:4D:78:4B:E5:9D:D5:D6:05:80:CC:AB
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6w7ZPNb6FP6JTXhL5Z3V1gWAzKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:29:83:5d:ee:50:87:f0:9c:b2:1c:0a:6e:9e:ea:99:88:5a:
fa:de:b7:1e:86:fc:5d:9b:4e:f9:84:eb:8d:28:47:2c:02:f1:
c7:de:93:e2:cc:43:0f:72:99:3f:6a:20:89:bd:96:b2:ea:c8:
2e:76:e3:cb:e0:7c:69:ec:96:a6:c8:57:3e:01:d4:09:c4:86:
0e:51:e3:9d:53:13:ea:06:6d:cd:ec:18:0a:20:7a:3c:b2:87:
4f:aa:3c:fc:a4:c0:cd:6c:7e:42:56:1b:16:06:79:e7:c4:02:
29:bc:34:47:df:56:1c:f7:1a:e4:a1:01:ed:05:df:8c:c4:97:
b5:37:e4:e9:55:59:82:51:9d:2f:25:af:ca:5b:ae:0c:35:62:
7d:8f:86:4f:c9:15:ac:61:4b:41:b1:09:a7:a8:f2:81:11:7c:
e3:1b:7e:df:5f:36:46:65:9e:be:2b:0a:3f:95:49:4f:b9:28:
cc:b0:62:cc:89:a4:66:44:22:32:8c:50:74:b3:18:c5:99:f1:
6d:15:40:d6:d3:c2:7b:3b:08:8f:9d:73:b3:d9:76:90:03:3c:
c9:60:88:d1:a9:97:6d:d5:79:0c:10:b9:32:05:2e:dc:4a:30:
51:ca:c0:17:d9:9e:11:a4:2d:a2:e4:5e:ab:98:82:17:42:90:
bf:eb:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:48 2024 by rpki-client on console-ams.rpki-client.org