Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/6rXTzx--W0dARSUYQBEGa8Iotfc.roa
File: 6rXTzx--W0dARSUYQBEGa8Iotfc.roa (raw, json)
Hash identifier: H/5+F27esw7Gt3PsPYLdqEv41NYyNorRkGxgkVokjZY=
Subject key identifier: EA:B5:D3:CF:1F:BE:5B:47:40:45:25:18:40:11:06:6B:C2:28:B5:F7
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 01856DEF6B21C1392507E31C9C35D9521C08
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/6rXTzx--W0dARSUYQBEGa8Iotfc.roa
Signing time: Sun 01 Jan 2023 15:24:45 +0000
ROA not before: Sun 01 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203068
IP address blocks: 89.39.204.0/24 maxlen: 24
89.39.205.0/24 maxlen: 24
89.39.206.0/24 maxlen: 24
89.39.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:6b:21:c1:39:25:07:e3:1c:9c:35:d9:52:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jan 1 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab5d3cf1fbe5b47404525184011066bc228b5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:66:d6:7c:a0:4a:95:c7:72:3c:3f:3c:b2:
da:69:12:5c:d3:c4:83:ff:1f:51:d4:5f:5b:91:06:
d5:6d:0f:7f:d9:3d:64:f6:0b:5d:67:fb:ba:f2:0e:
1f:b3:b7:cd:1e:6d:61:35:bd:a1:0f:13:d2:30:08:
a9:c1:0d:36:1b:c5:53:45:af:69:d0:fe:ad:7e:b0:
03:63:59:11:4f:5b:c4:40:1c:1d:64:31:04:41:00:
c7:02:c9:49:f6:8a:37:94:37:9f:4a:4c:91:42:1d:
7c:4e:5c:54:78:a4:d5:8d:56:9e:ca:40:1e:00:fd:
89:7c:70:bc:29:39:0a:a2:c5:c5:e5:3d:fe:24:09:
f6:c5:b0:7b:3c:5a:38:27:04:bf:07:8a:c2:e5:08:
04:6c:4b:fb:c7:8b:07:8b:40:b7:42:ec:64:33:ba:
4a:8c:06:b9:90:3e:6e:2f:c6:f8:26:90:b1:cf:3a:
f7:3e:1e:4d:6a:af:39:b5:f5:e9:7e:64:11:09:cb:
76:e9:87:37:b0:6a:ed:51:60:51:d6:57:14:b8:4c:
ed:ef:91:3e:b2:4f:ee:dc:39:6e:3a:dd:6f:c6:6d:
0f:76:63:e0:c6:38:35:7b:aa:0d:e8:13:06:a7:3a:
ed:8c:bb:3d:69:69:dd:49:86:7f:70:a6:5b:a3:a2:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:D3:CF:1F:BE:5B:47:40:45:25:18:40:11:06:6B:C2:28:B5:F7
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/6rXTzx--W0dARSUYQBEGa8Iotfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.204.0/22
Signature Algorithm: sha256WithRSAEncryption
74:9f:de:91:75:34:81:5a:c1:09:f7:e8:87:6c:cb:7d:9b:50:
c9:22:97:4b:e3:6e:bc:10:52:c3:c9:bf:61:4f:49:4f:72:84:
36:72:65:93:f7:41:71:f4:86:d1:42:c9:ea:ec:7e:ea:38:f8:
c6:c6:f1:0d:ce:e7:c8:01:85:19:41:e6:d9:56:5a:dd:4c:e1:
c8:2d:7d:e4:32:c6:66:6b:c9:d6:f7:32:dc:e0:d0:ef:a6:0f:
5c:93:c4:13:01:58:3e:ca:da:7d:75:b9:9c:1a:57:f5:d6:80:
a0:7d:d8:6a:6f:1f:6b:ad:4b:49:19:f9:18:97:52:41:c8:fb:
73:31:4f:87:c7:9f:57:0c:94:71:da:4c:c3:5d:59:4d:76:01:
0f:f9:4c:4a:a4:00:18:a9:c6:e5:03:00:34:11:36:d8:4b:5a:
36:7b:83:79:08:93:ae:cc:f2:56:77:1c:f0:ce:8b:72:df:91:
c7:8e:ee:7c:25:27:f0:d5:29:ab:63:d8:44:f1:9a:63:8a:13:
05:bd:34:24:a0:4f:68:f2:73:e5:78:2c:e9:aa:3b:51:36:91:
65:a9:24:87:b6:81:85:f0:41:5f:ff:d6:6b:c4:60:16:20:15:
01:3a:95:47:70:dd:52:51:32:11:80:5b:5b:ad:61:bb:a0:be:
07:51:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org