Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/AvL6pOyg6DdjJ7tVf5WaXzp0t2w.roa
File: AvL6pOyg6DdjJ7tVf5WaXzp0t2w.roa (raw, json)
Hash identifier: DgM6jvnA16ZYSMuHXN0TAoCBGwUgvgDFESUiIWOxphs=
Subject key identifier: 02:F2:FA:A4:EC:A0:E8:37:63:27:BB:55:7F:95:9A:5F:3A:74:B7:6C
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01884B5E34AF6A54709A54C003F4FDD920A5
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/AvL6pOyg6DdjJ7tVf5WaXzp0t2w.roa
Signing time: Wed 24 May 2023 01:27:25 +0000
ROA not before: Wed 24 May 2023 01:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.235.2.0/24 maxlen: 24
45.140.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 19:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4b:5e:34:af:6a:54:70:9a:54:c0:03:f4:fd:d9:20:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: May 24 01:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02f2faa4eca0e8376327bb557f959a5f3a74b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:d8:8e:9c:81:31:5f:5a:b5:6d:28:26:e5:
bf:22:76:56:d6:5c:24:8c:60:b0:5d:e4:7d:f2:22:
fa:df:d6:45:e7:b7:2d:4f:1b:5b:c5:7e:4b:bf:6e:
b0:58:84:b6:94:3e:5a:2a:6a:1c:74:3b:75:3d:00:
b9:11:9d:e0:dd:d4:70:2c:4a:38:71:b4:2b:4e:3e:
d7:1c:4c:bd:11:ce:fa:e9:e6:ba:91:ae:d0:40:ae:
26:07:0b:1c:77:ac:3f:71:26:b0:3c:14:91:bf:4a:
4b:a1:74:ff:50:00:1e:0c:d5:3c:6b:3f:53:c6:42:
cc:1a:3a:ba:35:35:75:57:ba:9f:90:4c:d7:0e:b7:
5c:80:d9:4b:e7:1e:d6:43:62:8f:27:1d:8f:c9:c2:
af:a6:3a:b3:00:bf:e0:54:5b:88:76:63:d1:85:5f:
4c:36:20:c3:15:cc:a0:31:a2:a0:6a:26:09:f7:4c:
78:78:b9:a4:e7:27:79:7a:c3:54:cf:f3:16:2b:d4:
99:14:76:1d:fe:5c:03:20:9b:e6:f8:1d:2e:25:4a:
0f:45:b8:c9:3f:e5:fe:81:6e:58:e4:4f:90:e4:2b:
37:bf:3a:a3:81:52:e6:16:ca:35:19:e9:79:41:2f:
48:b6:2b:48:9a:e9:29:05:52:ed:95:9f:a9:86:f0:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F2:FA:A4:EC:A0:E8:37:63:27:BB:55:7F:95:9A:5F:3A:74:B7:6C
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/AvL6pOyg6DdjJ7tVf5WaXzp0t2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:32:88:8c:90:92:ff:f9:41:84:b3:39:e0:83:50:48:5a:21:
82:d6:aa:39:cc:a5:bc:ed:7c:23:69:ed:52:39:82:0b:18:32:
9d:b2:03:43:3e:d0:b2:c0:df:c7:60:af:48:ed:39:32:b6:ef:
7f:ef:0a:1e:76:4b:52:d9:d5:06:5d:c5:a0:da:a6:b9:97:b5:
13:dd:00:64:5d:b5:34:40:72:84:25:20:da:ab:c8:e9:5f:8d:
51:31:e0:b1:45:93:5c:ae:12:e2:82:6b:e0:18:7c:d6:c3:9d:
2d:5d:41:70:64:73:46:87:c0:a7:e3:8d:06:1e:59:7b:93:a5:
6b:10:65:c0:dd:93:0b:0b:e9:3f:79:46:6b:bb:8e:78:24:1d:
bc:87:db:1b:78:43:16:43:30:d3:0b:b9:1e:0d:55:64:08:9f:
de:ee:03:63:64:4f:6c:e9:11:69:ea:34:a1:31:1d:e3:76:4d:
25:ff:21:f3:8b:15:cb:4e:40:6b:3a:b6:56:b8:fa:d2:82:1a:
59:a3:fb:6f:1e:39:3e:16:e1:8e:21:8a:72:c7:1d:1a:05:64:
08:58:98:ff:58:30:7e:6c:69:65:80:c6:e3:4a:1c:0a:23:15:
ca:bf:54:c1:be:07:b8:4a:ef:26:b6:ae:0e:18:90:1b:ca:44:
fe:53:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org