Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/6H6IHhXk2krOyu7MfsBOZEhETaM.roa
File: 6H6IHhXk2krOyu7MfsBOZEhETaM.roa (raw, json)
Hash identifier: 52e8ucXk7Wg1PUGvVchsOdHUpWNehlsX1Ju7yY7/B8g=
Subject key identifier: E8:7E:88:1E:15:E4:DA:4A:CE:CA:EE:CC:7E:C0:4E:64:48:44:4D:A3
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 0187038C63A5AB58E7A125782561483AA1E7
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/6H6IHhXk2krOyu7MfsBOZEhETaM.roa
Signing time: Tue 21 Mar 2023 09:42:24 +0000
ROA not before: Tue 21 Mar 2023 09:42:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 94.140.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:8c:63:a5:ab:58:e7:a1:25:78:25:61:48:3a:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Mar 21 09:42:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87e881e15e4da4acecaeecc7ec04e6448444da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:87:e1:53:c0:e4:c1:ac:ec:d8:da:ad:67:
a9:5e:a0:5a:0f:96:1a:80:fb:c9:5a:34:31:6e:b8:
fb:a1:33:c4:f8:3d:84:76:ce:51:93:bf:70:aa:b0:
aa:57:58:7c:27:a3:32:53:05:cb:60:db:6d:6d:d1:
2c:1a:6f:f4:b0:9d:21:1e:66:60:6a:c7:ca:11:5a:
c1:50:76:f4:0c:2e:68:02:56:e3:da:9d:bf:f8:b3:
85:f9:dc:71:fb:21:6f:a6:cd:2e:d6:b9:9f:7c:1c:
ec:f1:be:99:35:88:cc:d4:64:3b:a5:be:29:4f:6b:
0d:46:16:c8:fb:eb:f3:00:af:d0:1e:bf:da:9c:52:
6d:f1:b8:2e:32:5c:93:1d:53:17:18:38:2e:50:f9:
9d:12:ad:ca:33:a7:37:3e:df:29:05:62:f8:73:37:
51:ee:37:41:94:54:e1:cd:90:8e:6b:3d:37:1a:6c:
6b:c3:56:3f:1a:18:f5:3f:0c:04:fb:8b:2a:a4:b0:
1b:41:02:fe:05:99:4a:12:14:16:e2:67:ac:5e:de:
48:61:67:b8:71:65:a8:90:0c:b4:e2:c4:e5:39:32:
60:59:02:96:12:d7:26:38:5a:13:f6:9a:9e:5c:37:
c6:d3:38:a8:46:fb:45:cf:8a:1e:16:63:22:2f:4c:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7E:88:1E:15:E4:DA:4A:CE:CA:EE:CC:7E:C0:4E:64:48:44:4D:A3
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/6H6IHhXk2krOyu7MfsBOZEhETaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:09:68:59:37:fe:8f:97:7f:03:be:28:86:ff:f4:d9:29:51:
9b:3f:09:79:2e:d7:2d:98:67:db:49:2a:3a:4c:7f:12:04:f3:
2b:b3:d6:07:a3:fd:a3:f0:ee:ec:37:87:ef:97:70:cc:5e:9f:
52:5e:13:b8:42:6d:65:14:35:61:f1:71:dd:2f:b9:92:84:68:
21:3d:0b:6d:6f:f6:27:36:41:e9:f0:2a:c7:d8:d7:2e:ef:fa:
3a:a5:97:ee:b3:cd:7b:b8:8f:88:e1:68:89:39:bd:6e:5d:85:
f2:72:76:c0:93:f4:40:b0:f7:d4:ac:aa:4e:5b:8c:b0:42:bf:
cf:41:9a:f5:a4:ac:f7:4f:9c:63:d3:ee:fb:be:60:14:2e:be:
1e:86:49:96:09:6f:0b:79:3f:65:b3:dd:d0:26:d0:09:5f:a0:
18:3b:24:79:24:1c:c2:f5:4b:5b:35:0f:05:c9:81:30:09:d0:
e1:df:83:f3:77:59:81:bd:9f:7f:1c:4a:50:09:31:0b:a4:18:
81:11:b6:73:aa:09:dc:6c:f1:6d:34:f8:f3:32:c9:f8:c9:61:
e3:8b:ba:d1:f0:7a:8a:d0:2b:33:59:26:f7:2f:5e:67:68:4c:
67:00:c7:f1:cb:e5:10:71:49:44:ab:c9:49:36:6c:ee:43:37:
73:e1:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:24 2024 by rpki-client on console-fra.rpki-client.org