Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/3rZ15wtE_gzWoNUI9Ow67JSJokw.roa
File: 3rZ15wtE_gzWoNUI9Ow67JSJokw.roa (raw, json)
Hash identifier: AOr3HAx/2KqD4yZXivRr+JU7omvUx468F9E536KphE0=
Subject key identifier: DE:B6:75:E7:0B:44:FE:0C:D6:A0:D5:08:F4:EC:3A:EC:94:89:A2:4C
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 0185715E8024291959C321BE5E9D7A0A8AB8
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/3rZ15wtE_gzWoNUI9Ow67JSJokw.roa
Signing time: Mon 02 Jan 2023 07:24:56 +0000
ROA not before: Mon 02 Jan 2023 07:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15471
IP address blocks: 194.153.232.0/24 maxlen: 24
88.158.0.0/16 maxlen: 24
2a03:fa80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:80:24:29:19:59:c3:21:be:5e:9d:7a:0a:8a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Jan 2 07:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deb675e70b44fe0cd6a0d508f4ec3aec9489a24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:fe:b0:04:aa:b3:1d:e2:6b:51:0a:e1:73:
2b:8d:7f:97:99:b0:05:a0:22:99:80:a1:17:ce:17:
58:e9:d0:41:d8:84:40:b5:93:2e:4d:4f:d4:4b:2f:
fb:58:63:48:e4:61:74:81:4a:93:29:e0:7a:e9:4f:
c9:49:68:ed:74:74:8c:cd:17:74:8c:3d:61:b7:af:
11:b7:90:73:f2:5a:3d:b8:92:28:70:e4:c8:97:72:
93:4c:0c:f6:63:84:76:6a:f7:41:c7:1e:d4:a6:c6:
9c:f2:b7:ed:a5:84:56:b9:f2:2f:36:ff:a1:c6:10:
b9:38:e2:82:e0:7d:07:a0:9f:93:54:35:1f:63:a2:
6f:06:ac:53:8b:14:07:95:57:61:e1:f3:03:89:2b:
65:3a:04:db:e3:98:41:46:04:7a:1a:d7:e0:92:6f:
99:bf:1a:c5:54:25:2f:33:5a:19:9e:a6:51:41:27:
50:17:ec:fd:8c:c1:e9:70:b5:ae:d3:9a:23:d6:78:
fc:b8:08:7f:e8:7e:77:81:4d:f9:4b:64:ce:1b:fc:
c8:d7:48:41:24:45:9b:c8:83:55:0b:2b:73:6e:c6:
ee:66:87:0d:bc:31:3b:44:e1:80:fd:5d:98:3c:0d:
b3:5a:2e:6e:76:65:bb:9b:7f:26:0c:f9:bf:91:2c:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B6:75:E7:0B:44:FE:0C:D6:A0:D5:08:F4:EC:3A:EC:94:89:A2:4C
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/3rZ15wtE_gzWoNUI9Ow67JSJokw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.158.0.0/16
194.153.232.0/24
IPv6:
2a03:fa80::/32
Signature Algorithm: sha256WithRSAEncryption
47:85:66:14:24:d0:70:09:f2:7b:b1:c7:ef:60:2f:70:63:dc:
08:82:c1:2b:18:95:db:49:de:43:7f:30:f0:da:cf:e9:4e:d9:
4a:32:4e:05:34:1a:6c:41:bf:47:ef:d3:3b:32:48:53:98:77:
f1:c4:41:28:a0:f6:62:10:aa:c2:fe:25:5f:cf:f9:bc:3b:44:
73:c1:6a:54:a0:76:ce:97:7e:15:7c:7d:5e:cd:12:54:de:c7:
10:ce:1d:3e:4f:c7:0d:96:99:28:d9:39:7e:24:8c:4e:3b:1e:
c2:bb:fc:3a:7e:2d:0a:26:6f:0c:92:54:dc:78:a3:87:21:3e:
03:ed:4d:b1:1a:8a:e7:ac:39:be:fb:23:f8:93:c9:69:ab:bc:
e3:17:4b:69:f6:47:43:95:7c:d7:2c:80:43:da:e2:f2:5d:49:
39:73:6d:fb:fa:08:29:3c:62:b8:25:e9:6a:19:0a:40:81:2a:
89:1d:09:1e:c0:07:71:d9:2e:07:79:52:6a:2a:ef:ac:f2:d2:
9f:3c:85:0c:96:58:6c:76:fb:e6:1a:13:c3:c3:c3:0e:c7:d8:
63:fa:d8:28:e8:00:5f:63:7b:af:2a:46:d2:4d:ef:7b:01:98:
61:01:7c:d2:38:c9:f3:de:98:ff:cd:98:4d:2c:da:fe:bc:db:
74:58:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org