Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/6BE3nfUCT6sOZuuJQ4k9vpHQ6BI.roa
File: 6BE3nfUCT6sOZuuJQ4k9vpHQ6BI.roa (raw, json)
Hash identifier: xHZ5N/G1swUZD2vyJBqFhlnGi0jhdfRbpSG/RdUp/9A=
Subject key identifier: E8:11:37:9D:F5:02:4F:AB:0E:66:EB:89:43:89:3D:BE:91:D0:E8:12
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 0185729EEF2528E1762929682D0E8A0E642F
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/6BE3nfUCT6sOZuuJQ4k9vpHQ6BI.roa
Signing time: Mon 02 Jan 2023 13:14:56 +0000
ROA not before: Mon 02 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51654
IP address blocks: 91.220.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:ef:25:28:e1:76:29:29:68:2d:0e:8a:0e:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Jan 2 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e811379df5024fab0e66eb8943893dbe91d0e812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:8e:9d:94:db:d6:11:6f:8a:b1:12:6a:a7:
df:49:e7:a3:3f:ae:b9:26:5f:9f:d5:4e:d8:09:9b:
91:23:0f:7e:3b:ba:85:9c:82:a2:4f:48:d0:9d:24:
fe:27:b0:5b:ad:55:c6:22:2f:ff:e4:af:cc:09:2e:
71:d9:e9:2b:71:99:c3:d3:c6:da:27:e0:a0:56:ae:
93:2c:a0:c8:e1:1a:7a:04:1d:a9:4d:cf:42:21:41:
5f:bb:ac:27:e3:6a:9e:41:c0:b4:51:b2:b1:26:f3:
67:a7:5e:f6:31:b5:67:64:5b:05:5e:83:b2:09:86:
43:75:86:83:88:7b:f6:fa:0a:8f:e2:60:bb:5e:5d:
1d:67:2b:70:13:b0:85:d5:4c:2e:71:2b:63:f1:31:
99:65:a6:4e:f4:b4:57:61:47:a1:6f:46:37:25:3b:
1d:0c:6e:f3:67:bb:43:41:ac:5b:db:2e:ad:c6:15:
63:76:91:46:55:90:88:1f:54:f8:ba:62:7e:5b:0d:
20:e9:f7:f3:69:9f:b7:e5:a4:65:ac:a4:62:ec:46:
f9:f9:84:eb:03:8c:54:8f:c0:b5:56:8a:8c:41:21:
92:f6:c1:aa:f2:71:3f:23:53:f5:d8:b5:b3:14:cc:
9a:88:87:c4:4b:85:7c:e3:fa:88:01:53:4e:b0:af:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:37:9D:F5:02:4F:AB:0E:66:EB:89:43:89:3D:BE:91:D0:E8:12
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/6BE3nfUCT6sOZuuJQ4k9vpHQ6BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.26.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b5:20:62:97:43:d8:c8:fc:59:c7:4a:0c:45:33:b5:a6:5a:
3c:ff:d9:d1:59:85:df:0e:70:70:9b:3a:21:a6:72:86:a4:30:
ce:e6:ae:7f:cf:1f:ef:8e:6b:12:61:d6:ef:bc:c4:a4:f6:7c:
f6:22:28:9e:3e:c3:8a:6e:0a:13:35:e7:3b:db:a2:3b:c3:a7:
14:c2:4b:fe:f2:19:b8:77:bf:9a:d7:44:3e:44:f1:f4:92:e8:
d8:de:99:df:6d:a9:4c:1a:c8:94:98:ce:fb:8c:b0:4d:8f:b4:
4f:09:78:10:b7:a2:90:ae:c0:f6:a8:f3:1c:db:84:95:62:36:
b7:df:01:3d:79:4b:fd:d4:d1:64:75:b8:4e:25:77:44:56:5f:
c7:04:59:7f:5b:16:6a:8d:dd:a5:64:ea:48:6e:c5:01:27:4c:
83:7a:2d:e9:99:e7:9f:db:fc:2b:aa:2f:8f:1a:b1:9d:81:03:
2c:60:13:5c:95:10:bc:e8:91:6f:88:0f:65:2a:2d:dc:b5:97:
1d:06:23:d0:cb:34:53:c6:6e:e0:3b:08:a7:95:8c:cd:5f:dc:
c5:6d:e6:e0:39:c6:82:c1:d1:8a:cb:d9:83:2c:9b:1a:26:20:
1b:3e:8f:3b:3c:ef:d3:f7:86:c6:bf:d4:5f:a9:52:89:91:24:
25:ca:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:53 2024 by rpki-client on console-fra.rpki-client.org