Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6WR_iPdZz7NaopnJrr49F1iRfPk.roa
File: 6WR_iPdZz7NaopnJrr49F1iRfPk.roa (raw, json)
Hash identifier: A8CL9QXnErRLszF/IBvHQLff+Ziz7fgHf8Z7ZUX9hr0=
Subject key identifier: E9:64:7F:88:F7:59:CF:B3:5A:A2:99:C9:AE:BE:3D:17:58:91:7C:F9
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018878ADBC9745EE3E46CE343008743692C2
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6WR_iPdZz7NaopnJrr49F1iRfPk.roa
Signing time: Thu 01 Jun 2023 20:37:11 +0000
ROA not before: Thu 01 Jun 2023 20:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:ad:bc:97:45:ee:3e:46:ce:34:30:08:74:36:92:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 1 20:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9647f88f759cfb35aa299c9aebe3d1758917cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:91:29:5d:f7:8c:df:79:ab:19:e5:1f:3b:
ed:0b:23:b4:a5:b9:62:ac:7c:db:c8:90:13:9d:fc:
df:b3:12:30:6d:e4:fd:40:02:82:7b:f0:08:f0:95:
db:07:84:15:0c:83:90:e7:a2:12:ff:c2:e6:a0:b3:
ee:01:21:33:ea:e3:4a:c4:c5:db:fa:95:92:77:39:
ac:70:53:fa:be:90:4d:25:d5:83:10:a0:5d:7b:4e:
9d:ab:1f:c9:e2:04:f9:2d:2d:74:9d:b3:f4:86:d5:
d3:4c:76:89:31:11:12:c7:98:25:a5:26:87:8e:05:
46:63:6d:1c:c7:db:0c:ce:ce:fc:25:59:35:de:5a:
77:db:80:a4:34:8d:80:fa:ae:7a:d5:63:01:80:cd:
5f:b5:6e:49:a0:21:09:05:ae:fa:d3:39:f6:4c:7a:
f2:a8:a3:ac:1a:7c:73:c7:5b:bb:e9:10:40:e4:b7:
38:8b:7e:07:42:36:51:80:8f:9e:55:28:2e:c4:07:
17:7c:20:ea:e9:cf:be:53:05:1c:62:a6:22:d3:0a:
e1:e7:57:9a:43:c5:c3:e8:17:35:86:f1:08:14:fa:
91:02:8e:e0:27:d9:70:f5:1c:08:7c:82:23:f7:56:
5b:54:0a:20:e5:cf:34:a4:be:98:0a:fc:c5:61:71:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:7F:88:F7:59:CF:B3:5A:A2:99:C9:AE:BE:3D:17:58:91:7C:F9
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6WR_iPdZz7NaopnJrr49F1iRfPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0-194.143.218.255
Signature Algorithm: sha256WithRSAEncryption
ae:b6:cb:07:2a:c1:b4:85:5a:ce:bf:38:0a:48:b5:c4:1e:53:
58:19:f5:b9:6c:cc:a9:0d:46:77:9a:d7:9a:b5:18:b5:9d:d4:
3f:2d:7e:ce:9e:37:b6:fa:67:66:06:68:5a:cc:2b:a8:48:e1:
91:07:c2:29:cd:cf:e9:53:dc:95:3d:48:e6:85:9c:f8:ba:88:
14:57:42:9d:48:fd:28:eb:a8:c5:80:b2:f0:b2:6e:56:20:69:
77:56:86:5c:45:fd:b3:c0:09:a0:35:5e:26:0d:3f:b4:6e:b1:
90:b7:c8:5c:28:5e:db:c7:60:24:99:e2:d3:c6:2c:60:83:da:
69:8a:73:9a:46:80:b1:b3:8a:7a:60:09:78:b0:6e:e1:1a:3f:
1b:c8:1a:0e:87:3f:93:f7:ba:48:37:56:b3:31:7b:e2:fe:83:
be:a8:19:a5:79:de:b9:d6:15:6d:83:f2:aa:2e:d5:1d:1e:53:
38:e9:86:89:76:45:82:d3:81:2c:dd:7c:8a:32:6f:05:7d:39:
4a:62:94:a6:21:a5:c6:27:89:e8:ff:ba:9b:40:b3:aa:3d:15:
b8:ae:8d:ec:10:4e:83:7a:95:45:ce:bd:d3:49:0a:0c:9a:a6:
28:56:ad:9e:21:31:46:36:27:c7:1d:09:f4:db:d8:9a:81:a7:
86:42:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:51 2023 by rpki-client on console-fra.rpki-client.org