Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6XKLSvdHF15IcjjfCwjx-Ch5dVk.roa
File: 6XKLSvdHF15IcjjfCwjx-Ch5dVk.roa (raw, json)
Hash identifier: /IBjPLpVvoApmth6EIOq/3X5HzjXq+clNZk+SeyQsM8=
Subject key identifier: E9:72:8B:4A:F7:47:17:5E:48:72:38:DF:0B:08:F1:F8:28:79:75:59
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0189314BAC140FDABED795F44993193E8895
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6XKLSvdHF15IcjjfCwjx-Ch5dVk.roa
Signing time: Fri 07 Jul 2023 16:59:50 +0000
ROA not before: Fri 07 Jul 2023 16:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 195.114.201.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 13:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:4b:ac:14:0f:da:be:d7:95:f4:49:93:19:3e:88:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 7 16:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9728b4af747175e487238df0b08f1f828797559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:04:30:08:72:e7:be:50:a2:1b:ee:5b:71:
0f:9e:52:1a:6d:2c:33:b7:12:68:f2:f0:a5:c3:f0:
38:9f:00:12:b4:0e:be:7f:2d:83:bb:f1:94:73:ab:
58:20:19:25:86:32:6f:e5:84:74:91:c8:e7:75:b8:
de:d3:08:a4:60:37:0a:17:82:9e:0b:5e:ce:2b:85:
8c:c6:83:0a:11:48:a0:54:a7:31:ca:a9:0e:b9:a1:
a1:f5:06:7b:fe:e9:15:8c:7a:a6:90:ff:c5:52:66:
d8:a9:da:b3:cb:2c:af:e2:96:a1:35:bf:ce:6a:dc:
78:26:d6:1c:a4:47:15:70:c9:b4:84:e6:88:c7:22:
2a:a7:92:de:26:1e:ea:42:db:64:9a:32:06:64:dc:
d3:20:65:b5:e4:26:6f:bf:13:0c:2d:38:1a:0f:2c:
4d:be:aa:e8:f1:94:68:85:be:5a:1f:e4:a7:1c:a8:
d7:4e:54:3d:a7:c7:dc:26:07:90:f4:6a:23:76:87:
28:19:a6:ae:09:62:14:a7:3f:21:f9:81:0e:46:4b:
21:9e:d7:81:61:99:8c:bc:87:5f:52:3c:ab:c0:e9:
cb:a7:04:e7:ac:23:25:83:02:8f:c7:69:e4:3b:c3:
d4:9b:d8:a4:c5:e4:90:68:4d:26:9e:d2:19:d6:65:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:8B:4A:F7:47:17:5E:48:72:38:DF:0B:08:F1:F8:28:79:75:59
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6XKLSvdHF15IcjjfCwjx-Ch5dVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.200.0/23
195.114.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a6:19:29:32:91:dc:5a:84:54:32:ec:ba:85:2d:db:8c:6b:
76:65:e7:25:a4:1a:09:b5:7c:e2:e5:14:e1:65:5f:17:9c:f3:
15:df:87:3f:5f:98:4c:d5:f5:17:d7:00:c6:c2:47:a4:1f:71:
82:18:95:2f:bc:7e:f9:20:f5:6c:59:fb:e3:41:1d:6d:eb:20:
40:e6:85:66:36:cf:2d:bb:5a:df:80:93:f6:3b:99:fb:64:4a:
04:9a:61:c9:d2:c7:b8:32:37:b0:c1:a4:79:cd:18:38:7b:bc:
78:b1:ad:b6:cf:f3:9f:bb:5b:6a:b8:05:ce:81:e9:6a:b4:43:
1d:8f:fa:72:91:6b:a7:03:80:6f:a4:13:b8:93:da:1c:b7:56:
d1:e2:83:73:3a:6e:ae:8f:5a:9a:84:11:a6:16:99:07:1b:8d:
0b:19:e4:50:03:e1:43:d6:db:e8:fe:94:3c:5a:58:e8:82:a4:
0d:cc:65:0e:52:20:38:db:65:76:56:e9:fb:7d:51:8e:dc:88:
43:13:42:4c:20:37:f0:7b:b8:01:ce:b2:c7:92:f4:4f:85:1b:
63:50:91:65:f9:09:aa:e6:3c:92:eb:d0:04:33:9a:14:70:d5:
5d:af:df:94:4e:dd:9c:2a:77:c1:59:3e:71:1f:e5:e9:c3:2f:
3d:d8:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org