Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/7j6KFiPldasMC-F4DWH1Was7EU0.roa
File: 7j6KFiPldasMC-F4DWH1Was7EU0.roa (raw, json)
Hash identifier: AmyzhOT6iE4sBjHx6B0IX4F/xPPCErcv+WSOt4AAD68=
Subject key identifier: EE:3E:8A:16:23:E5:75:AB:0C:0B:E1:78:0D:61:F5:59:AB:3B:11:4D
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0188DC9A6005B44A4DAB17B01D6D37E874D1
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/7j6KFiPldasMC-F4DWH1Was7EU0.roa
Signing time: Wed 21 Jun 2023 06:18:04 +0000
ROA not before: Wed 21 Jun 2023 06:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Jun 2023 14:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:9a:60:05:b4:4a:4d:ab:17:b0:1d:6d:37:e8:74:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 21 06:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee3e8a1623e575ab0c0be1780d61f559ab3b114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2e:5b:f6:a3:6e:f3:84:f7:dd:e4:78:17:cb:
e0:0c:04:b5:f2:af:d8:33:ed:9b:c8:6a:1b:ce:33:
71:9e:37:4c:a3:c8:d0:45:54:90:65:db:ab:6a:57:
46:fc:1a:9e:97:6b:da:89:0c:b0:52:07:b7:dc:a8:
7e:3f:00:32:87:c3:22:4a:2e:db:1d:3d:05:cc:98:
ef:91:67:9e:d3:51:b3:0a:87:cc:c5:d1:34:fe:4c:
e7:b9:3e:d4:02:3d:0b:53:6d:c5:ac:7b:e8:75:0c:
22:3d:d1:1b:f4:c7:7a:c5:91:86:5e:33:b9:0f:d9:
30:89:de:a3:84:ef:47:b8:a6:3d:f9:70:8d:77:b0:
4c:ee:15:94:91:b2:16:e8:de:f3:a7:26:42:a1:bf:
35:4d:43:55:a5:34:ca:62:ff:8f:d8:6b:64:9e:47:
fb:c8:75:86:4c:4c:67:25:a7:80:50:60:0a:ec:0f:
66:a9:03:ca:66:47:0b:d4:9e:c9:43:b7:d9:cd:2d:
e1:25:17:69:78:60:01:6a:6c:ab:e9:cc:0c:54:6a:
a8:83:00:57:42:6b:52:f2:2f:88:c7:e6:16:a2:55:
ce:dd:79:a3:6f:27:41:67:67:f9:ca:6a:1d:3a:ca:
f5:b5:17:ca:3b:c1:4a:c5:13:91:76:86:35:0e:ba:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:8A:16:23:E5:75:AB:0C:0B:E1:78:0D:61:F5:59:AB:3B:11:4D
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/7j6KFiPldasMC-F4DWH1Was7EU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0-194.143.218.255
Signature Algorithm: sha256WithRSAEncryption
85:10:c1:d9:d1:36:81:cc:07:8f:67:bd:84:27:82:96:ab:31:
7f:66:9f:ea:b0:c3:49:08:be:54:5a:47:1f:25:1a:3c:7f:b3:
38:f9:97:56:ed:54:76:46:4c:91:54:9a:2e:be:86:da:bc:31:
b3:5e:6d:e5:b6:93:59:40:8a:80:2f:25:0a:e1:88:68:6e:b9:
fb:02:e0:7b:ee:23:21:19:5e:15:ae:0e:7c:6d:c7:38:2c:3e:
b9:2c:e7:62:af:8b:a2:a7:af:88:fd:b1:73:b5:23:61:52:e7:
d8:a5:6f:a5:70:2f:35:3a:0d:d6:a0:24:4d:7a:4b:7a:72:ee:
a8:2a:16:c3:a6:03:dc:81:d2:80:b1:2d:02:21:57:70:99:cc:
db:cf:a9:12:78:85:fc:08:47:fa:22:6e:1e:5d:76:92:af:c2:
6f:c7:b9:84:6f:3d:0a:b6:46:10:bc:3b:44:b4:13:26:2f:e1:
e4:53:9a:6b:a5:1b:4b:ce:43:95:97:f4:1a:07:24:f4:48:56:
c0:c6:c2:da:6b:ca:88:fa:93:fb:bb:b4:0c:41:b3:f4:fe:41:
f4:7a:3f:c3:11:b6:55:82:83:23:d0:3e:9b:4e:31:2c:8d:60:
44:4d:7f:e8:27:8b:ce:7e:a9:66:f2:86:07:51:40:87:73:c2:
10:95:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org