Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/S6x1P6jrLrYWmjuKV1pU6bfu-4c.roa
File: S6x1P6jrLrYWmjuKV1pU6bfu-4c.roa (raw, json)
Hash identifier: WvR4VDy3ewx5EtpvPZtsKifOYB8179jQCr45iyn2ioQ=
Subject key identifier: 4B:AC:75:3F:A8:EB:2E:B6:16:9A:3B:8A:57:5A:54:E9:B7:EE:FB:87
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01931A4C323393C6BA984893767042D5AE24
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/S6x1P6jrLrYWmjuKV1pU6bfu-4c.roa
Signing time: Mon 11 Nov 2024 08:17:01 +0000
ROA not before: Mon 11 Nov 2024 08:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 195.114.206.0/24 maxlen: 24
195.114.207.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 07:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:4c:32:33:93:c6:ba:98:48:93:76:70:42:d5:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Nov 11 08:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bac753fa8eb2eb6169a3b8a575a54e9b7eefb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:44:25:e1:e1:17:01:55:4b:80:7e:e8:43:
1c:79:12:e6:f5:65:0c:76:88:c6:a9:35:c0:f8:13:
af:5f:46:59:df:57:70:2e:6f:a1:57:d0:67:f2:7a:
94:8a:b1:1d:42:7d:47:a0:b4:82:ec:21:44:72:3d:
08:ab:f6:d4:eb:90:76:a1:de:f2:3a:ea:95:09:9d:
2c:a5:5d:f8:d8:f5:27:46:69:8c:f3:94:36:6a:bd:
54:15:2e:77:75:82:ec:9b:f2:dc:0a:8e:90:c1:71:
ae:1a:05:39:20:8f:78:42:9c:80:d0:94:f7:f4:b7:
66:ce:7b:97:df:12:70:00:a1:b3:9f:b3:b2:bb:36:
e5:08:98:bc:a7:ad:57:08:72:d6:cf:cb:45:c3:f0:
55:bc:54:9a:d4:13:e8:65:7c:78:da:d0:34:a0:90:
f1:4e:4b:cb:7a:93:6d:ac:24:6f:99:cc:56:28:83:
11:cf:c4:06:c9:91:a7:8d:98:98:94:1e:25:e9:bc:
d6:08:34:a8:e4:1b:74:db:d2:00:16:fb:5d:56:05:
c9:86:87:35:3b:5c:0d:94:3b:ef:81:2f:73:95:1d:
0c:6a:1a:9c:5b:8f:e6:87:de:d4:59:d7:aa:c1:74:
9f:20:2c:96:66:89:a3:46:5a:df:87:39:99:c2:7d:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:75:3F:A8:EB:2E:B6:16:9A:3B:8A:57:5A:54:E9:B7:EE:FB:87
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/S6x1P6jrLrYWmjuKV1pU6bfu-4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.206.0/23
213.220.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6c:b5:86:63:6f:62:94:6d:f5:6f:6f:b2:b5:79:63:6c:a3:
70:77:c2:00:0f:0e:20:c7:ef:03:6a:30:3c:52:a8:77:e6:30:
05:39:f6:6f:43:39:8e:9c:3e:90:d5:7b:1a:92:91:00:0f:ad:
99:db:47:c6:ac:3b:ad:2f:54:97:36:06:e8:50:00:70:c8:5b:
57:0f:0a:1e:fb:83:58:77:02:24:31:24:f4:b6:c0:29:af:d3:
2a:1e:9b:e7:a2:87:88:95:a9:aa:89:f9:af:29:ab:11:ff:59:
4e:f0:5e:43:b1:59:df:cb:36:e4:83:9f:5b:c6:8a:0f:b2:10:
c3:a0:2c:4d:83:7b:5b:8c:36:ed:5c:2a:6d:44:46:13:38:69:
7f:85:8b:0a:48:3a:35:0b:d0:85:d6:0e:a4:ea:d2:5d:c3:b3:
06:a6:ad:c8:79:7a:bf:47:40:ff:6d:b6:20:d3:3f:f2:60:26:
32:5b:c7:53:c0:cf:78:9c:d4:18:da:5e:a5:b8:7d:31:f4:6d:
d4:5b:ff:74:f3:55:bc:cc:08:79:b4:32:31:82:29:d9:a7:74:
d6:e2:aa:24:8b:2c:26:fe:17:f2:89:13:5e:7d:6d:00:1d:11:
f6:d0:42:74:81:7e:bb:e7:84:5a:df:03:ae:df:fa:71:b5:bf:
02:e7:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 09:03:01 2024 by rpki-client on console-ams.rpki-client.org