Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6m0lVMmDwr78pTrGvn7MLhZ97L8.roa
File: 6m0lVMmDwr78pTrGvn7MLhZ97L8.roa (raw, json)
Hash identifier: 2bKyyLLodo8Sn27kjS63j7ZhxUtOwK4e/BEIifcczjE=
Subject key identifier: EA:6D:25:54:C9:83:C2:BE:FC:A5:3A:C6:BE:7E:CC:2E:16:7D:EC:BF
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01856DC19E4721D2B43D7C1AD53A3740F8A2
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6m0lVMmDwr78pTrGvn7MLhZ97L8.roa
Signing time: Sun 01 Jan 2023 14:34:43 +0000
ROA not before: Sun 01 Jan 2023 14:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 193.9.17.0/24 maxlen: 24
213.108.133.0/24 maxlen: 24
91.229.112.0/23 maxlen: 23
81.161.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9e:47:21:d2:b4:3d:7c:1a:d5:3a:37:40:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 14:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea6d2554c983c2befca53ac6be7ecc2e167decbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:02:ee:b6:2d:f9:5a:ce:74:5e:0e:e4:01:
c4:c8:a9:93:2d:f1:40:bd:93:78:09:2e:90:fd:01:
68:89:bc:d6:ce:01:d3:57:e0:c4:7e:76:c7:37:84:
d0:7f:e5:47:35:c0:a5:e0:da:2d:46:bb:01:ad:73:
d7:d2:03:fc:39:02:bc:4a:d6:6c:86:54:ec:75:24:
12:6a:6a:95:d0:b3:7b:b8:d7:97:b8:ab:34:f3:c0:
32:e9:23:bf:c7:70:36:45:ac:de:07:e1:88:a7:62:
0d:b5:3b:6d:f7:4f:bb:67:b6:7e:ef:ee:63:f1:15:
d3:46:ed:b7:54:c4:af:6a:ee:9a:c9:ce:9b:77:fc:
3b:8d:9d:8b:52:86:ca:a8:d9:80:4d:f2:39:df:45:
2d:47:25:ff:6b:49:fc:fa:aa:7f:eb:87:87:14:d2:
d2:36:66:ef:33:58:d5:0b:96:09:a9:61:9d:c7:ff:
1f:25:f4:60:ef:bd:ef:50:f2:b2:91:63:fd:76:03:
2e:79:fe:aa:3c:83:e2:d0:64:35:8c:14:21:7d:b6:
08:e6:da:f1:02:78:44:f3:bf:0c:28:05:82:40:8a:
03:e0:93:ad:46:87:80:bf:2a:87:56:b8:01:35:97:
37:e8:84:c9:66:9f:0c:d4:e8:c8:ab:37:a8:55:75:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:25:54:C9:83:C2:BE:FC:A5:3A:C6:BE:7E:CC:2E:16:7D:EC:BF
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6m0lVMmDwr78pTrGvn7MLhZ97L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.63.0/24
91.229.112.0/23
193.9.17.0/24
213.108.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f8:08:6d:98:0b:4d:01:58:3d:32:4a:3a:31:c6:49:1b:3f:
45:75:41:0c:48:42:f1:ba:b4:6d:c8:d0:1f:df:0e:a1:03:a0:
6f:eb:5f:55:30:c2:db:38:d3:a9:f6:5c:c8:54:f8:93:43:ca:
f1:c3:0c:61:16:f7:1a:73:fb:02:c3:aa:73:cb:d4:46:1a:b9:
f8:19:91:92:8a:e7:5a:a4:2d:de:2b:fa:db:23:d4:c3:62:eb:
08:b9:3f:d8:c8:5b:ff:3d:80:51:1f:8c:74:c2:79:3f:cb:d6:
5c:44:d8:fe:30:9b:92:cc:e5:d5:5d:eb:dc:62:e2:bb:34:e1:
82:53:55:d0:2d:a4:e1:e3:2e:f1:49:5c:92:80:d8:c3:60:97:
1b:0a:8b:33:18:d5:97:1c:95:ea:57:22:cb:18:ce:49:49:0e:
60:c9:31:d7:0c:88:f2:19:47:7b:31:a4:02:1d:79:f1:8e:da:
f1:64:53:34:7d:1b:b3:6f:38:1d:c4:09:77:50:e4:ea:55:c1:
9d:46:50:f1:b8:48:6b:2f:5f:ab:a0:87:7c:ba:ea:84:84:f5:
49:45:fc:57:be:32:8d:c7:c5:6e:ae:fb:a2:5d:6b:dc:68:ef:
6a:15:d6:ab:5d:b8:ea:bd:b1:9d:27:31:5f:01:4a:4b:8a:fc:
02:11:46:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:40 2024 by rpki-client on console-ams.rpki-client.org