Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Z9jWZ5nYCrQ18L0bicHyaQ6Iqic.roa
File: Z9jWZ5nYCrQ18L0bicHyaQ6Iqic.roa (raw, json)
Hash identifier: +ARBRwm7f6aAfvGGdibW27e6kFG8jIqPOBCYWJYzRJk=
Subject key identifier: 67:D8:D6:67:99:D8:0A:B4:35:F0:BD:1B:89:C1:F2:69:0E:88:AA:27
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 0186DBAFC17EE62FB9DBE8AD50FCEC539BCD
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Z9jWZ5nYCrQ18L0bicHyaQ6Iqic.roa
Signing time: Mon 13 Mar 2023 15:56:14 +0000
ROA not before: Mon 13 Mar 2023 15:56:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39448
IP address blocks: 178.238.50.0/24 maxlen: 24
80.68.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:af:c1:7e:e6:2f:b9:db:e8:ad:50:fc:ec:53:9b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Mar 13 15:56:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67d8d66799d80ab435f0bd1b89c1f2690e88aa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:51:75:cf:6a:a4:7d:8b:3d:6d:e1:e1:d8:
25:30:e6:03:d2:80:c4:67:2f:1f:4a:7a:25:fd:37:
ef:3b:19:83:5e:6f:a0:3c:7e:d8:65:76:db:12:1b:
89:0d:d1:f8:77:c3:af:10:16:cc:0a:8e:44:aa:c9:
0a:ab:90:07:82:37:f4:9d:e3:6d:11:20:fe:cc:a4:
99:fc:78:33:05:fd:28:13:3a:b2:23:1e:d4:3b:67:
ef:ac:01:58:26:65:e2:92:dd:81:ac:e8:14:3f:f4:
53:6f:f6:b4:5f:f0:40:87:8b:6d:a9:92:5e:c9:59:
fc:75:4e:2b:86:69:76:06:0f:83:b2:84:60:c6:67:
1a:6f:82:60:64:61:b1:b3:2c:c0:3e:43:da:2e:92:
39:7a:ed:43:9a:4c:90:26:0e:f2:8c:b1:22:84:ba:
95:db:3b:12:b8:f7:85:f3:f8:d9:b5:59:f1:f5:b3:
a6:1f:32:f5:12:8f:d5:bd:15:a7:7d:c9:cf:8b:a3:
ab:cd:4c:26:fe:72:e5:a2:fd:67:e3:2b:e3:26:f2:
95:da:2a:71:8f:6a:64:a0:61:32:4a:b3:b7:98:b1:
8e:1d:da:54:7c:c1:57:68:7c:67:40:73:a6:59:c6:
7e:b3:24:4b:24:63:86:d7:da:27:b7:80:5b:87:ba:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:D6:67:99:D8:0A:B4:35:F0:BD:1B:89:C1:F2:69:0E:88:AA:27
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Z9jWZ5nYCrQ18L0bicHyaQ6Iqic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.176.0/24
178.238.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f2:73:15:c0:71:e8:f1:c6:00:a4:87:b1:a3:d2:70:cc:26:
14:de:ca:0e:39:e6:55:05:3b:9a:93:9e:d0:a5:6a:59:15:aa:
f6:3f:64:05:a1:cf:7f:c3:bd:97:fd:d7:19:5e:20:1b:ed:3b:
b2:52:80:d2:b7:04:c3:12:39:10:ab:41:21:89:73:4e:b1:11:
8e:11:c8:59:af:9c:54:cf:c3:a3:9c:d9:89:6e:8a:c2:1a:df:
87:72:6a:9f:8f:23:38:07:06:c5:26:67:89:71:6d:e1:19:b7:
eb:d9:ac:ee:04:84:65:8c:43:ef:fc:6e:aa:a4:ac:8f:ab:43:
3f:ec:cd:5e:bd:08:10:62:fe:82:72:b1:9b:32:10:24:15:61:
cf:34:d7:7e:85:6e:e8:4b:64:0e:2a:6e:68:5a:61:72:7c:80:
89:3e:52:c6:c5:17:5d:d2:d6:e1:c5:7a:8e:77:87:25:02:71:
99:51:4f:c1:71:0d:09:30:5b:20:2c:f2:e2:fb:78:8f:94:5e:
19:0e:1b:d3:29:27:c9:8f:3b:ba:e0:5f:df:db:8e:1e:36:34:
c7:fd:4b:7e:38:eb:fb:98:07:00:d4:aa:0b:cb:5e:e9:72:ef:
e6:dd:42:60:af:67:81:28:76:83:9a:c8:09:4c:c5:47:16:87:
c0:13:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org