Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/6UWYeGR-ElJB9XXei1_1IVKyt68.roa
File: 6UWYeGR-ElJB9XXei1_1IVKyt68.roa (raw, json)
Hash identifier: qctm12Pbo2FHzOHFAR7nW/R34AjfStMQwY0S13q4ang=
Subject key identifier: E9:45:98:78:64:7E:12:52:41:F5:75:DE:8B:5F:F5:21:52:B2:B7:AF
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 018698B6D9C66458B7398D150795E8B4DD5C
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/6UWYeGR-ElJB9XXei1_1IVKyt68.roa
Signing time: Tue 28 Feb 2023 15:49:25 +0000
ROA not before: Tue 28 Feb 2023 15:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 185.208.36.0/22 maxlen: 22
2001:1a30:c000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:b6:d9:c6:64:58:b7:39:8d:15:07:95:e8:b4:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Feb 28 15:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9459878647e125241f575de8b5ff52152b2b7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:a6:0c:21:9c:b0:d8:10:f4:ad:81:ef:8f:
80:cb:a7:97:21:9d:fe:9c:71:87:f1:58:48:03:24:
77:24:00:06:e8:78:09:b0:ef:f5:9f:3a:15:7c:f9:
90:38:9e:03:23:93:30:cc:9c:a3:98:86:bb:72:d7:
9e:0a:8b:5d:f4:02:d0:02:db:85:eb:a9:09:c7:62:
90:7f:f0:94:a4:06:df:8d:75:6b:d3:d3:e9:8f:40:
bc:97:fd:10:b8:01:3e:11:74:c6:52:28:94:6f:3a:
ce:15:20:92:cd:b8:47:8c:85:55:f6:d3:de:f5:89:
2f:3d:11:c5:ee:6e:e5:f5:12:d5:d3:ff:84:ba:5d:
d3:cd:e6:ec:e9:26:6a:46:c1:c5:5e:e3:59:0a:ee:
38:9e:05:5c:17:97:a5:52:44:74:04:d5:cf:a7:cd:
af:ba:6c:d9:1c:e1:e1:d3:74:25:ad:5a:3d:2a:b1:
f6:0a:2a:75:de:4f:a4:80:e9:5e:45:ab:93:86:02:
33:92:ef:eb:11:f5:93:77:6b:1e:43:d5:cd:bf:8a:
41:38:a4:b0:3b:4e:ab:66:e4:26:87:23:ef:25:ce:
5a:b6:52:18:b7:c8:c8:f2:a4:b1:87:0d:3a:ba:8d:
33:08:bf:9d:c2:2a:ef:58:16:03:14:b7:b2:8f:15:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:98:78:64:7E:12:52:41:F5:75:DE:8B:5F:F5:21:52:B2:B7:AF
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/6UWYeGR-ElJB9XXei1_1IVKyt68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.36.0/22
IPv6:
2001:1a30:c000::/48
Signature Algorithm: sha256WithRSAEncryption
71:d5:d9:0b:11:dd:c6:c1:db:45:48:38:f8:e3:a4:5c:d2:37:
74:43:d1:90:ff:84:19:01:df:3d:75:65:53:52:a1:1b:2e:c5:
af:f2:4c:32:48:87:20:64:8b:f4:3d:b5:88:f5:71:04:b4:93:
4e:1c:5b:bf:ce:f3:9e:f7:b6:29:19:2c:0e:d8:d6:01:9a:ed:
95:1b:b0:64:18:a9:46:21:a6:c6:0f:8e:75:76:64:74:69:9a:
60:fb:31:46:30:b9:2a:1d:1e:12:02:20:be:c5:20:2c:b6:fa:
06:53:dd:31:a3:4b:1b:59:39:ad:ec:b4:3f:41:72:d7:56:68:
ed:ee:2c:df:67:40:af:96:4f:35:f0:d5:07:11:81:02:d1:97:
03:7f:50:ae:fa:81:68:1d:f8:cf:e8:69:85:0d:3e:29:fb:82:
95:39:34:10:87:2e:2e:08:ad:37:66:b5:72:6f:7e:cb:c8:17:
8b:c7:6e:8e:9c:dd:00:ec:6e:8e:2d:ed:31:1e:bc:d8:61:9a:
da:e4:09:bc:44:dc:df:8e:70:f1:11:dc:a3:f0:8f:14:2a:fd:
97:e8:ec:01:9f:50:6a:1c:ec:2b:97:09:40:fb:c0:bd:17:d4:
02:f8:d6:eb:8d:38:3f:7e:ea:b7:59:a6:80:50:de:5c:12:ef:
d5:6c:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org