Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/6MApHcmH9bmA8EEpAOxqthFqxb0.roa
File: 6MApHcmH9bmA8EEpAOxqthFqxb0.roa (raw, json)
Hash identifier: bhZFBMGdOA5VSKHqc1CRTe10KMSm5PEfTmDrGILLs4c=
Subject key identifier: E8:C0:29:1D:C9:87:F5:B9:80:F0:41:29:00:EC:6A:B6:11:6A:C5:BD
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 018CC5DC13E4C9C10E9AFDC6679E0ABCC279
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/6MApHcmH9bmA8EEpAOxqthFqxb0.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 138.124.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:13:e4:c9:c1:0e:9a:fd:c6:67:9e:0a:bc:c2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8c0291dc987f5b980f0412900ec6ab6116ac5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:78:cd:f6:05:2e:17:3c:d2:6e:25:8e:9d:
98:0f:4b:40:a5:c8:0a:f0:6c:44:f6:25:58:d0:56:
2f:c7:e3:7d:4b:5c:4a:7d:69:eb:a9:29:4c:1e:c8:
90:19:c1:af:f6:ad:ae:0f:8b:7d:8b:3d:91:7c:e4:
17:a0:f6:62:d2:8a:5f:13:59:4c:39:b3:c7:29:a1:
bd:20:19:42:a2:31:8f:79:f1:d5:0d:dc:96:e7:ab:
df:dc:e7:91:15:95:81:33:a5:db:4c:8e:15:8a:c5:
20:18:4b:bc:63:e4:1c:c4:9c:66:ae:d2:a7:2d:66:
3d:5b:38:18:ab:f8:03:ac:e9:2b:f7:3a:42:3b:b2:
a6:6d:a2:ba:86:e8:10:f4:52:61:c1:a9:27:23:e6:
af:b7:ab:c8:76:3e:8c:82:1d:0d:a0:51:4b:d1:08:
c0:4a:8e:95:62:6a:c7:e3:4e:f0:d2:97:21:79:60:
38:eb:03:48:cd:94:67:95:c9:e2:25:2b:fa:f6:26:
9b:0f:46:51:ec:81:dd:a2:ca:df:3c:a1:3a:72:3e:
46:20:bd:ed:7c:7b:b2:e2:0d:98:66:5e:a9:43:1f:
8b:c2:3f:49:2c:44:cd:94:18:b2:cf:47:99:2b:30:
71:a1:b3:9e:4e:82:03:bb:10:a9:10:0b:b3:98:8c:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:29:1D:C9:87:F5:B9:80:F0:41:29:00:EC:6A:B6:11:6A:C5:BD
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/6MApHcmH9bmA8EEpAOxqthFqxb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.186.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ae:f9:20:bb:65:d8:c1:4e:22:0d:9f:a6:ff:d3:2c:7f:22:
02:c3:6c:0c:55:c8:fd:e3:54:b4:04:c3:c0:cc:8d:1b:42:d2:
78:5f:68:53:de:08:b7:08:f0:8b:13:4e:79:d3:23:02:3e:a8:
15:9a:15:ac:ed:1f:7f:2b:0d:ba:2e:75:2c:85:cf:03:d8:2b:
95:44:79:60:83:51:c4:8d:61:4f:eb:72:31:4e:95:07:45:87:
15:e6:81:f3:0b:15:0f:d2:1f:75:e2:f3:9a:3f:61:23:7b:bc:
6a:4a:11:1a:ef:f5:c2:74:38:2f:d2:8c:cc:e0:a5:41:0a:af:
67:34:6e:fb:87:74:08:1f:b7:93:65:38:06:3f:cb:79:ac:d6:
71:ff:99:a2:38:17:c2:75:d0:16:8b:9c:f1:92:0f:f9:4d:a1:
01:be:51:ee:6c:a6:4a:c8:28:90:cc:ba:76:a1:bd:64:97:87:
10:47:91:66:3c:79:e1:14:8c:9b:e8:05:16:6f:de:a5:13:cd:
b3:9d:e3:87:70:c4:e3:ad:66:4f:31:09:c9:d0:a6:04:a2:56:
c6:85:40:71:e4:9c:8e:3b:78:8b:94:ab:7d:72:d7:0c:44:2d:
56:47:c8:f8:da:bf:5c:29:19:72:dd:24:09:57:5b:42:1a:da:
04:ca:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org