Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/60ymmMRAATFj6VH41ZKZx3duJEw.roa
File: 60ymmMRAATFj6VH41ZKZx3duJEw.roa (raw, json)
Hash identifier: tNWdIhxqklfVVE/6VgjskVn+6nA6KtxoajgV2G7y3QI=
Subject key identifier: EB:4C:A6:98:C4:40:01:31:63:E9:51:F8:D5:92:99:C7:77:6E:24:4C
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 018727F4A1E523EF244D8E59171E26335DDF
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/60ymmMRAATFj6VH41ZKZx3duJEw.roa
Signing time: Tue 28 Mar 2023 11:22:36 +0000
ROA not before: Tue 28 Mar 2023 11:22:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42894
IP address blocks: 145.31.0.0/16 maxlen: 24
145.50.0.0/16 maxlen: 24
145.45.0.0/17 maxlen: 24
131.237.0.0/16 maxlen: 24
2a13:e080::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Mar 2023 11:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:f4:a1:e5:23:ef:24:4d:8e:59:17:1e:26:33:5d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Mar 28 11:22:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb4ca698c440013163e951f8d59299c7776e244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:2f:09:e8:cb:4a:f4:32:f2:c5:cb:f2:06:
11:74:5e:69:7e:64:ca:67:95:b2:b0:fd:7e:a2:d2:
7a:02:49:30:b4:8f:b0:39:a5:49:7f:60:ea:be:87:
b7:cb:af:da:72:9d:97:27:20:8b:c7:50:93:e5:91:
09:5b:87:18:7f:d3:45:17:16:bf:b8:81:02:77:5f:
76:13:6e:52:25:43:61:ee:b5:6e:8b:81:ed:b9:b9:
e3:46:c0:9f:11:25:ea:98:14:9a:4d:f4:e0:41:cb:
f6:88:49:0e:4d:f2:66:0e:67:fd:f8:7e:1b:20:0e:
8f:3f:79:d3:3b:06:bf:dd:c7:85:11:c8:44:3c:98:
47:d9:cd:42:65:58:5c:fc:9b:93:d2:dc:fc:a0:89:
02:40:42:62:d6:90:2f:9b:8c:f1:c6:49:16:54:49:
1f:99:4c:58:89:5e:46:02:28:ef:7c:e7:b5:48:ed:
35:5f:28:ff:97:6c:fd:cb:e5:09:6c:09:38:6f:e0:
e9:09:4e:d5:3f:88:c1:2a:b1:3e:87:ba:40:c0:60:
22:ae:60:00:93:4e:18:bf:af:56:54:99:13:ea:80:
30:4a:ad:5d:9d:b0:1d:44:df:c6:29:1e:ab:83:32:
70:57:48:5d:e9:f4:d8:a2:a7:77:64:d3:b2:54:90:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:A6:98:C4:40:01:31:63:E9:51:F8:D5:92:99:C7:77:6E:24:4C
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/60ymmMRAATFj6VH41ZKZx3duJEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.237.0.0/16
145.31.0.0/16
145.45.0.0/17
145.50.0.0/16
IPv6:
2a13:e080::/32
Signature Algorithm: sha256WithRSAEncryption
9a:da:ac:af:3c:27:f8:d3:82:a2:81:59:89:00:7b:a0:3a:01:
8a:30:d3:77:24:41:03:42:e9:e5:58:81:b9:40:c8:f0:ce:12:
37:12:1e:b2:14:73:2c:fc:ce:8d:33:b5:17:b5:02:0e:a1:b8:
52:23:25:8c:2f:96:48:e5:50:cd:c9:1c:fd:a4:2b:2a:f2:ca:
93:07:7d:0e:cd:48:ac:bb:d3:43:7d:d6:f7:ca:b4:18:c4:61:
1f:36:ba:2b:a7:03:8f:93:73:3c:07:b4:72:91:bd:a6:ea:51:
0e:54:13:d4:f6:38:a0:2c:e2:09:c6:f1:76:ac:3f:f7:df:f8:
b0:fa:b9:36:5c:6b:0c:a4:74:12:52:88:1a:3f:bc:11:a4:48:
7b:89:4d:04:51:a0:37:1f:a9:9f:04:ba:d2:71:16:01:b6:30:
d5:74:b6:e5:47:f2:7c:e2:92:b7:b5:b7:a7:12:de:39:13:65:
e5:eb:28:61:ee:22:1e:4e:02:2e:c3:37:45:8d:6e:1f:ac:8e:
4f:c2:8d:c5:90:10:39:fb:2d:fa:6c:b7:ed:21:98:17:3f:d0:
6c:e2:43:5a:5c:d4:8d:7f:44:9d:8b:7c:df:98:83:33:50:3a:
9e:87:c1:db:c2:36:de:76:45:f6:56:b6:4e:c2:e1:92:fd:61:
5d:7f:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org