Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/o-6UqkckjlbpUCdSjufhKPG23VI.roa
File: o-6UqkckjlbpUCdSjufhKPG23VI.roa (raw, json)
Hash identifier: QgPwnjhEyYOwmsno/UDCug9WA9BEkFB6Za79bffA/pE=
Subject key identifier: A3:EE:94:AA:47:24:8E:56:E9:50:27:52:8E:E7:E1:28:F1:B6:DD:52
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 01857127762F556A868C6DD22E182FE16E1B
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/o-6UqkckjlbpUCdSjufhKPG23VI.roa
Signing time: Mon 02 Jan 2023 06:24:49 +0000
ROA not before: Mon 02 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205029
IP address blocks: 185.79.201.0/24 maxlen: 24
2a03:5e20::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 30 Jun 2023 08:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:76:2f:55:6a:86:8c:6d:d2:2e:18:2f:e1:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Jan 2 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ee94aa47248e56e95027528ee7e128f1b6dd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:bb:6c:d4:31:48:3e:0b:10:df:b5:2c:c0:
99:f6:1a:40:fa:db:09:9a:dd:7d:4c:54:ff:0b:7c:
05:88:1a:79:db:c1:cd:3b:18:cc:2a:79:20:98:95:
f8:c1:dc:33:e0:49:f7:fc:46:42:93:92:d3:ab:97:
c3:16:7a:be:b3:88:ba:2c:3a:0e:b0:36:c1:93:c2:
4f:a7:63:71:4c:b6:57:18:d9:a9:5f:92:6c:18:e4:
d8:11:50:e2:3e:58:03:de:77:d5:19:e1:bb:b9:01:
5c:97:4b:f7:4a:86:76:bb:5d:50:39:23:6b:55:14:
06:1f:ff:25:1e:9c:b0:58:cd:6f:89:bd:b3:7b:ee:
05:f5:94:dc:1d:93:c7:c1:75:c3:d1:df:72:9e:7a:
86:cd:b6:ec:d8:0f:06:5a:a6:9b:7b:ed:50:01:e9:
3c:86:35:39:25:bb:e1:80:4a:f2:1a:f3:b8:24:ed:
78:d8:f7:8d:aa:7c:9e:d3:db:4c:60:78:6d:a6:c9:
7f:f1:c1:4b:51:e7:06:59:29:77:d8:72:af:cd:31:
15:97:d9:7e:46:95:f8:b4:df:7b:b0:13:82:57:d5:
db:96:38:9a:79:0c:2b:22:2b:17:2c:ed:48:da:ce:
a5:df:9c:e5:4e:22:ab:27:de:c4:6c:46:6b:29:15:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:94:AA:47:24:8E:56:E9:50:27:52:8E:E7:E1:28:F1:B6:DD:52
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/o-6UqkckjlbpUCdSjufhKPG23VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.201.0/24
IPv6:
2a03:5e20::/32
Signature Algorithm: sha256WithRSAEncryption
ab:af:51:aa:dc:7a:4f:58:ef:db:60:46:b2:c1:3e:0b:37:85:
20:d0:6a:3e:cc:8d:00:74:e6:64:b3:e5:86:96:35:a3:11:20:
12:0e:81:63:46:0e:c3:65:a7:d0:d7:1b:20:cf:17:49:f8:d0:
a7:13:18:46:1d:c2:33:df:78:7a:3e:dd:79:e7:5f:47:c9:79:
f3:68:63:8b:65:77:a6:ea:21:cb:93:c7:4b:2c:10:59:e3:a8:
cf:1f:34:5d:93:f9:a1:a4:d8:72:6c:30:70:f7:f5:2e:9c:d9:
eb:c4:21:98:5b:fb:62:df:d4:6d:b7:2d:8c:50:cd:8d:ca:18:
f3:a2:66:07:27:06:4c:0f:f3:3a:e5:fd:7f:71:59:25:19:88:
01:03:9c:47:8a:0a:22:00:3b:af:0b:7c:a0:e0:1d:4c:76:60:
20:73:f1:46:cc:1d:df:c9:9a:42:09:1f:2a:12:cc:17:19:9a:
c9:b3:3b:a5:22:76:5e:5e:22:38:42:9a:4a:b1:38:8d:8b:52:
4b:70:d8:b3:78:7d:ce:81:5b:50:ac:51:c5:43:73:b0:0f:25:
cd:7d:d9:89:e5:ee:ac:34:20:95:88:0d:41:57:87:62:ec:26:
0f:de:8c:89:e7:e1:bb:d7:cd:a0:99:14:e5:bf:0e:2b:dd:c9:
02:66:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:54 2024 by rpki-client on console-fra.rpki-client.org