Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/k82pklS22TxgNh7wKFosBScklls.roa
File: k82pklS22TxgNh7wKFosBScklls.roa (raw, json)
Hash identifier: P9O7Xhxsd1NjVlsgWcyYtaiyJTgEAvxSOzOBjtYVvkM=
Subject key identifier: 93:CD:A9:92:54:B6:D9:3C:60:36:1E:F0:28:5A:2C:05:27:24:96:5B
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 01860E80925A4A7C269DF3B6F9E9E3EFB644
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/k82pklS22TxgNh7wKFosBScklls.roa
Signing time: Wed 01 Feb 2023 19:42:32 +0000
ROA not before: Wed 01 Feb 2023 19:42:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 176.105.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Feb 2023 01:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:80:92:5a:4a:7c:26:9d:f3:b6:f9:e9:e3:ef:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Feb 1 19:42:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93cda99254b6d93c60361ef0285a2c052724965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:31:46:8d:f3:9f:39:7d:5e:2d:1e:74:1e:02:
c2:6b:22:f9:ab:f0:43:1a:91:62:c5:db:3d:5d:94:
5c:b4:ef:c7:b0:06:38:52:c5:8e:4a:82:21:5f:8e:
c8:32:81:39:4a:ba:b6:20:c0:2f:ff:4c:af:c8:6d:
e7:53:7f:41:4d:3a:35:2e:15:b8:42:5b:b4:58:32:
83:c3:44:d7:d2:aa:67:c5:19:f5:6c:0f:9f:ab:a5:
f1:46:c6:aa:5e:38:e3:5b:30:1a:ab:c8:60:11:e1:
c1:94:c5:98:08:d2:ce:fa:49:b1:55:e1:22:b2:fd:
7d:75:21:33:a3:0b:2a:44:65:72:69:61:80:52:cc:
1f:0e:43:40:91:e5:41:ff:21:8c:ea:e6:d4:81:96:
fd:33:a8:a9:fb:37:fb:ba:df:7b:14:eb:98:9e:fe:
6c:8f:7f:78:6c:5a:69:1d:1f:2f:91:9e:de:d7:98:
91:ac:e3:ac:df:fa:3d:cd:28:3a:30:b0:98:bc:aa:
03:8d:a0:4c:26:6e:18:45:d4:4c:25:54:70:cd:24:
1c:30:d9:a5:17:7b:7e:a9:34:cf:4b:6d:89:16:00:
cc:30:f6:36:93:aa:39:10:8b:d5:56:72:11:0f:62:
9c:7f:99:00:44:71:19:68:13:23:aa:49:76:62:ec:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:A9:92:54:B6:D9:3C:60:36:1E:F0:28:5A:2C:05:27:24:96:5B
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/k82pklS22TxgNh7wKFosBScklls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.255.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cc:61:13:8c:46:ce:b0:6a:f5:f6:02:6f:27:23:d4:83:9b:
00:0e:0d:bf:52:41:05:be:77:01:05:56:09:4a:5c:f1:3f:57:
8e:c6:4e:7a:3a:2d:e9:d4:30:dd:0c:f0:6b:ef:11:79:58:c9:
86:2d:b4:35:2a:86:3b:f3:7b:fb:6a:0a:51:6b:d8:da:37:9f:
f6:87:65:d2:1a:cb:33:de:ca:75:04:8e:98:30:4e:43:ed:88:
4d:7b:9a:89:94:d1:2c:89:5e:f7:f1:c9:18:76:00:2f:8f:d0:
5e:19:af:0e:03:51:d9:66:48:7b:1e:c1:cb:e8:15:6e:30:ec:
9f:c5:a9:bd:82:bf:50:2d:21:4b:d0:3a:e1:b1:d5:3c:0d:8e:
2d:96:77:d0:d0:42:17:d9:15:e7:c1:22:b9:19:45:f1:53:09:
4e:6e:84:06:cd:42:4a:e1:43:ea:82:14:29:99:07:98:86:8e:
9b:8e:b5:fa:74:db:06:73:02:1f:99:94:d1:3d:08:62:d8:e9:
bb:9a:ae:9a:ad:d0:ae:b5:84:ed:ff:00:b0:94:1d:c0:8d:f2:
d3:0c:ea:a2:6f:d6:ed:87:2e:d1:1b:da:83:bd:8f:fc:3b:8f:
8e:e8:04:c1:ba:8a:2b:a8:28:f9:25:d2:98:4b:8e:a5:69:6a:
d4:49:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org