Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/6EE6YFh-4drDUPpCldH4PdNSBAw.roa
File: 6EE6YFh-4drDUPpCldH4PdNSBAw.roa (raw, json)
Hash identifier: t74AKM6idZzYG9wxWmlmiwbBKKTSPwJRln2sBqgBYS0=
Subject key identifier: E8:41:3A:60:58:7E:E1:DA:C3:50:FA:42:95:D1:F8:3D:D3:52:04:0C
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018A6FEBBA6CC77D6F291396DA0F565330CC
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/6EE6YFh-4drDUPpCldH4PdNSBAw.roa
Signing time: Thu 07 Sep 2023 13:53:54 +0000
ROA not before: Thu 07 Sep 2023 13:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28761
IP address blocks: 195.26.81.0/24 maxlen: 24
195.26.82.0/23 maxlen: 23
195.26.80.0/24 maxlen: 24
194.140.228.0/24 maxlen: 24
188.191.16.0/22 maxlen: 22
188.191.16.0/24 maxlen: 24
188.191.17.0/24 maxlen: 24
188.191.24.0/24 maxlen: 24
188.191.18.0/24 maxlen: 24
188.191.19.0/24 maxlen: 24
188.191.25.0/24 maxlen: 24
188.191.26.0/24 maxlen: 24
188.191.27.0/24 maxlen: 24
185.76.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:eb:ba:6c:c7:7d:6f:29:13:96:da:0f:56:53:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Sep 7 13:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8413a60587ee1dac350fa4295d1f83dd352040c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:46:e5:1d:11:bd:c9:e9:ad:24:9c:1e:81:
e2:d6:8a:34:70:40:c5:7a:1f:15:70:b3:91:fc:43:
c6:5e:14:9c:e2:73:c1:8f:72:1a:d4:8e:ec:4b:ac:
9d:a8:3d:1a:66:43:bd:a1:8d:6f:c6:39:e1:ee:a1:
aa:db:f4:fb:66:58:3d:69:02:9c:5f:57:de:9a:85:
9c:1d:29:11:8c:8f:12:2b:15:d6:fd:c6:c3:5f:fe:
ff:c9:26:5d:03:08:2b:02:1f:35:73:80:47:4a:88:
50:67:95:6d:a4:cb:b4:06:48:fa:3f:0a:99:ec:bd:
44:06:36:9f:25:57:3f:c1:06:a2:ca:f4:d8:33:3c:
a6:2f:59:be:ae:7e:b8:ef:d7:47:2d:92:b8:7e:84:
38:60:6d:e8:72:8e:00:6d:36:55:f5:6f:5e:b6:c3:
52:60:90:ce:03:cb:0f:1e:ca:be:a8:f0:e8:31:d3:
28:69:66:7b:78:50:3a:9c:08:13:11:8b:6f:98:ce:
f9:8c:58:97:13:f3:db:b6:80:b4:5f:8d:83:06:4e:
18:37:b0:47:ef:e2:d5:59:cb:f9:64:b5:f2:5e:76:
0b:52:5e:ec:15:9e:d6:d6:68:11:09:d4:47:5e:ec:
3d:9d:ae:b1:2a:df:57:a4:2f:4c:da:3f:ed:5c:e8:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:3A:60:58:7E:E1:DA:C3:50:FA:42:95:D1:F8:3D:D3:52:04:0C
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/6EE6YFh-4drDUPpCldH4PdNSBAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.80.0/24
188.191.16.0/22
188.191.24.0/22
194.140.228.0/24
195.26.80.0/22
Signature Algorithm: sha256WithRSAEncryption
41:41:9e:f0:41:f5:91:f1:9a:e0:1a:d8:c5:68:6a:21:f2:14:
60:cb:e9:e0:ad:2d:c0:d2:d9:36:e0:0c:59:63:20:80:d6:47:
d3:46:6b:54:87:2e:f0:25:6f:ba:4a:2b:5a:c2:25:ca:12:76:
be:a8:99:0c:a7:c3:ab:09:e2:9c:1a:b6:18:60:5c:13:86:f7:
6b:cf:4e:84:fd:fe:d9:c0:49:41:b0:24:fb:40:3d:0d:35:af:
9d:cc:59:9f:26:a0:23:2b:84:0e:57:d3:a3:38:11:2f:43:ce:
e3:33:39:f9:10:ab:ce:ad:a8:5f:43:05:64:1e:ea:49:a8:b1:
64:b6:7d:db:81:4d:fe:c6:c6:77:e8:4d:85:58:cc:45:c7:e3:
9c:7b:b6:97:98:16:e7:85:b5:21:b9:b1:37:73:e6:cb:5f:5b:
e6:4a:b0:73:b8:a2:66:bc:a6:69:0f:59:45:ff:09:0a:43:0c:
69:b7:0f:66:93:e7:ef:f0:f1:92:f0:3e:0d:57:26:cb:06:31:
48:7b:e8:ff:4e:68:ff:db:da:25:ca:fc:0a:78:86:4e:34:14:
f4:c1:ae:f3:82:f7:d2:90:73:d4:db:75:7d:10:28:86:47:5b:
85:1d:88:3c:6a:77:6d:1e:bb:42:ee:51:fb:46:c9:c4:5a:07:
97:49:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:53 2024 by rpki-client on console-ams.rpki-client.org