Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/6U9VrLaetP7IO8jGubdB7bFz95E.roa
File: 6U9VrLaetP7IO8jGubdB7bFz95E.roa (raw, json)
Hash identifier: DeAHjOjUyRitSxLpGKVKndhavp3qhRSdEthAl5G/DsM=
Subject key identifier: E9:4F:55:AC:B6:9E:B4:FE:C8:3B:C8:C6:B9:B7:41:ED:B1:73:F7:91
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 018CC8DE40EA98FCEB6E6EF3B05890E4F79D
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/6U9VrLaetP7IO8jGubdB7bFz95E.roa
Signing time: Tue 02 Jan 2024 06:30:57 +0000
ROA not before: Tue 02 Jan 2024 06:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210611
IP address blocks: 46.31.183.0/24 maxlen: 24
185.91.140.0/24 maxlen: 24
2a00:df80:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 08:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:40:ea:98:fc:eb:6e:6e:f3:b0:58:90:e4:f7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 2 06:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94f55acb69eb4fec83bc8c6b9b741edb173f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:6f:08:89:b7:1c:8f:b4:7d:56:14:86:3b:
ac:81:ed:9c:ae:d4:e3:6e:a3:80:2b:2a:dc:7d:b0:
e3:77:3c:27:a8:51:2b:85:9d:86:fc:86:21:bb:d2:
58:49:b3:6b:53:29:95:de:fb:8c:17:49:de:0d:9b:
7d:54:b6:57:70:fd:53:0d:3d:86:21:af:99:e8:01:
79:70:aa:f9:08:dd:64:98:a2:81:d1:97:8f:47:18:
9e:d0:e5:07:7d:98:98:10:3b:7e:8b:9b:3f:82:16:
1c:89:43:55:87:50:ac:53:55:25:fe:19:66:9e:de:
35:9f:d4:39:b5:c9:24:db:d6:35:9b:47:53:61:2e:
85:57:9f:3a:74:32:71:d8:fc:80:d1:92:42:88:6d:
e9:15:75:e4:78:22:45:5b:59:24:26:f3:50:91:88:
b4:61:7e:db:ec:0d:81:36:0d:ec:87:3d:c2:49:48:
d3:7c:16:58:9a:24:cd:71:41:f7:78:dc:0b:df:70:
c1:3b:8f:05:1e:0b:17:9a:43:a2:e2:e3:c1:10:0c:
c7:c5:93:6e:b6:3f:e9:89:a8:5a:ed:a5:fa:4a:89:
03:53:14:9a:c8:17:2a:6f:88:4e:e9:01:fe:3e:42:
af:12:12:0f:fb:f1:97:0c:c7:50:7c:94:0d:4d:57:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:55:AC:B6:9E:B4:FE:C8:3B:C8:C6:B9:B7:41:ED:B1:73:F7:91
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/6U9VrLaetP7IO8jGubdB7bFz95E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.183.0/24
185.91.140.0/24
IPv6:
2a00:df80:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
2a:25:be:b9:38:0f:3c:f0:16:22:e3:0f:b0:a7:86:cb:83:7d:
04:08:4f:9e:a4:34:e5:7f:a0:22:f8:a7:97:4e:5c:d3:18:5f:
0b:89:5e:75:d2:bc:c9:d4:6e:8a:71:47:7b:f7:fa:fa:ce:48:
8d:eb:0c:54:71:ec:08:72:e6:1c:3d:56:93:72:16:63:50:14:
57:16:ba:e6:30:fe:f0:68:c8:62:c3:48:1d:71:a5:d1:bb:b0:
81:5a:53:27:c4:4d:89:aa:5b:19:bf:46:ab:71:55:03:16:b5:
28:88:a2:ad:60:52:9c:82:1f:1c:7a:62:f5:41:ea:d7:4e:aa:
20:5b:19:3a:f2:46:2b:cb:37:7e:d7:1e:d1:26:49:42:e6:39:
73:02:b3:20:9b:4e:8f:cd:e2:23:5b:b5:40:41:83:38:ee:84:
34:41:c9:c8:71:b8:cb:79:27:d9:e4:f3:1c:81:70:3c:a0:3b:
79:20:bd:db:cf:00:55:c8:3f:cb:bb:07:38:21:e0:d8:fc:fe:
c3:34:fe:d7:2f:a5:93:59:e8:95:25:78:47:0b:15:7a:70:77:
50:da:79:ab:60:56:c7:43:d0:72:a4:a1:15:01:a4:4b:65:99:
15:29:e3:ac:2d:8e:dc:54:20:86:c8:83:03:63:35:5d:fc:8d:
4c:f7:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 14:32:26 2024 by rpki-client on console.sobornost.net