Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/fh6zgVFZDpqQ-eoOfLfvmiSwKLA.roa
File: fh6zgVFZDpqQ-eoOfLfvmiSwKLA.roa (raw, json)
Hash identifier: Ww5qd6c+EibWfqV/9guCQev/zN3C9vo58e6I4IQYzUY=
Subject key identifier: 7E:1E:B3:81:51:59:0E:9A:90:F9:EA:0E:7C:B7:EF:9A:24:B0:28:B0
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018CC8DEED280F2606170BA961DEE0F7C565
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/fh6zgVFZDpqQ-eoOfLfvmiSwKLA.roa
Signing time: Tue 02 Jan 2024 06:31:42 +0000
ROA not before: Tue 02 Jan 2024 06:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210669
IP address blocks: 193.107.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 22:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ed:28:0f:26:06:17:0b:a9:61:de:e0:f7:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e1eb38151590e9a90f9ea0e7cb7ef9a24b028b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:30:bd:07:71:da:a2:10:c6:7d:e1:f5:6a:
c6:6a:1e:80:19:8a:b0:b4:b4:86:32:0c:83:41:35:
b5:16:bf:67:42:cf:9f:c6:79:0f:97:71:66:ff:29:
52:3c:7b:06:c7:2e:15:73:c8:39:4e:32:e9:68:c8:
06:56:82:3a:1c:7f:2b:c5:1a:3b:2b:d2:35:31:c9:
5a:34:0d:dc:b7:2e:25:06:e1:dd:0d:41:61:52:9e:
74:35:c5:59:30:fa:6c:8e:ec:c8:43:67:d7:f1:f3:
db:21:df:d0:f2:ef:eb:7e:c4:f7:32:d0:9b:a0:a8:
40:11:30:fb:67:0c:cb:21:98:0f:bf:fb:9d:a8:4d:
57:2a:39:8a:46:b4:c2:17:38:91:6d:67:74:3c:89:
d9:0a:a9:95:8d:ad:8b:ca:67:53:65:4d:08:ac:1b:
09:09:35:f2:23:2d:b4:ec:6a:05:3c:6b:2a:17:98:
9a:bb:1f:e7:f9:57:2a:c3:5c:12:86:8f:5d:57:4e:
9b:6c:f3:bf:b7:35:ef:ee:ee:fb:46:d2:17:b0:dc:
73:c7:d7:4c:b2:ab:0b:e0:62:e3:ff:64:06:e2:81:
02:d4:9a:d6:93:9e:da:1d:2b:4e:57:36:9f:a7:c7:
52:7b:ea:4e:73:50:c8:57:a6:6a:e8:0c:5b:25:15:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:B3:81:51:59:0E:9A:90:F9:EA:0E:7C:B7:EF:9A:24:B0:28:B0
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/fh6zgVFZDpqQ-eoOfLfvmiSwKLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.81.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9c:df:2c:0d:81:67:27:49:29:e7:2c:8f:ea:30:5b:a8:df:
52:b8:20:a9:ca:a7:16:76:cd:75:bd:96:8e:2a:46:a8:18:ce:
89:bf:21:b2:1d:c6:b0:b2:ca:a4:8f:8d:29:38:13:e3:a5:98:
c8:d9:60:82:1f:bd:95:fe:61:c7:fa:08:db:d5:28:4c:4b:6e:
c3:dd:e1:3f:bf:21:b6:43:2e:c8:2c:42:50:f0:ab:74:3a:26:
2b:12:3b:b7:ef:8e:ba:e3:a7:e7:ee:cd:92:76:d1:c8:fd:b9:
fd:e1:dc:08:c5:71:a8:e3:4e:30:72:21:e3:e9:3c:53:74:c6:
12:c3:25:de:e8:76:c7:df:49:d2:41:6e:26:71:46:8e:82:3f:
41:8e:be:39:cb:ed:42:67:64:d0:b2:da:99:d1:2c:c3:c1:44:
46:11:e9:df:d9:6a:ff:1f:23:30:e2:02:43:06:02:ac:0a:51:
94:50:c9:f5:8b:c8:9b:45:3a:a1:7e:4a:06:2c:fe:9f:f3:59:
bb:b3:44:76:c3:be:3d:d3:b8:38:74:e7:76:49:db:59:a6:be:
b9:2d:74:02:6b:62:71:19:ba:f9:51:4a:e0:78:ba:35:df:5f:
50:ed:ce:a3:d7:5a:71:dd:6f:70:69:4c:76:e2:67:ca:d6:79:
6f:5b:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:56 2024 by rpki-client on console.sobornost.net