Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/6-GgcFakgjjw3SdmTe4rTRy4qgo.roa
File: 6-GgcFakgjjw3SdmTe4rTRy4qgo.roa (raw, json)
Hash identifier: 8hfa60es7FyWUGjJFSscTuo7LWnUk61ZZxFnav6VJVE=
Subject key identifier: EB:E1:A0:70:56:A4:82:38:F0:DD:27:66:4D:EE:2B:4D:1C:B8:AA:0A
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 01856EA69B391A7CC193173207E11F329C94
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/6-GgcFakgjjw3SdmTe4rTRy4qgo.roa
Signing time: Sun 01 Jan 2023 18:44:50 +0000
ROA not before: Sun 01 Jan 2023 18:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198580
IP address blocks: 176.53.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:9b:39:1a:7c:c1:93:17:32:07:e1:1f:32:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 18:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebe1a07056a48238f0dd27664dee2b4d1cb8aa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:2a:ff:ca:04:d7:28:4b:e8:1b:9a:c4:8c:
c0:bc:79:b3:cc:0d:d7:f8:3a:27:11:5f:d2:70:58:
a7:5e:8a:8c:6e:e6:04:c9:cc:08:4d:cf:d4:cb:12:
78:ae:c8:f0:6f:68:6d:93:6c:ca:3f:84:54:55:2c:
72:36:ef:79:45:42:08:bd:13:fc:c7:ba:48:3c:95:
61:1c:77:13:a4:de:c6:4f:86:27:3b:36:3f:03:a6:
b9:5f:aa:4a:00:1e:6b:67:26:d8:a5:bb:05:12:e6:
43:64:c7:cf:b7:65:b8:62:93:9a:6e:3a:9e:19:b3:
5f:e7:62:f7:ac:10:2f:b4:50:78:3e:5f:05:f2:bc:
36:d2:ac:3c:bf:26:6b:81:de:3a:af:07:fc:08:fb:
3c:43:10:ce:b7:93:ee:9e:bd:7e:1e:d8:29:30:11:
e7:5b:04:cf:ba:65:c4:3d:e0:09:68:ad:bf:ab:18:
0b:5a:48:db:db:74:d9:c8:84:cd:c2:67:07:8b:6a:
5c:f4:16:40:ac:b2:9a:fc:cb:eb:a1:5d:f4:39:89:
a2:35:97:f7:e1:ea:9f:09:85:e3:02:67:b0:81:38:
31:65:51:07:e9:c4:5d:7d:ad:e4:e6:bb:46:a9:8a:
da:15:8f:b6:ec:a0:18:b0:95:68:03:bf:0c:48:a6:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:A0:70:56:A4:82:38:F0:DD:27:66:4D:EE:2B:4D:1C:B8:AA:0A
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/6-GgcFakgjjw3SdmTe4rTRy4qgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e8:28:41:81:4e:5f:a2:a9:ca:2f:e2:42:1c:ea:bf:d3:11:
bf:f4:0d:a3:c1:af:4d:8e:67:0e:af:91:b3:02:8f:cd:f5:e1:
dd:24:06:70:5a:04:4c:79:f0:f5:c3:29:c5:f3:f4:d3:f2:bf:
9b:58:83:34:15:2b:6e:bf:0b:76:39:e9:43:57:3a:8b:88:54:
67:0c:4e:7a:5c:07:51:aa:4b:16:53:1f:63:59:6e:4b:35:84:
26:16:eb:4e:e4:ab:c4:86:1e:34:14:1e:99:d2:bb:ac:d2:64:
e6:ff:86:fd:af:db:ad:41:19:5a:a3:eb:81:48:ab:d6:69:1d:
88:24:11:20:a8:1c:38:c0:a3:0e:17:f6:1b:14:d8:4b:72:3c:
d7:8a:82:f8:df:60:2a:49:df:84:8a:c3:02:b7:b2:63:ce:86:
d6:d3:2c:61:c6:3c:9d:c1:0d:47:6c:3d:2f:d9:80:5b:de:ef:
35:b9:0c:61:09:a4:09:26:9d:35:c8:65:bc:4f:2a:f9:5a:ff:
81:c9:f9:f6:fc:dc:20:a3:c6:26:99:d2:fa:22:48:1c:8d:42:
00:c7:82:9f:e2:1d:61:04:75:ec:32:a8:4f:ac:f2:f4:4e:c1:
55:b6:d6:80:36:08:f4:93:d7:db:27:04:89:88:52:25:ff:c5:
f1:a7:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:55 2024 by rpki-client on console.sobornost.net