Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/6zq0zLrOlpGP8iOGaBjpTAPFxXE.roa
File: 6zq0zLrOlpGP8iOGaBjpTAPFxXE.roa (raw, json)
Hash identifier: JkkL8upctlcOuzxqpYJKDZlLsF3bgvEMhGf5jjNG/So=
Subject key identifier: EB:3A:B4:CC:BA:CE:96:91:8F:F2:23:86:68:18:E9:4C:03:C5:C5:71
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019151CCC35383F316A29B2821E4C5C4601C
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/6zq0zLrOlpGP8iOGaBjpTAPFxXE.roa
Signing time: Wed 14 Aug 2024 16:50:59 +0000
ROA not before: Wed 14 Aug 2024 16:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 176.67.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 14 Aug 2024 17:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:cc:c3:53:83:f3:16:a2:9b:28:21:e4:c5:c4:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Aug 14 16:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3ab4ccbace96918ff223866818e94c03c5c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:ce:2b:e3:2c:12:c7:71:95:33:e3:be:0d:
78:3b:0e:96:95:3a:35:cc:97:5b:65:e5:1b:37:65:
db:e3:25:a6:5f:59:4d:4b:45:71:6f:6d:d8:ee:e7:
72:8b:54:42:23:f7:03:d2:f0:a4:1b:ef:43:56:2a:
6b:b8:41:e4:ef:ca:07:5d:d5:42:d4:31:1b:b0:bc:
11:5c:ab:1e:1e:42:a9:b1:94:04:f8:4d:6c:b7:73:
f2:f7:77:aa:73:ee:99:e5:2a:5f:6c:fc:21:d0:63:
c7:96:8c:2f:51:eb:7a:e4:08:e1:8d:84:df:93:e1:
30:f6:93:7b:41:ee:df:cc:aa:48:91:b1:09:7f:81:
a1:72:d3:21:7b:87:28:4a:89:b5:39:a1:1a:4f:5a:
dd:dd:53:53:9b:88:fc:ef:de:63:2a:ae:2e:28:57:
99:31:b9:29:cd:88:fe:57:c8:9b:a6:91:df:98:ea:
c2:6a:4a:a8:76:8e:64:68:46:7e:4b:a3:ec:8d:9b:
ee:fb:a8:a4:92:7d:c1:2e:c6:a7:d2:d4:4c:e9:0c:
4f:0f:2b:ae:a3:d9:de:e0:f1:01:e7:12:63:97:4f:
33:5a:02:35:4a:ae:2c:b2:99:a2:ef:dd:04:21:60:
16:57:d0:79:51:45:35:52:c2:fc:da:7a:70:e9:a0:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:B4:CC:BA:CE:96:91:8F:F2:23:86:68:18:E9:4C:03:C5:C5:71
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/6zq0zLrOlpGP8iOGaBjpTAPFxXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.80.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:64:d4:98:2d:4d:58:fe:a9:3b:31:99:04:ca:c3:64:9b:c8:
39:75:99:5a:63:56:05:92:16:13:41:08:34:ed:2e:13:7a:a0:
7c:e6:f1:a8:e8:e4:56:b5:fe:a9:9d:77:fb:9f:75:66:55:da:
76:06:1d:4a:ff:cc:90:e6:99:e5:57:59:b8:01:79:3e:e2:ef:
d5:8a:ba:ca:f0:0a:0d:25:b0:51:38:9d:18:f6:b9:51:0a:77:
a9:e6:ed:0e:70:07:86:b9:02:f2:fc:b0:8d:0f:65:af:2b:8a:
9d:4d:f0:27:58:07:64:5a:8b:23:41:e7:bc:05:e2:07:8f:5a:
cf:56:13:c7:01:4e:55:a4:24:ab:3b:50:1a:4a:4d:d4:b8:42:
06:77:3b:8c:15:a7:20:de:e1:44:18:0a:93:98:27:8b:c5:a5:
dc:b6:4b:12:c4:f7:70:f6:e1:14:f0:74:d9:89:8d:8a:c9:8c:
b7:19:5c:b3:81:e3:9f:7d:34:ed:c3:92:ce:43:6c:08:df:fd:
d9:8e:61:59:d9:1b:22:f7:c2:4b:5a:00:8e:8c:97:8e:46:bd:
f1:67:6d:67:2b:9c:43:cf:c6:0b:58:0c:80:6c:db:07:24:38:
6c:64:5a:c4:44:62:99:ae:1e:8b:84:d1:19:ff:6b:0b:cc:fe:
fa:58:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:52:39 2025 by rpki-client