Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/56QAW0mWL6Lj53ThVV3Jx3AEs44.roa
File: 56QAW0mWL6Lj53ThVV3Jx3AEs44.roa (raw, json)
Hash identifier: 3GciiC1esodu17KblA2/MyGW4yNYemb1gZO1bSbhz9M=
Subject key identifier: E7:A4:00:5B:49:96:2F:A2:E3:E7:74:E1:55:5D:C9:C7:70:04:B3:8E
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0185E45B19721C0FAE301B4C68DF99531691
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/56QAW0mWL6Lj53ThVV3Jx3AEs44.roa
Signing time: Tue 24 Jan 2023 15:17:33 +0000
ROA not before: Tue 24 Jan 2023 15:17:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50593
IP address blocks: 178.172.214.0/24 maxlen: 24
178.172.228.0/24 maxlen: 24
178.172.234.0/24 maxlen: 24
213.184.234.0/24 maxlen: 24
93.125.50.0/24 maxlen: 24
178.172.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:5b:19:72:1c:0f:ae:30:1b:4c:68:df:99:53:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 24 15:17:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a4005b49962fa2e3e774e1555dc9c77004b38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:c7:f2:db:ce:fc:bb:fd:cc:4b:59:99:ef:
87:f5:95:d9:e3:dd:d5:fa:34:df:85:15:06:5c:6f:
df:69:f2:0e:fd:44:af:3a:36:f4:62:eb:97:11:03:
ff:54:44:eb:87:43:c9:82:6f:37:25:ed:1c:c7:d6:
09:67:94:85:21:1a:fd:d7:ad:17:69:8d:3d:72:ff:
d5:3d:50:bf:36:d8:7c:c2:80:54:ff:ad:db:cd:ca:
d7:7f:e8:13:7f:20:d3:00:2f:ca:c5:4a:29:79:12:
02:e1:15:8c:12:53:87:0c:e2:9a:a6:07:0d:a8:ea:
39:95:68:70:db:cb:73:8d:bf:96:5c:ab:01:99:cb:
21:48:f5:b6:5c:f1:f7:15:e8:c4:92:27:65:2e:6e:
9e:9f:ea:c5:3f:7d:cb:a9:2d:66:b3:53:65:9e:ee:
14:40:74:2c:4a:34:a5:ef:a8:a4:e8:e7:8f:6d:5f:
b0:c4:e4:e9:3a:56:7f:12:b6:ab:1a:b7:b8:ba:24:
ff:9b:57:4e:06:31:d1:b0:39:90:ec:b4:92:15:af:
f6:45:50:35:41:46:a0:3c:7a:ee:02:97:5d:34:80:
c6:b1:88:34:59:ee:25:fd:77:b2:da:66:10:af:76:
31:4d:f1:5e:ed:59:94:9d:6f:37:61:86:94:f3:0f:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:00:5B:49:96:2F:A2:E3:E7:74:E1:55:5D:C9:C7:70:04:B3:8E
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/56QAW0mWL6Lj53ThVV3Jx3AEs44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.50.0/24
178.172.204.0/24
178.172.214.0/24
178.172.228.0/24
178.172.234.0/24
213.184.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:df:ff:57:2d:d7:84:a6:fd:4a:88:20:ba:b4:d8:4a:db:18:
a4:a3:11:b2:42:bc:37:b5:4a:2e:ec:ae:a4:4f:a9:e1:09:76:
99:c0:3e:a4:3c:25:33:d4:78:91:91:17:d4:73:fe:54:83:35:
21:33:d6:9f:7d:8e:19:1b:e2:2d:f3:8e:64:f3:74:37:31:d1:
28:8f:9f:ee:83:1b:2a:0a:8d:14:32:37:f4:dc:95:2a:b7:08:
28:34:16:5d:1c:c0:74:a9:e0:8e:90:96:e4:0f:d3:67:5c:80:
fc:2e:d0:9b:e3:31:32:22:9f:81:17:c2:42:4d:0b:c6:bb:49:
b8:1d:22:47:88:84:c0:92:b9:34:23:6c:cf:3f:95:2e:a1:69:
f9:a6:af:74:c5:21:08:e0:17:f1:79:58:29:03:9c:6d:e8:af:
ff:79:83:e1:48:7c:0f:9f:a6:d8:d3:9d:ef:65:4b:2a:f3:50:
58:18:94:c5:67:81:90:2a:32:1c:a1:33:47:96:5c:30:18:1b:
df:83:b4:65:18:66:07:00:1d:1c:5e:bb:ce:b9:16:45:14:a8:
0b:e2:09:22:46:ff:14:a1:b1:a5:b1:27:ed:54:8e:c0:4d:dc:
57:6c:05:ea:1a:44:b8:ab:50:1f:19:60:1a:a0:10:6b:02:0d:
d8:34:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:50 2024 by rpki-client on console-ams.rpki-client.org