Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/E6HGBZkZwhC2iDG5YnuEnurWNq4.roa
File: E6HGBZkZwhC2iDG5YnuEnurWNq4.roa (raw, json)
Hash identifier: M6XQjqA1SANFtFkZehA9awms45PmDApQoLZKApUM3Bw=
Subject key identifier: 13:A1:C6:05:99:19:C2:10:B6:88:31:B9:62:7B:84:9E:EA:D6:36:AE
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 01856CF86D62B3C88FA059F525ABC2BD7C4A
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/E6HGBZkZwhC2iDG5YnuEnurWNq4.roa
Signing time: Sun 01 Jan 2023 10:54:58 +0000
ROA not before: Sun 01 Jan 2023 10:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 176.52.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:6d:62:b3:c8:8f:a0:59:f5:25:ab:c2:bd:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 10:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13a1c6059919c210b68831b9627b849eead636ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:fa:f3:86:c1:ba:e7:ad:76:13:04:b4:64:
29:75:d7:15:c4:ac:31:32:11:d2:ee:ac:c7:7f:64:
fa:88:20:af:1c:2b:e7:25:92:ae:5c:64:4f:0d:72:
4f:e1:04:17:19:91:a8:e1:7d:f8:40:16:0e:25:2d:
87:8a:96:35:f5:04:7f:2f:9b:06:91:34:1a:f2:2b:
87:67:5e:79:1f:63:6a:2b:c1:f7:ca:cf:b8:1f:e7:
0a:74:a6:26:fb:be:e0:a5:e0:4e:33:34:a2:e4:46:
ac:41:2f:d5:68:72:53:a2:a3:5c:85:7f:f5:d1:57:
b4:3f:38:1a:eb:38:2f:ee:c0:ca:6a:96:b0:d8:4f:
27:7c:aa:24:e1:15:b0:67:26:b0:b7:18:6c:6c:e7:
fd:de:8c:f1:9c:c2:5d:4c:8d:56:74:85:03:ea:ee:
f1:29:c1:1e:a6:b7:a7:2f:7e:30:b5:d9:ab:9a:3e:
82:88:d8:48:49:35:0a:60:06:2a:8b:d0:ec:89:6d:
e9:cc:64:27:15:dc:16:00:2f:aa:46:36:57:db:21:
77:10:68:b1:0d:a7:2f:c0:9f:3d:d1:ef:0d:ce:5c:
23:dd:73:dc:d8:18:51:a7:b0:51:9c:d5:d5:5b:e6:
5c:c2:55:e0:5a:03:56:b4:5a:49:b6:05:9d:f3:de:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:C6:05:99:19:C2:10:B6:88:31:B9:62:7B:84:9E:EA:D6:36:AE
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/E6HGBZkZwhC2iDG5YnuEnurWNq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4f:82:2d:db:24:8e:19:d5:09:d5:64:e7:d5:e2:0a:be:86:
f8:a4:0f:5a:35:d5:21:e7:69:13:2c:1e:6b:5e:99:f9:d6:29:
6b:64:29:3a:e4:b5:d5:11:90:62:41:bf:52:9d:95:87:66:29:
f5:c6:ea:9b:fd:06:d2:de:09:e9:c1:a9:18:d5:f9:9b:fb:29:
ba:d2:91:f5:3d:08:b5:92:09:19:c1:e3:9e:58:af:42:05:03:
86:72:3d:7e:2a:73:fd:50:d0:c7:62:fa:9c:1e:1e:57:5a:f6:
96:72:cb:1d:5d:15:4f:3f:31:68:70:70:22:24:43:dd:47:2e:
2e:24:7c:05:c6:1c:77:10:0d:6a:df:a9:14:c4:40:15:fe:65:
c6:9c:42:bb:f5:88:c5:a1:eb:af:c0:c4:9a:78:1d:6b:bc:84:
c8:ec:cc:16:21:2f:b6:20:ba:9f:2e:1e:58:97:e8:ff:78:e2:
5f:1c:47:3a:fb:10:c5:94:6e:ce:b1:f4:74:d4:46:ab:95:fc:
b0:25:0e:c4:2a:5b:9a:bb:06:ed:6a:ea:ec:7a:66:4a:03:d6:
6b:0f:fc:cd:48:af:4f:1a:2c:71:16:a3:e6:3b:6c:67:3d:e2:
39:09:25:2a:3c:c7:89:85:21:7e:bc:d1:03:42:4a:a0:64:76:
ce:88:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:14 2024 by rpki-client on console-ams.rpki-client.org