Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/6-EP3wdwejAdUT19undFbjF2EEA.roa
File: 6-EP3wdwejAdUT19undFbjF2EEA.roa (raw, json)
Hash identifier: /v/AxFr9P1ym6wpThzDNcWKdcGlVGHEfef3cEW1gONA=
Subject key identifier: EB:E1:0F:DF:07:70:7A:30:1D:51:3D:7D:BA:77:45:6E:31:76:10:40
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 018D313939C5E83FEA13C65362992213C0F5
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/6-EP3wdwejAdUT19undFbjF2EEA.roa
Signing time: Mon 22 Jan 2024 12:50:50 +0000
ROA not before: Mon 22 Jan 2024 12:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55002
IP address blocks: 87.237.108.0/24 maxlen: 24
87.237.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:39:39:c5:e8:3f:ea:13:c6:53:62:99:22:13:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 22 12:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebe10fdf07707a301d513d7dba77456e31761040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:e1:40:de:b2:87:9f:8c:ea:91:61:87:99:
6e:a6:78:35:2f:82:02:32:3c:9d:72:31:17:cf:49:
ca:fd:c5:b6:0a:7b:da:0f:6f:a7:23:28:b1:19:48:
53:23:89:83:25:fc:d0:18:37:23:d7:76:28:84:fd:
0a:be:09:7c:f3:a7:6e:d4:17:a9:ed:c1:79:f7:e7:
98:c8:8b:03:1a:0c:4c:c3:1c:ee:8e:bd:b6:a1:0b:
f8:17:e9:be:a1:7c:e2:12:ae:8e:81:ab:df:6e:b7:
2f:59:b9:4a:81:e1:c6:68:02:6e:74:cb:50:96:28:
d4:c9:b5:f9:44:01:ef:aa:28:45:fa:39:5e:bb:84:
e1:40:c3:b8:cb:61:86:1f:5c:85:24:43:41:e0:50:
34:65:19:cd:ab:38:15:c6:06:fa:39:d0:15:e0:fb:
7d:c7:91:52:04:57:23:f2:1a:7e:eb:d9:eb:86:59:
50:ab:ea:56:da:38:a8:64:d7:9a:c1:24:91:a1:a6:
a2:03:70:b2:92:e1:20:df:82:9f:05:74:9a:56:86:
0f:45:0e:82:b2:8a:a7:ac:4e:8b:ac:6a:d9:86:df:
65:71:f2:c1:6c:25:34:bf:f2:ac:f0:98:2a:71:a4:
de:e7:bd:fa:7b:a3:71:17:7d:ce:59:99:da:64:e8:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:0F:DF:07:70:7A:30:1D:51:3D:7D:BA:77:45:6E:31:76:10:40
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/6-EP3wdwejAdUT19undFbjF2EEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:04:0d:94:61:e6:cc:e5:55:bf:3e:65:26:f3:b3:d5:3b:58:
19:ae:aa:a9:5b:e0:54:d1:76:15:92:e3:52:75:8d:12:8c:84:
c8:e8:36:dd:db:c4:7d:3d:47:ed:77:86:6a:59:c2:fb:6e:34:
b7:b9:43:fc:f6:d2:04:83:51:de:b7:40:78:db:62:39:cc:13:
8f:e4:f7:70:68:ff:43:d8:fc:de:b7:36:c9:05:7e:b5:62:c5:
e6:86:64:fd:8a:37:83:59:43:74:fe:65:ca:66:10:4b:6a:cd:
da:bd:1d:5b:3c:a7:63:f6:c9:05:d5:31:9d:b1:e9:e1:d3:90:
84:93:d6:8c:c3:0e:2a:3c:54:f1:83:dd:82:38:16:9d:d8:75:
4e:82:c7:e7:d6:0c:8d:a9:49:d3:aa:0d:f5:f0:2c:b8:48:a1:
7a:2f:8c:26:a2:87:d6:5f:e7:41:72:1c:c1:fe:2a:59:66:33:
f4:c4:4d:23:98:d3:ed:ef:62:b6:c5:48:cc:44:6c:0a:f8:00:
dc:bc:52:e9:ac:ac:97:bd:7b:70:7b:e1:79:8d:a2:f0:2f:ef:
05:a9:25:4e:e4:59:69:76:84:c8:7d:ea:16:9d:88:fb:00:aa:
3a:9b:b6:f7:d1:a3:74:a6:f0:80:d2:65:f4:e2:5a:c3:bc:fd:
23:fe:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:18 2025 by rpki-client