Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/6s-vJvGzMOkUoE0FIK04PkoZmg4.roa
File: 6s-vJvGzMOkUoE0FIK04PkoZmg4.roa (raw, json)
Hash identifier: ZSCc64G8pp3A9AiDg2RYlrTmxR3a48fIut+MH5fr+5w=
Subject key identifier: EA:CF:AF:26:F1:B3:30:E9:14:A0:4D:05:20:AD:38:3E:4A:19:9A:0E
Certificate issuer: /CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Certificate serial: 01856E2FC70569E887CF5299DE1B3EB396A2
Authority key identifier: 2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/6s-vJvGzMOkUoE0FIK04PkoZmg4.roa
Signing time: Sun 01 Jan 2023 16:35:02 +0000
ROA not before: Sun 01 Jan 2023 16:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52052
IP address blocks: 193.37.224.0/24 maxlen: 24
193.37.229.0/24 maxlen: 24
193.37.134.0/24 maxlen: 24
193.37.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:c7:05:69:e8:87:cf:52:99:de:1b:3e:b3:96:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Validity
Not Before: Jan 1 16:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eacfaf26f1b330e914a04d0520ad383e4a199a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:4b:01:42:67:1a:cd:ed:76:62:89:a9:87:
11:45:00:08:47:5e:64:28:99:ec:7d:21:da:5e:72:
14:85:0a:45:c8:ae:8a:7f:3e:60:ed:93:bf:56:5f:
33:6e:12:b6:63:e5:32:88:33:8b:2d:86:7e:1b:f1:
6e:75:b2:27:11:91:88:48:ad:36:e0:a6:b1:ac:c6:
c9:5d:3d:b7:e9:6b:9e:5d:36:6f:9d:8a:4d:49:b7:
77:94:9d:da:51:23:f7:6e:e5:08:e1:7c:0a:4f:5f:
9e:a5:e9:2c:e7:0d:01:d0:24:ab:df:a7:14:58:a7:
01:2c:c0:96:04:1d:da:3b:86:c4:50:dc:cc:f6:38:
c9:cf:83:76:19:f6:43:07:12:2c:95:0d:1c:3e:86:
e2:0c:de:44:ef:9b:b7:02:90:7d:84:90:77:63:e8:
89:e0:f0:b3:92:ef:7e:83:b7:74:b1:40:d7:86:f8:
72:25:5d:ac:4f:5c:67:e3:5a:0b:73:14:c6:b0:94:
0e:32:d0:1d:a5:8e:e1:7a:44:bb:d7:56:81:76:e5:
c1:40:a2:fb:d8:a3:af:33:db:51:fc:b3:13:50:1e:
38:75:bc:3a:d4:a0:67:1a:df:2d:77:c6:6c:89:43:
76:7e:5d:dc:62:f8:e6:b1:78:03:ab:09:69:52:75:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:AF:26:F1:B3:30:E9:14:A0:4D:05:20:AD:38:3E:4A:19:9A:0E
X509v3 Authority Key Identifier:
keyid:2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/6s-vJvGzMOkUoE0FIK04PkoZmg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.134.0/24
193.37.155.0/24
193.37.224.0/24
193.37.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:24:d9:1a:77:86:78:f8:e2:23:b0:b8:9b:e6:e1:47:5a:b0:
19:d7:00:ae:87:14:69:0a:7e:0f:75:a1:c2:10:f8:78:31:9f:
08:53:ac:94:51:3d:36:90:19:e5:ef:b8:c3:e7:e1:b5:89:48:
0f:45:90:4a:b0:67:55:c8:22:dd:8f:fb:37:0d:10:42:1d:cf:
d6:f9:b4:03:c2:07:d7:e7:53:cf:ce:71:1a:3a:06:37:18:29:
ce:b2:c8:c5:01:f6:62:38:04:6b:fa:86:5e:50:dd:9c:e6:60:
16:f2:55:19:8d:1c:e2:2d:7e:66:9b:0f:55:10:6e:d1:b4:d1:
70:7b:41:af:85:da:da:1d:f0:86:1e:e5:e9:67:78:87:76:9f:
28:48:5c:3c:9b:6d:5f:18:ae:73:66:4f:96:36:7e:51:94:d0:
a2:d4:66:95:27:a4:b3:a2:a8:fa:f2:92:6c:b3:2e:4a:61:c8:
5b:8f:c0:f5:8f:69:60:ac:41:c8:5b:db:bc:2c:a0:07:68:d7:
a7:f7:96:e5:b2:14:33:2d:2b:43:79:45:1d:a1:d3:67:0b:6d:
d4:e7:a9:a2:87:cc:e9:70:bb:43:e0:0f:60:ee:9b:b2:ce:16:
3c:12:78:b8:bc:01:9b:72:e0:5f:39:68:a3:93:44:c9:89:e7:
93:bc:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:26 2024 by rpki-client on console-fra.rpki-client.org