Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/6zDkIYin6hjNU93HYidbnnmjxAA.roa
File: 6zDkIYin6hjNU93HYidbnnmjxAA.roa (raw, json)
Hash identifier: B87pCBhSwO+AAWSCGxZWpM6NZCv5K0VELB5p5h+UiLY=
Subject key identifier: EB:30:E4:21:88:A7:EA:18:CD:53:DD:C7:62:27:5B:9E:79:A3:C4:00
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 018CC348FABA4C1041D3C78383E9156E8CAE
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/6zDkIYin6hjNU93HYidbnnmjxAA.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47331
IP address blocks: 178.217.236.0/22 maxlen: 24
93.155.0.0/17 maxlen: 24
2a00:1d30::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fa:ba:4c:10:41:d3:c7:83:83:e9:15:6e:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb30e42188a7ea18cd53ddc762275b9e79a3c400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:f6:3e:54:62:39:44:ac:21:0a:0f:d0:e4:
91:10:d1:a8:08:89:03:c7:f7:e7:b8:af:ec:a4:ee:
e8:83:26:39:da:79:c3:61:a7:b9:9d:35:4e:6d:3e:
81:6a:c5:b7:a1:63:52:6b:5f:f5:6e:dd:5d:83:09:
3f:61:32:30:a4:c0:5b:a4:82:56:14:1e:b2:fc:2a:
0e:f6:a9:91:97:f3:b6:38:04:cf:5b:e9:64:84:53:
9c:94:6b:6b:27:be:53:d1:1d:f1:46:31:eb:4c:1d:
04:9e:7e:88:54:4d:21:de:63:1c:f5:3f:90:6d:dc:
9c:a6:ee:57:6b:cc:7c:32:8c:50:c9:ba:8c:b9:1b:
10:56:1d:d4:52:5b:04:ac:a4:65:87:01:80:95:af:
f9:2a:f8:75:86:6e:7a:ca:d0:19:47:ff:37:87:4f:
88:ba:5f:8b:c8:21:27:14:d6:9e:02:7c:25:91:0b:
1e:63:ae:82:1a:e2:04:a1:f3:07:17:49:0e:4b:a6:
d6:1b:7a:e2:22:0b:2c:4b:03:67:1e:d4:2c:46:a1:
af:71:5b:da:8e:fe:6b:75:f2:70:99:58:50:01:b3:
9a:c9:3d:8a:02:58:5a:e9:20:23:e4:9a:e3:f5:bd:
4d:0d:be:46:2f:76:47:ba:32:05:74:cd:26:11:57:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:E4:21:88:A7:EA:18:CD:53:DD:C7:62:27:5B:9E:79:A3:C4:00
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/6zDkIYin6hjNU93HYidbnnmjxAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.155.0.0/17
178.217.236.0/22
IPv6:
2a00:1d30::/29
Signature Algorithm: sha256WithRSAEncryption
0b:56:db:fd:a4:21:61:16:5d:78:0c:7c:a1:f6:47:04:fd:67:
c9:55:43:9f:f4:12:c9:5f:83:81:d4:a0:1e:d8:c2:53:f0:8b:
2c:44:d1:56:73:a4:4b:27:1b:7b:c2:85:f4:78:f0:26:1d:ff:
b8:27:97:89:d3:78:69:e1:ad:08:af:69:a7:e8:42:eb:ae:cf:
3e:d2:da:f5:fb:1b:5f:b7:38:c0:66:c2:f2:ab:e6:56:8d:b2:
f5:d3:61:92:b1:12:8b:09:1f:d4:86:9b:7c:5a:ac:1d:91:17:
e1:ec:ab:32:74:fe:18:58:61:99:6e:da:7c:ad:72:bc:c1:78:
54:38:0a:4a:eb:7c:d8:25:5f:96:97:e9:0b:f2:76:c6:96:cc:
f2:39:11:3c:d8:ac:bd:04:14:11:77:ba:67:6a:f5:66:ef:3d:
92:eb:de:9f:20:b0:2d:01:c7:94:c4:e8:37:00:fa:83:97:84:
ee:f9:51:1e:f2:d6:70:7b:fc:41:27:df:3c:aa:c8:70:fe:91:
8c:5f:14:1f:b1:e8:03:78:78:cb:96:a7:4e:7f:0a:5d:a6:20:
3f:7e:71:23:b5:f4:2f:5d:8d:15:a1:ed:37:ed:c2:f7:d5:f1:
2f:49:32:9a:8a:4c:d6:12:ba:01:dd:0d:e6:69:b4:d8:20:43:
32:c5:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:34 2025 by rpki-client