Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/X6Iu5x-g_AE1IJGK0M2QzyeMRnU.roa
File: X6Iu5x-g_AE1IJGK0M2QzyeMRnU.roa (raw, json)
Hash identifier: sbjjE9F9Lbe9teBCRXCEP9vbGsBdDF4uFjcQvbFAT/Q=
Subject key identifier: 5F:A2:2E:E7:1F:A0:FC:01:35:20:91:8A:D0:CD:90:CF:27:8C:46:75
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 018CCA99DECC65D2639FF8E8FF73E27B84F9
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/X6Iu5x-g_AE1IJGK0M2QzyeMRnU.roa
Signing time: Tue 02 Jan 2024 14:35:30 +0000
ROA not before: Tue 02 Jan 2024 14:35:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203777
IP address blocks: 194.104.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 09:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:de:cc:65:d2:63:9f:f8:e8:ff:73:e2:7b:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Jan 2 14:35:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fa22ee71fa0fc013520918ad0cd90cf278c4675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:96:8a:1a:91:cd:db:2a:4c:75:5c:d6:1f:
ad:9e:1b:67:6a:f2:69:c8:09:b8:b9:ba:5d:59:cd:
b4:74:f3:1e:7a:da:b7:e1:28:4d:4f:d1:86:56:42:
5d:2d:a3:ae:4a:87:ae:f9:4f:13:90:0e:00:fa:65:
fb:51:5b:97:8b:0e:7a:a9:a7:26:3f:3d:de:2e:6e:
48:ba:39:b2:22:ab:78:42:56:e3:2d:12:5d:20:03:
66:c3:a2:92:33:60:45:3e:96:58:1f:84:b1:55:50:
ae:bb:a4:5b:2c:22:3e:10:f0:11:eb:78:e9:1b:d1:
18:b0:64:58:01:c1:15:0a:95:ef:ff:ba:80:e5:0b:
e4:d5:ad:e0:ec:16:ca:ee:62:61:3c:cc:4b:85:e2:
82:76:98:6d:ae:c9:b6:ba:6c:27:18:8c:4e:b2:a6:
0c:b2:49:c5:04:d8:11:a5:61:72:e4:d6:a8:47:03:
0b:17:f1:57:b4:c8:4a:5d:06:cc:dd:9b:39:13:ee:
3b:cc:bb:85:ee:19:bb:f4:b5:f1:48:cd:bb:1e:a2:
b9:06:f8:6a:b0:e0:1b:cf:10:73:62:2c:27:8f:72:
06:11:ac:d8:92:47:cc:de:ae:31:b0:be:f2:6b:3a:
0c:85:d8:5e:05:fe:a9:7d:d7:14:36:fe:56:e3:7b:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:2E:E7:1F:A0:FC:01:35:20:91:8A:D0:CD:90:CF:27:8C:46:75
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/X6Iu5x-g_AE1IJGK0M2QzyeMRnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:97:5b:06:cd:a5:77:9e:ae:3f:a2:b0:bf:58:14:90:a4:c3:
9d:e7:35:b0:16:d3:92:70:61:93:07:5b:b1:1d:35:1e:30:13:
04:61:2c:74:6d:a2:9d:ee:9b:52:74:a8:e2:cd:86:9e:a6:98:
b7:ea:98:b8:be:e5:3c:44:e3:dd:08:8c:16:de:40:7d:a1:02:
17:7a:72:cd:53:80:5a:d8:47:78:d1:42:31:18:1d:f3:da:37:
4e:94:df:7e:34:03:46:65:fe:4a:da:ba:22:8d:52:17:ee:6f:
eb:ea:9f:07:47:dd:26:3c:2c:37:77:99:15:29:40:cd:c6:7e:
0e:56:74:b9:88:1a:20:73:08:3d:5e:d6:4d:d3:e8:78:dd:0e:
0f:36:e6:8e:f0:5f:53:bd:bd:63:97:87:11:4e:bf:2d:1e:fc:
a1:58:ff:1b:ac:ac:ba:38:df:9d:76:bf:2c:51:9b:bd:d8:0f:
80:a7:39:47:ae:f8:94:48:71:f6:48:28:00:a1:1a:f9:9e:10:
4f:44:86:b0:bf:98:0f:5f:a3:7b:7d:30:81:55:80:49:10:03:
3a:b8:c9:52:e4:23:d7:56:27:bf:96:b9:1d:21:cc:38:e6:70:
03:d9:f3:75:6b:8c:fa:b4:c3:b9:2e:ce:89:ea:bc:6e:63:e4:
27:94:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:10 2025 by rpki-client