Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/6pIFjcwR9tVq229TMfzy3oyvaHA.roa
File: 6pIFjcwR9tVq229TMfzy3oyvaHA.roa (raw, json)
Hash identifier: RgcDxaOLg73FQA29edja0QhszAO8qDl+2OK0aryfWWU=
Subject key identifier: EA:92:05:8D:CC:11:F6:D5:6A:DB:6F:53:31:FC:F2:DE:8C:AF:68:70
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 018CEC78FAB974C958DDBF5C82A9F9F0E986
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/6pIFjcwR9tVq229TMfzy3oyvaHA.roa
Signing time: Tue 09 Jan 2024 04:26:40 +0000
ROA not before: Tue 09 Jan 2024 04:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56373
IP address blocks: 62.122.120.0/21 maxlen: 32
62.122.126.0/24 maxlen: 24
185.53.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:78:fa:b9:74:c9:58:dd:bf:5c:82:a9:f9:f0:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Jan 9 04:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea92058dcc11f6d56adb6f5331fcf2de8caf6870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:41:07:4f:06:06:d9:95:c7:ec:54:cb:13:
91:17:a7:4c:ee:c1:08:a0:eb:a5:de:fa:cd:4f:c8:
cf:b9:13:89:35:3d:20:18:e5:01:ed:3b:5f:6b:01:
78:7d:34:ea:82:57:3c:04:92:c4:f9:33:2f:a1:ac:
7e:69:af:62:d6:82:56:73:ee:9e:b8:b7:43:70:36:
b2:e0:13:d0:c7:58:06:cc:c7:6f:41:ba:cc:5a:6c:
9b:32:b5:09:f6:c6:4a:26:dc:b1:07:2c:05:bb:cf:
cf:a7:25:b4:23:63:32:af:51:6f:c0:43:9a:f7:60:
20:7e:0e:2a:14:f7:a7:5f:be:7d:ca:db:e2:ca:45:
48:ae:9c:74:04:c4:ab:40:c3:17:d7:77:d4:de:6e:
9f:3a:78:27:56:6c:50:63:22:50:8d:30:e6:11:7d:
33:5a:c6:a9:02:c7:e1:e9:d2:04:8a:8b:e5:64:b4:
f2:ad:7e:ca:20:92:31:a8:28:1a:bf:e2:2b:ce:5d:
42:28:26:ff:b2:82:dc:71:d7:59:28:df:1c:57:26:
b4:97:f3:f1:45:e7:c4:42:8d:47:1b:5b:95:bd:84:
85:3d:d7:05:94:9f:9b:44:a5:7e:95:66:1b:f9:17:
1b:59:c8:d4:b0:1d:52:37:10:39:aa:ac:49:1a:ae:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:92:05:8D:CC:11:F6:D5:6A:DB:6F:53:31:FC:F2:DE:8C:AF:68:70
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/6pIFjcwR9tVq229TMfzy3oyvaHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.120.0/21
185.53.144.0/24
Signature Algorithm: sha256WithRSAEncryption
27:22:54:c6:94:56:2c:d2:6c:40:31:b6:ad:7f:9c:6c:2c:2d:
48:b8:87:5f:cb:6a:30:2e:80:7e:26:e5:b0:0f:bc:55:f1:a8:
66:f6:7c:d5:e2:18:aa:e5:c3:1f:17:e4:19:a6:14:28:d1:78:
6d:7a:75:c0:b8:c2:3a:6e:6c:6a:58:0a:46:34:de:9b:67:e9:
43:79:93:70:ac:7a:4c:50:5f:22:f8:87:f9:a0:c0:36:9e:7f:
ab:cd:7b:a8:ae:b9:dc:b6:d9:9a:45:92:90:96:34:b2:e5:29:
74:8b:e7:f8:e2:e9:74:9a:b8:d1:5b:34:7d:11:ab:27:de:ec:
3a:57:37:64:aa:18:b0:c3:e7:b4:dd:41:1c:ba:19:e5:05:76:
f9:49:ce:da:3d:8b:ec:ce:2e:86:b0:98:8d:da:be:7e:a6:bb:
80:11:1b:60:b7:b8:a1:41:1e:a0:62:24:2d:9e:1c:a5:41:0d:
c7:5b:6f:f3:4a:a3:fc:b2:44:dd:38:09:cc:bc:1f:ef:bd:dc:
a2:0a:65:7c:12:0e:71:85:7d:0c:2e:34:70:e0:61:d0:50:64:
50:f7:dd:ba:a3:1e:d4:89:24:d0:8f:87:6c:9e:bc:e5:20:54:
58:7f:ca:eb:a9:8f:10:3f:b2:48:79:47:02:76:7a:65:0a:53:
a8:7e:c8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:26 2024 by rpki-client on console-fra.rpki-client.org