Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/5SEY-GXncAhUw2bbMGXYnfP_7m0.roa
File: 5SEY-GXncAhUw2bbMGXYnfP_7m0.roa (raw, json)
Hash identifier: B+wCkIcAmYDyE4jYaWh3mlxrUpG/k0CvTvTCY/hf4jo=
Subject key identifier: E5:21:18:F8:65:E7:70:08:54:C3:66:DB:30:65:D8:9D:F3:FF:EE:6D
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 01856D93EF8833414F3DFB6BF6EAFB6CA9E9
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/5SEY-GXncAhUw2bbMGXYnfP_7m0.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.14.174.0/24 maxlen: 24
80.94.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 10:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ef:88:33:41:4f:3d:fb:6b:f6:ea:fb:6c:a9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e52118f865e7700854c366db3065d89df3ffee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:31:58:5a:1e:0a:27:52:61:0a:f2:49:2f:
1c:df:ad:26:33:fc:f9:a6:f1:e2:b3:79:34:3e:34:
af:7c:1a:9b:c5:9e:7e:c8:b5:32:4f:d0:95:28:ea:
b5:11:fc:c6:bd:3e:28:ae:63:c4:5f:c6:21:a1:3a:
1a:9b:79:29:03:1a:4b:8f:e7:0c:8f:33:45:31:be:
f9:9f:f8:fc:38:94:74:5f:13:08:0b:56:30:31:56:
d8:c9:ab:bc:f0:03:24:86:9b:42:a1:6f:9f:e8:b4:
3d:39:c4:90:98:61:b2:29:e8:48:5f:8b:a7:e7:26:
11:37:b9:90:f8:5f:af:5c:a5:40:a7:4a:45:44:3c:
8e:af:e7:ce:74:18:71:40:02:21:41:2e:4a:81:a7:
f6:e2:93:be:e8:d9:59:5f:41:90:6d:2c:0b:73:55:
74:d5:c9:d7:e5:e7:08:87:1d:01:de:92:65:34:e9:
90:dc:9f:c7:97:71:9b:00:c6:67:b2:b3:d7:37:6c:
c7:cc:19:fe:61:60:3d:ba:70:f4:e6:b4:10:ea:cb:
29:b1:f2:fc:58:77:5c:dd:4a:b9:06:dc:21:4b:16:
e2:10:37:d1:d0:49:06:1a:e8:81:61:5a:49:56:54:
17:5e:9c:24:ff:cf:13:00:3b:05:e5:0f:40:eb:95:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:18:F8:65:E7:70:08:54:C3:66:DB:30:65:D8:9D:F3:FF:EE:6D
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/5SEY-GXncAhUw2bbMGXYnfP_7m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.174.0/24
80.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:7e:55:7a:7f:91:13:b1:7f:ba:44:0f:33:57:57:24:8f:
37:73:57:ef:d1:74:20:9a:1c:0a:32:1a:dd:a3:e5:6f:c3:46:
be:1d:2a:54:40:51:2f:46:75:a1:5f:35:fc:a1:e6:0a:06:c6:
d7:e5:3c:69:18:eb:06:12:97:30:b2:6a:94:b8:ee:2a:aa:43:
3e:8d:e7:86:ab:df:b1:9c:b7:a7:8d:13:55:4f:38:bb:19:fe:
ad:53:c4:d9:67:d9:4b:94:d9:b2:eb:d5:92:c4:ef:df:79:d5:
42:32:df:2e:17:40:bc:b0:b7:1f:0b:10:e6:e6:36:04:bf:2c:
a7:da:02:3a:48:0f:2b:93:7e:4f:e0:df:95:c1:2b:4d:fc:ed:
e4:22:0b:aa:12:95:23:e7:71:49:e0:a3:97:22:e5:3d:3a:64:
9b:7b:6f:93:91:90:f1:9f:6f:e7:45:bf:80:1a:bc:b3:fe:cc:
9b:d8:fb:d0:62:89:51:e6:91:24:59:ab:43:de:8d:2b:9f:2b:
76:9b:79:0b:40:27:33:91:d4:2a:c2:35:ce:d1:a0:7d:7f:ce:
4c:8b:fd:41:81:c6:ee:2a:ab:70:a9:dc:1e:0f:dd:84:60:10:
6a:b6:c9:c6:b3:32:13:15:e5:fa:0a:90:23:b6:3f:c8:88:d5:
16:98:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:25 2024 by rpki-client on console-ams.rpki-client.org