Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6ejqXPDK-HUEbNPCEwOQtoFN9io.roa
File: 6ejqXPDK-HUEbNPCEwOQtoFN9io.roa (raw, json)
Hash identifier: GCXYuGFcgo38O+qS1CIYj7PxsjficInA3phtCIqKles=
Subject key identifier: E9:E8:EA:5C:F0:CA:F8:75:04:6C:D3:C2:13:03:90:B6:81:4D:F6:2A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C321E7C4560B5525FC9A67824571C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6ejqXPDK-HUEbNPCEwOQtoFN9io.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203749
IP address blocks: 194.53.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:32:1e:7c:45:60:b5:52:5f:c9:a6:78:24:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e8ea5cf0caf875046cd3c2130390b6814df62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:e8:f7:26:7f:e2:44:f1:cd:1e:bf:bc:59:
a7:7a:78:9e:fe:e4:70:cc:85:98:29:cd:7e:e6:b8:
37:ed:c9:92:df:88:ff:76:35:d7:8a:a2:81:37:0b:
8a:d8:43:f2:cc:1f:f4:bb:3c:eb:b1:72:57:a6:6c:
38:71:e6:f1:a7:3f:a3:9c:bb:59:d1:ce:f7:91:10:
04:6e:54:74:e2:f7:f4:2d:81:7b:b3:a4:91:85:4c:
56:a3:e7:29:ac:05:5a:48:53:35:49:af:6b:a1:25:
0b:9a:f3:ae:70:86:8d:da:2a:3f:99:40:fd:ef:ac:
14:e6:4d:b1:67:8a:9a:4a:fb:73:cc:d2:d6:5d:ee:
f7:97:0a:34:86:2b:94:94:6e:42:03:89:69:b1:25:
b6:59:6e:3f:02:cf:6d:14:61:fc:3d:04:3a:df:fd:
ad:73:ac:b1:58:07:1e:2c:c7:29:8c:9f:6f:f0:f0:
de:46:52:eb:b6:4d:ea:4c:d4:50:cc:e5:ee:ca:53:
df:dc:8e:4d:03:ce:5c:e4:3d:db:40:1d:23:8c:dd:
24:8e:18:3b:ba:0a:fa:11:b0:d7:b1:2c:d2:b8:c8:
c5:1f:aa:ac:08:a4:90:de:af:c6:43:b1:ad:19:cf:
5b:ce:22:f4:6b:63:06:d5:d3:36:bc:75:75:f9:43:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E8:EA:5C:F0:CA:F8:75:04:6C:D3:C2:13:03:90:B6:81:4D:F6:2A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6ejqXPDK-HUEbNPCEwOQtoFN9io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
44:86:8f:8c:fc:b8:c9:be:35:e7:93:46:e9:81:87:ca:52:3c:
91:c3:ae:91:64:1e:99:e3:ee:84:d6:bb:cb:41:92:07:7e:2a:
09:dd:cc:f1:10:29:b4:b7:29:fe:42:c8:57:61:79:24:3b:fc:
32:b8:17:3e:aa:4f:93:df:e0:b4:15:f8:00:55:b8:8b:e3:0d:
9b:1b:78:e6:43:63:e9:dd:5b:1d:e6:f4:d9:05:30:56:35:14:
36:f8:9b:fd:5f:e9:b5:98:3f:0d:a7:0a:d1:25:82:29:e2:ef:
da:ad:46:fb:fa:57:bb:15:31:6c:61:53:1b:80:24:b3:b4:34:
a0:e6:c9:c1:5d:f5:56:3b:58:8b:66:65:45:a8:f6:1e:af:c2:
79:f6:86:63:b5:d7:53:73:31:54:3d:5f:85:cb:03:63:83:e4:
9d:5a:7a:ab:07:2a:a0:23:59:3f:0e:8b:ad:6f:4a:25:f1:2c:
e9:80:15:b9:bf:4a:e6:9a:51:d0:03:9c:0d:07:b7:38:d2:e3:
87:71:c7:c8:1e:74:1b:0e:72:52:43:20:f6:37:64:80:c9:53:
cc:30:59:17:98:8a:79:de:ed:3b:3b:aa:51:9c:6c:27:84:d0:
ae:b1:ed:49:93:24:3c:61:a0:67:14:1b:db:b2:14:6f:5f:6e:
87:f3:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org