Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/pUE49ZcXGlgN7DKHLTxC9YuOmhc.roa
File: pUE49ZcXGlgN7DKHLTxC9YuOmhc.roa (raw, json)
Hash identifier: C/4XPdCQnbSgWHmQEMGv3vxgL3UqZS/UuPczyizi00s=
Subject key identifier: A5:41:38:F5:97:17:1A:58:0D:EC:32:87:2D:3C:42:F5:8B:8E:9A:17
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 01856EA69A42CDDA92C09B1863AA112FA63F
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/pUE49ZcXGlgN7DKHLTxC9YuOmhc.roa
Signing time: Sun 01 Jan 2023 18:44:50 +0000
ROA not before: Sun 01 Jan 2023 18:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34232
IP address blocks: 176.53.194.0/23 maxlen: 24
176.53.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:9a:42:cd:da:92:c0:9b:18:63:aa:11:2f:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 18:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a54138f597171a580dec32872d3c42f58b8e9a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:21:b3:55:1a:ae:fd:94:38:17:b1:d0:2d:
2a:39:e2:71:2d:d3:5b:d6:52:2d:4b:13:b0:79:b5:
0f:ef:fe:fd:44:07:aa:73:0f:07:d0:11:2c:7c:16:
d5:d9:14:d3:7b:17:5e:36:c6:d4:3e:a1:c7:e7:b3:
db:1b:fb:a6:92:61:45:d0:a5:d1:e8:d1:8a:c9:70:
21:95:1f:a0:45:68:6f:84:43:b5:40:d2:7a:e8:fc:
19:7c:0c:50:e2:d3:88:2e:de:cf:4d:73:6b:78:ed:
6b:7c:db:b8:45:85:af:45:07:a3:84:05:93:76:25:
06:e3:88:e9:f6:82:ec:37:af:a7:a8:3d:6e:56:cd:
d1:4c:6a:fc:79:e3:13:7b:af:a5:62:da:3c:57:f6:
87:d1:99:3d:46:7e:ce:04:94:20:0c:5d:75:4d:a1:
87:55:6a:93:4b:58:dd:55:6f:a7:bf:8c:bb:17:ad:
5e:e5:bc:71:1c:2a:82:53:aa:e9:c6:1a:9f:ac:8a:
63:7d:8f:27:a7:4c:c9:be:c3:6f:ef:08:5f:22:1f:
f5:17:07:6a:b0:ac:94:c2:d3:7a:42:4f:d4:e0:c7:
30:9f:2a:ce:c0:76:33:89:ce:d4:94:5e:72:42:b3:
50:33:4b:6c:50:89:57:d0:22:4c:bb:94:04:8e:38:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:38:F5:97:17:1A:58:0D:EC:32:87:2D:3C:42:F5:8B:8E:9A:17
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/pUE49ZcXGlgN7DKHLTxC9YuOmhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.194.0/23
176.53.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:dd:65:12:39:68:80:bd:47:23:29:e7:4c:39:d4:2f:d6:bc:
30:8f:6f:55:ff:7e:f9:5a:81:69:f9:93:ad:f4:13:6c:49:88:
26:ba:7f:87:de:cb:70:29:12:88:f8:42:42:7c:5e:d3:9f:7f:
84:df:fc:09:dc:dc:41:63:af:78:3f:e3:42:00:59:41:93:87:
dc:fc:86:40:88:d5:22:a6:56:d8:d0:28:0d:25:1f:1b:79:3f:
40:0a:6d:3d:3a:6c:9b:fc:e0:3e:a5:20:72:fc:59:b7:64:0b:
53:0f:ef:50:52:ab:ee:9a:f3:62:03:00:48:be:4b:39:a0:8a:
d2:bf:bb:ba:e3:62:37:4a:e3:b9:56:7e:1e:fc:06:91:9d:a1:
17:77:55:ea:85:0e:c9:ef:fd:72:7d:78:c8:56:e2:d0:8e:63:
27:6f:3c:41:a1:73:39:c8:9f:36:ec:96:6e:2b:73:c9:fa:cc:
70:37:b5:e7:dc:88:72:35:83:d8:30:23:af:f2:cb:10:9c:04:
13:6e:e5:48:b8:63:9e:a3:80:b9:a4:58:3d:c4:3f:e5:15:33:
5d:8c:e5:92:4d:27:49:3a:de:be:c0:5b:77:f7:03:2b:01:82:
aa:a2:44:c9:77:0e:aa:13:d9:4a:ea:f6:cd:e0:60:5c:2e:be:
6e:0c:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:02 2024 by rpki-client on console-fra.rpki-client.org