Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/k56ef2bKKaKQ1-tl5lQbq_oclOM.roa
File: k56ef2bKKaKQ1-tl5lQbq_oclOM.roa (raw, json)
Hash identifier: RJQG1HkAw6ewxyKhz6TpsertWUFXtnR2xNwSpNH9W98=
Subject key identifier: 93:9E:9E:7F:66:CA:29:A2:90:D7:EB:65:E6:54:1B:AB:FA:1C:94:E3
Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial: 01856D8186912FE5A778ED642C1E330F63CB
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/k56ef2bKKaKQ1-tl5lQbq_oclOM.roa
Signing time: Sun 01 Jan 2023 13:24:43 +0000
ROA not before: Sun 01 Jan 2023 13:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205308
IP address blocks: 194.55.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:86:91:2f:e5:a7:78:ed:64:2c:1e:33:0f:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Validity
Not Before: Jan 1 13:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=939e9e7f66ca29a290d7eb65e6541babfa1c94e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:ba:e3:04:68:9f:7f:64:c5:b4:79:d6:ec:
81:18:6d:70:20:bb:ab:0f:3d:fa:b0:32:4f:fa:af:
ea:d6:db:cc:21:f9:31:63:67:82:5c:9f:c7:31:07:
e5:8c:90:55:cd:9a:28:90:1a:67:1d:2c:2f:b3:b6:
6e:27:3e:c3:07:6f:88:4f:22:de:2d:0b:f0:3e:5b:
be:92:4b:f0:23:19:62:43:4c:4f:09:e5:f7:76:ac:
2a:c1:cf:69:b6:f8:30:af:60:83:8d:e5:26:16:fc:
fb:97:3a:b5:1c:4b:b8:1b:85:f8:2d:de:0b:36:9f:
80:d2:ec:08:32:e8:59:42:9c:4e:67:57:77:49:3a:
37:8d:58:bd:97:a8:d7:44:6d:ec:b6:d2:73:3a:6e:
d2:aa:2d:34:c9:a1:3e:72:03:8c:97:9f:8d:6f:4b:
9f:ee:6d:c5:d8:00:1d:03:0e:3d:c9:43:ac:a3:1b:
99:47:30:4f:9d:0c:33:b8:ac:cb:c6:ad:b5:a0:43:
ca:9d:6c:d3:b0:23:f1:9f:a1:e1:a4:64:4f:89:7d:
4a:66:8b:39:b8:bf:dc:83:45:71:06:b2:a3:14:5f:
c6:73:57:10:8b:94:52:af:80:77:07:47:0c:f0:8a:
04:e8:07:e8:10:b0:bb:c1:cd:7f:52:1c:ed:45:0b:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:9E:7F:66:CA:29:A2:90:D7:EB:65:E6:54:1B:AB:FA:1C:94:E3
X509v3 Authority Key Identifier:
keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/k56ef2bKKaKQ1-tl5lQbq_oclOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.7.0/24
Signature Algorithm: sha256WithRSAEncryption
06:51:18:00:7f:54:61:fa:8b:18:9d:eb:39:6f:6d:1a:ae:28:
13:f5:e6:de:65:fb:b0:30:f3:84:3c:e4:24:93:6e:f5:88:56:
93:2a:ae:17:28:17:98:68:34:1b:de:0e:92:12:00:a7:37:a1:
30:b6:63:38:4e:a7:a9:b7:27:b0:fb:90:e3:fd:85:9b:a2:66:
2e:84:40:b2:00:7c:55:d0:7f:4d:d1:65:c2:79:e7:c0:c8:83:
4f:47:99:51:f3:9a:27:cf:9c:e1:89:49:dd:5f:a4:24:bb:26:
13:a8:c3:21:81:d3:3e:d9:a0:36:e5:07:06:e6:eb:d5:01:8a:
8f:3d:71:87:26:4e:69:5d:27:5e:4f:9e:ce:dd:aa:ae:85:d7:
ef:29:a0:b5:92:02:09:08:5b:d3:a1:2a:43:3d:54:3c:52:13:
a1:81:29:a6:69:57:fb:02:40:f0:e1:4b:b3:3d:bf:20:0a:cb:
59:43:6b:5d:99:f4:14:45:92:29:1e:37:19:73:f7:c7:f9:e8:
5b:de:68:a1:0e:68:8b:9c:fd:a1:98:3f:b4:fd:de:26:7e:e3:
ef:70:1f:9f:bd:f2:4c:49:da:bb:55:ef:17:7e:cb:99:39:52:
ad:cb:c2:d9:4e:59:41:d9:80:f1:0f:89:c0:f2:5a:26:d6:a6:
db:ba:9d:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgYaRL+WneO1kLB4zD2PLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2M4MjJkMWU5NDUxN2M4ODUxNWNjOWIzZmMyYmRlMTI5
YjQ1NGMwHhcNMjMwMTAxMTMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzllOWU3ZjY2Y2EyOWEyOTBkN2ViNjVlNjU0MWJhYmZhMWM5NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnC64wRon39kxbR51uyBGG1wILur
Dz36sDJP+q/q1tvMIfkxY2eCXJ/HMQfljJBVzZookBpnHSwvs7ZuJz7DB2+ITyLe
LQvwPlu+kkvwIxliQ0xPCeX3dqwqwc9ptvgwr2CDjeUmFvz7lzq1HEu4G4X4Ld4L
Np+A0uwIMuhZQpxOZ1d3STo3jVi9l6jXRG3sttJzOm7Sqi00yaE+cgOMl5+Nb0uf
7m3F2AAdAw49yUOsoxuZRzBPnQwzuKzLxq21oEPKnWzTsCPxn6HhpGRPiX1KZos5
uL/cg0VxBrKjFF/Gc1cQi5RSr4B3B0cM8IoE6AfoELC7wc1/UhztRQsEVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJOenn9myimikNfrZeZUG6v6HJTjMB8GA1UdIwQY
MBaAFOt8gi0elFF8iFFcybP8K94Sm0VMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN5Q0xSNlVVWHlJVVZ6SnNfd3IzaEtiUlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMTkzM2ItZmMwYi00MTBmLTljMzQt
MTA2NDUwNGUyYjk3LzEvazU2ZWYyYktLYUtRMS10bDVsUWJxX29jbE9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xMTkzM2ItZmMwYi00MTBmLTljMzQtMTA2NDUwNGUyYjk3
LzEvNjN5Q0xSNlVVWHlJVVZ6SnNfd3IzaEtiUlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcHMA0G
CSqGSIb3DQEBCwUAA4IBAQAGURgAf1Rh+osYnes5b20arigT9ebeZfuwMPOEPOQk
k271iFaTKq4XKBeYaDQb3g6SEgCnN6EwtmM4Tqeptyew+5Dj/YWbomYuhECyAHxV
0H9N0WXCeefAyINPR5lR85onz5zhiUndX6QkuyYTqMMhgdM+2aA25QcG5uvVAYqP
PXGHJk5pXSdeT57O3aquhdfvKaC1kgIJCFvToSpDPVQ8UhOhgSmmaVf7AkDw4Uuz
Pb8gCstZQ2tdmfQURZIpHjcZc/fH+ehb3mihDmiLnP2hmD+0/d4mfuPvcB+fvfJM
Sdq7Ve8XfsuZOVKty8LZTllB2YDxD4nA8lom1qbbup3A
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:49 2024 by rpki-client on console-fra.rpki-client.org