Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/6ErqulxAtBFKfpqp7oJauGPPYd0.roa
File: 6ErqulxAtBFKfpqp7oJauGPPYd0.roa (raw, json)
Hash identifier: fMKqDnZSE9FlTfTLdmY+6nWmfXx5zQ9CSvFiL7dQFVw=
Subject key identifier: E8:4A:EA:BA:5C:40:B4:11:4A:7E:9A:A9:EE:82:5A:B8:63:CF:61:DD
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 01856EB8E28211984678E5F255A2E9A0ED93
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/6ErqulxAtBFKfpqp7oJauGPPYd0.roa
Signing time: Sun 01 Jan 2023 19:04:48 +0000
ROA not before: Sun 01 Jan 2023 19:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 13:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e2:82:11:98:46:78:e5:f2:55:a2:e9:a0:ed:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 1 19:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84aeaba5c40b4114a7e9aa9ee825ab863cf61dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:b1:df:e1:b3:b0:c2:b3:dd:54:8b:16:86:
10:eb:70:e4:1f:c8:31:25:62:ae:e4:a6:54:17:96:
81:e5:0f:b7:37:f0:d5:5f:8e:3a:5f:ce:9e:5c:7f:
86:96:d7:dd:ac:8f:09:e1:02:98:e8:de:0c:7b:fc:
42:19:26:ef:cc:9b:d3:76:af:0a:8d:b1:72:10:9d:
9a:e0:64:3e:a9:1e:66:84:72:86:c0:4f:11:45:35:
30:55:ce:25:f5:73:48:05:1f:fc:e8:cb:df:a2:f2:
6b:57:94:95:3f:ae:61:22:2b:ba:f0:b1:bd:0a:ed:
e9:91:75:e4:c1:5a:24:e1:21:33:f3:12:ad:e1:37:
eb:18:b2:dc:29:87:16:ad:57:e9:d0:f5:bb:bf:7d:
4a:df:2f:42:6f:ad:8a:4f:26:3e:0c:81:70:16:43:
e3:74:a6:b8:88:83:9f:64:37:c7:2c:4e:64:b0:45:
00:7b:58:81:a0:87:18:2c:57:b2:9b:56:31:f2:e6:
7a:8e:b9:01:7e:ec:09:d7:0e:59:81:3c:f9:de:d1:
2f:a7:86:27:8f:82:05:95:e4:31:06:e8:24:1b:d8:
23:c1:c5:cc:69:33:66:2e:13:3e:dc:1a:06:9e:b1:
86:22:2f:cd:ef:f3:07:c2:9e:75:69:8d:52:2c:65:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:EA:BA:5C:40:B4:11:4A:7E:9A:A9:EE:82:5A:B8:63:CF:61:DD
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/6ErqulxAtBFKfpqp7oJauGPPYd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
185.47.172.0/24
185.53.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:01:89:0d:33:79:8b:08:c8:bc:a5:f8:f8:e3:7f:c5:80:59:
f1:92:82:3d:45:2f:bd:c3:eb:32:1e:27:70:60:99:6b:4a:e3:
73:13:2d:28:ea:24:31:3d:96:3e:1c:12:ff:51:5e:44:23:a9:
14:6b:8f:d2:2e:c2:74:7b:9a:a5:3c:d0:79:35:6a:01:02:95:
37:f2:4c:16:01:3e:ca:74:20:6b:91:00:ee:ee:93:3f:f4:65:
68:45:67:a2:fb:01:80:2b:c8:e4:3d:7c:1a:80:35:3e:e6:df:
71:b1:87:55:8f:46:fa:5f:88:43:fa:8c:22:39:ec:24:52:a4:
c6:0a:f7:e2:56:1f:ee:d2:4d:26:6d:f0:e6:0a:1d:e9:22:19:
3f:8b:04:2a:9f:8d:a2:38:c4:0c:10:b1:24:5c:ab:82:c1:6f:
3e:33:98:d5:80:cf:d9:d3:49:c9:18:7e:d6:0d:e2:76:70:1c:
29:2b:c6:46:a2:06:20:57:0d:2d:2e:45:d3:21:75:9f:03:ab:
5d:cf:93:46:3b:7c:2c:57:ad:b6:7c:56:bf:e3:5b:8e:c0:0b:
2a:84:fb:9b:c1:b4:91:9b:54:cc:18:e6:f0:ee:1c:eb:1c:d4:
c9:1d:8f:a4:0a:43:86:8f:74:83:cb:1f:0c:67:81:6d:d3:1a:
30:24:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:32 2024 by rpki-client on console-fra.rpki-client.org