Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7p4JuejdxWO9n5T94IkpaYRnAFQ.roa
File: 7p4JuejdxWO9n5T94IkpaYRnAFQ.roa (raw, json)
Hash identifier: vD2S0Mi4BoDUmHqIQMluto5CDaWJW6YiK5rzbw7YKuw=
Subject key identifier: EE:9E:09:B9:E8:DD:C5:63:BD:9F:94:FD:E0:89:29:69:84:67:00:54
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB1F779413FD5A10194FB6AB284EC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7p4JuejdxWO9n5T94IkpaYRnAFQ.roa
Signing time: Sun 01 Jan 2023 06:04:43 +0000
ROA not before: Sun 01 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15587
IP address blocks: 93.159.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b1:f7:79:41:3f:d5:a1:01:94:fb:6a:b2:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee9e09b9e8ddc563bd9f94fde089296984670054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:ba:64:24:eb:85:83:9e:18:e4:fa:ab:55:
43:06:6f:2a:83:13:75:7a:94:f3:e1:dc:14:04:d6:
91:09:62:0b:94:89:92:4a:de:c9:f8:1c:29:44:7b:
27:a4:7c:3f:95:24:d5:22:fd:06:00:0b:70:81:4f:
71:f2:f5:13:01:b9:22:83:90:04:a4:a1:e0:ca:72:
a8:bb:41:1c:ae:d9:0a:1d:b8:4b:d5:5c:44:24:30:
4f:19:3f:2e:17:99:14:29:0a:9b:15:96:e6:7b:bb:
59:12:31:e4:ff:0d:55:e6:12:f0:44:ff:0c:06:66:
c6:14:be:3a:9a:d7:c9:37:7f:9c:2f:db:f9:4c:8c:
e2:f8:71:ec:84:c5:e4:65:ad:7a:a7:60:de:02:68:
3b:58:5c:28:5e:b3:ea:98:bd:66:28:86:10:06:2c:
f6:96:d6:54:ae:da:f3:17:4e:1f:bd:c9:a5:e3:7f:
55:91:ab:3a:cf:70:e8:7d:68:ff:79:e0:43:e0:ad:
a4:39:37:c1:74:d1:22:d6:89:28:f0:9d:ec:68:a0:
a7:ee:90:ec:04:ce:df:0d:8f:8c:ee:5c:87:db:21:
2f:6b:cb:3d:33:f2:ef:e9:5e:3f:4b:0f:5d:95:e2:
d0:9a:01:9c:6b:fc:1f:db:78:f5:57:62:e8:b3:11:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9E:09:B9:E8:DD:C5:63:BD:9F:94:FD:E0:89:29:69:84:67:00:54
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7p4JuejdxWO9n5T94IkpaYRnAFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.62.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ce:95:0f:bf:b8:e5:4a:f9:a0:44:9e:ac:97:4e:55:d7:f6:
1f:9e:0e:a1:1b:f5:b6:58:e6:d0:0e:a4:5e:c7:ee:e2:28:4a:
10:41:74:74:b8:2e:9c:bd:b2:f2:f3:d1:39:80:94:f6:f3:1b:
35:ed:28:3c:02:23:55:24:fc:b2:c4:9b:ff:82:90:87:ab:b8:
e1:c3:e3:aa:e1:bb:b4:e9:0b:27:dd:6b:65:2e:aa:20:22:de:
31:29:7f:a8:19:0b:4e:73:44:ed:a0:73:b4:6e:96:70:05:c9:
b8:b8:0d:94:14:23:13:6f:a8:ec:66:2d:3a:08:75:ae:38:99:
fb:71:be:35:47:84:22:16:a4:1b:c6:a9:9d:47:d3:83:f1:44:
ee:4e:a8:6d:25:41:83:18:74:61:37:6e:7b:9c:92:57:b1:78:
80:58:4e:37:d4:c1:ff:0c:ce:fc:bc:56:f2:cd:62:b6:06:bc:
f6:3f:0e:52:2f:4f:68:40:2e:c2:fc:0c:3d:01:73:cb:92:4d:
68:f2:c0:62:c1:0e:7c:c1:d0:6d:14:7c:e3:71:61:9a:cb:99:
b8:45:cf:ef:af:3b:ff:4d:d9:77:cc:4b:a5:de:d5:cf:02:b0:
01:09:06:3b:78:db:b5:d8:db:0e:b1:0d:96:dc:35:c7:7e:7e:
c9:53:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org