Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/u9vY5FelAhf9d4jv-xaM_Mx9dME.roa
File: u9vY5FelAhf9d4jv-xaM_Mx9dME.roa (raw, json)
Hash identifier: GY6sg+aRi8K9JKpLpBLac/T46vuE8qf3c663IrSWmuk=
Subject key identifier: BB:DB:D8:E4:57:A5:02:17:FD:77:88:EF:FB:16:8C:FC:CC:7D:74:C1
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0AD788CCF731204AAF76225E4BEFC8
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/u9vY5FelAhf9d4jv-xaM_Mx9dME.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47355
IP address blocks: 93.191.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d7:88:cc:f7:31:20:4a:af:76:22:5e:4b:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbdbd8e457a50217fd7788effb168cfccc7d74c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:46:44:55:2b:3b:34:d9:59:30:d9:48:c7:
14:d5:40:1c:20:e3:4b:ad:fb:ee:0c:61:e3:61:de:
37:1c:3d:4a:4f:72:79:b4:d6:4f:8e:69:62:fc:2c:
90:a0:c9:19:33:7f:de:42:3d:f9:7a:3f:1a:5f:f0:
6b:e6:5c:38:1d:c0:fa:f8:f7:88:1d:0f:30:95:80:
93:90:6f:af:19:ac:85:6a:04:4e:7c:aa:4f:fc:ff:
3f:4d:7f:46:28:1e:bc:b4:e5:7f:6a:99:7f:c6:5e:
09:5a:09:14:74:72:0f:29:35:78:19:e4:0e:be:f9:
f8:1c:ae:86:d8:9e:93:72:06:45:75:63:e4:00:50:
8f:4e:3a:ce:9a:ff:0f:89:e1:1c:2d:48:c8:2f:db:
db:89:d3:0e:aa:be:f8:52:2c:a8:73:8e:99:50:1c:
b7:9d:6f:3d:17:25:c2:de:0b:ac:cc:bb:e4:71:9a:
f5:57:1c:e8:fa:e5:27:ca:ac:fa:56:c8:7e:21:f9:
a8:36:6d:b2:ca:6f:0f:c0:6c:bb:40:69:17:23:58:
aa:b3:0c:c6:c4:b5:f7:67:70:8e:2c:03:93:ef:5a:
7c:12:96:ef:8e:7a:6c:f8:43:1e:be:e7:e9:36:be:
03:2c:4e:7e:d0:51:12:c4:43:1e:d0:a3:69:5d:e9:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:D8:E4:57:A5:02:17:FD:77:88:EF:FB:16:8C:FC:CC:7D:74:C1
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/u9vY5FelAhf9d4jv-xaM_Mx9dME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:01:63:db:c4:b3:78:6c:06:a2:8e:92:68:dd:96:89:55:84:
cc:4b:2f:73:e1:5a:a6:e1:80:25:2e:d6:09:05:1c:94:ef:99:
4a:69:03:f8:cc:bf:45:e2:65:19:6c:9b:86:eb:24:fa:bf:3e:
60:e9:ee:d7:13:a5:97:d6:32:04:f1:63:8e:0a:fa:8e:e6:de:
fc:89:60:69:7a:be:57:ff:06:75:81:44:1d:e3:ef:69:0b:bd:
81:d4:23:70:71:b0:9b:6a:e7:bd:ba:e4:92:89:e6:07:6c:5a:
8d:b9:f4:2c:cc:85:d5:86:a9:21:6f:44:1d:f2:e1:30:37:b4:
d0:3e:13:4c:f6:d4:d5:62:ce:78:8a:f6:fc:38:2d:a7:37:0f:
f0:5a:b1:15:ad:2d:7c:a7:3e:d1:90:96:11:4d:2b:12:7a:08:
8b:ad:0e:f5:32:ce:a4:e7:f5:60:d8:29:7e:30:2f:c3:ac:2f:
60:2f:31:aa:19:d0:2d:e8:32:6d:10:9a:75:19:b4:98:12:77:
d0:24:84:b5:b5:8f:63:1d:3a:4d:77:14:ed:b8:36:90:34:aa:
4b:a4:1e:04:8c:af:14:0e:df:20:d0:c2:3d:d5:3b:46:04:12:
6e:ec:92:1f:2c:2b:8d:0b:1f:86:b0:a0:c9:b5:1c:ad:c9:35:
93:d2:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org