Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/w7C8KqP0jYeLgM7WnW6Bh7YcEsM.roa
File: w7C8KqP0jYeLgM7WnW6Bh7YcEsM.roa (raw, json)
Hash identifier: VV61O1AAesCdkRNCKuvK5qPgI2OECzexVTjdqSgT23w=
Subject key identifier: C3:B0:BC:2A:A3:F4:8D:87:8B:80:CE:D6:9D:6E:81:87:B6:1C:12:C3
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 0186E49D1C46937509B2EAE773F0C13E33DA
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/w7C8KqP0jYeLgM7WnW6Bh7YcEsM.roa
Signing time: Wed 15 Mar 2023 09:32:26 +0000
ROA not before: Wed 15 Mar 2023 09:32:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210423
IP address blocks: 93.157.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:9d:1c:46:93:75:09:b2:ea:e7:73:f0:c1:3e:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Mar 15 09:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3b0bc2aa3f48d878b80ced69d6e8187b61c12c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:c0:df:2f:ea:ac:b9:cd:88:24:2b:d7:a3:
c2:5a:fa:01:a7:39:d9:25:43:6e:35:2d:aa:1c:b3:
36:83:c5:bc:3e:d5:9c:1f:77:bd:60:be:3d:bc:4a:
09:90:4a:bc:a0:b4:f9:91:69:cc:8d:a0:db:0c:80:
27:ed:24:53:0c:13:a6:68:da:69:86:fa:b4:3f:c1:
1b:e5:0e:1f:11:cd:34:2b:04:5c:49:3f:e8:e7:45:
da:3a:88:45:7e:b0:ba:6c:10:2b:88:ad:1f:58:68:
03:2e:91:ce:26:84:cf:a0:8a:4d:39:3b:d1:69:a2:
06:81:ca:9c:66:4e:0b:6e:d7:e8:bd:db:e1:9a:67:
dc:d4:dc:40:d8:0a:51:9e:11:b2:e5:a0:79:e0:3d:
a3:f3:03:3e:f7:e8:0b:ba:32:c6:ee:c4:01:8a:3f:
89:d0:f7:c1:ee:2e:1a:81:75:8e:5d:ae:64:ed:4b:
9b:91:b1:96:f0:10:28:27:15:8e:bd:5b:4f:dd:65:
bb:fd:60:12:cb:8c:76:a1:e1:b8:81:5d:44:4e:ba:
c9:5a:1e:a5:49:78:fe:11:94:f0:c9:2f:df:1f:e3:
fb:b1:be:9c:7b:57:af:2a:96:3b:58:b5:53:f9:bc:
87:1f:60:d5:03:66:af:a8:b3:79:47:6f:b9:9f:ba:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B0:BC:2A:A3:F4:8D:87:8B:80:CE:D6:9D:6E:81:87:B6:1C:12:C3
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/w7C8KqP0jYeLgM7WnW6Bh7YcEsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.107.0/24
Signature Algorithm: sha256WithRSAEncryption
94:62:49:58:dd:da:d3:13:72:06:02:7b:74:b6:17:8c:61:36:
48:8b:e5:54:d2:91:38:6b:5a:00:62:76:78:f2:db:c5:f0:a3:
f5:09:79:3d:f2:66:6b:dd:a6:cb:9a:4c:aa:65:bc:12:b8:fd:
0b:03:39:95:ff:08:48:0e:f4:9d:ed:9a:3f:d8:5b:3f:a9:52:
2b:41:d2:07:0e:a5:56:ca:35:35:c9:31:c4:34:1e:4a:5e:53:
b5:34:41:d3:56:77:65:67:55:03:f7:fc:ef:c7:8c:3d:73:42:
3a:97:7d:bd:aa:b4:03:97:3a:ac:43:0e:5b:18:8f:51:d6:f8:
ed:44:71:dc:d2:92:15:4c:68:a3:ff:3e:f3:cc:cf:4d:d7:52:
a1:16:bc:1a:7f:ae:da:16:61:5b:e1:7f:54:5c:4c:80:85:0f:
60:40:32:ca:73:cc:6a:98:30:76:dd:08:74:ac:3e:c3:e9:c6:
d4:db:20:0e:0b:51:64:bb:fb:5d:cc:46:52:2f:20:c9:8d:e5:
ca:7f:64:ba:b7:3b:b8:fd:95:31:f9:4c:d4:0c:9f:2c:ea:59:
60:94:ca:c3:27:f3:3c:41:49:a0:56:87:9c:bf:f0:92:fb:6f:
4a:be:26:1e:c1:22:17:ba:e8:15:d3:b5:ce:8a:2b:02:c8:01:
84:33:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org