Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/XpNHvljcsTJNXjZGqZsOfc0SaAo.roa
File: XpNHvljcsTJNXjZGqZsOfc0SaAo.roa (raw, json)
Hash identifier: O5iMlqoKOBdRWEBOXoD50WVUW3DKYgszf0hJtAMNt/8=
Subject key identifier: 5E:93:47:BE:58:DC:B1:32:4D:5E:36:46:A9:9B:0E:7D:CD:12:68:0A
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 018CC5DCAEC99D6B8E7453F5BECA039F1E60
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/XpNHvljcsTJNXjZGqZsOfc0SaAo.roa
Signing time: Mon 01 Jan 2024 16:30:23 +0000
ROA not before: Mon 01 Jan 2024 16:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210861
IP address blocks: 93.190.126.0/24 maxlen: 24
2a11:7980::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 12 Jan 2024 13:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ae:c9:9d:6b:8e:74:53:f5:be:ca:03:9f:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: Jan 1 16:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e9347be58dcb1324d5e3646a99b0e7dcd12680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:e9:e6:ce:6b:a1:13:5d:94:bb:3e:de:25:
6e:b4:a0:19:f0:c1:af:ff:65:4c:29:12:4c:14:4f:
a6:84:1d:aa:0d:f9:34:64:1f:3a:f9:76:8b:7a:cc:
9a:61:19:a6:49:ea:08:97:64:31:0d:ed:92:db:6f:
7f:6e:d6:88:7f:7f:1f:81:9a:ef:ab:87:2e:f1:3d:
65:ab:49:aa:74:4a:2a:7a:da:3c:40:6a:35:95:be:
f9:96:b0:b5:bb:18:8b:38:df:9e:7e:8c:7d:5b:7e:
03:61:4c:00:ac:57:43:19:0b:4c:0e:bb:82:bd:67:
05:d9:b3:e5:17:7f:9c:ff:a5:5c:ce:d3:82:c7:55:
64:f6:79:f6:9b:d0:8b:87:6e:23:4a:a0:1a:8e:bc:
3d:34:22:91:07:f3:0d:93:41:1d:4f:78:e2:1f:0d:
40:a0:13:26:7c:b5:12:7b:eb:fb:ca:71:c1:3b:03:
2f:2a:8e:68:17:89:c4:bf:8d:db:ab:bc:26:ed:21:
e2:4f:4a:6a:71:8c:7e:aa:f0:ea:80:d2:31:15:f4:
fc:d9:63:7e:cc:5a:a6:12:91:cc:8d:c3:d1:37:99:
f6:00:49:38:73:e8:55:10:b2:9b:41:a5:53:f5:4d:
d3:d6:07:4d:4e:08:ca:c2:83:bb:62:e4:ff:9d:e9:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:47:BE:58:DC:B1:32:4D:5E:36:46:A9:9B:0E:7D:CD:12:68:0A
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/XpNHvljcsTJNXjZGqZsOfc0SaAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.126.0/24
IPv6:
2a11:7980::/40
Signature Algorithm: sha256WithRSAEncryption
7c:31:fb:84:7e:da:6f:2f:90:1d:c1:51:c6:bb:35:31:cf:f6:
be:38:89:17:e3:14:00:21:16:22:65:fb:db:cb:f1:c4:b2:4f:
46:53:30:bc:06:53:64:9e:07:37:21:cc:34:76:6e:fd:81:b5:
95:5a:22:ad:c1:e3:15:b3:d2:52:87:9e:2d:83:d7:b6:0c:67:
68:7b:c5:3c:60:5f:ad:dd:3b:2b:9a:56:3e:ca:e7:0a:f5:46:
6e:d6:f5:95:e7:cc:7c:0e:74:dd:ff:a4:b0:e0:45:0f:8f:f6:
fb:00:86:4f:ba:6e:70:bc:98:ae:e0:82:af:c6:e4:8c:0d:0a:
09:da:03:bb:2c:24:16:aa:39:3d:f7:b1:db:d3:ea:68:43:f1:
e9:1e:03:98:38:e2:47:59:47:ea:b3:b5:ec:6c:30:6d:0d:a7:
4e:8d:b6:01:1c:26:91:ee:64:81:d6:23:43:25:91:ba:6e:5f:
25:f8:5e:36:0e:6b:1a:f5:dc:bf:fe:db:65:4b:cc:78:ee:4a:
fa:0c:b2:5c:bd:a3:6d:0c:1b:42:b1:c3:93:80:28:12:9b:03:
5f:03:3e:28:ad:f4:16:f8:6b:aa:4f:d6:73:32:1b:5d:6d:b8:
a9:f1:52:f2:35:c0:b9:2d:67:22:c5:9d:dc:44:f2:71:43:a6:
5d:8c:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-fra.rpki-client.org