Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/93AqRfpdj2B9-z5S0Gmx853qSwc.roa
File: 93AqRfpdj2B9-z5S0Gmx853qSwc.roa (raw, json)
Hash identifier: l87iULhb/V4sMRUJ55LWf6Sa9rPM50yVylKQGPnC99I=
Subject key identifier: F7:70:2A:45:FA:5D:8F:60:7D:FB:3E:52:D0:69:B1:F3:9D:EA:4B:07
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 018A5FD5D85B5AA347759F1852BC23E572D1
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/93AqRfpdj2B9-z5S0Gmx853qSwc.roa
Signing time: Mon 04 Sep 2023 10:56:04 +0000
ROA not before: Mon 04 Sep 2023 10:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206260
IP address blocks: 88.84.32.0/20 maxlen: 20
185.9.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:d5:d8:5b:5a:a3:47:75:9f:18:52:bc:23:e5:72:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Sep 4 10:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7702a45fa5d8f607dfb3e52d069b1f39dea4b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:3b:f9:4b:5b:40:32:3e:e6:8c:91:24:a6:
33:4d:d7:df:ec:b8:05:e4:d8:c3:5d:86:34:ae:5e:
57:31:6f:ac:a2:fb:03:b8:26:6b:9c:21:2b:82:c0:
7a:df:ef:64:ef:25:f6:95:88:df:56:f0:39:4e:35:
42:d6:5c:d7:28:f4:4a:08:fe:0b:ba:13:7b:f6:e8:
89:01:b1:2a:eb:9d:16:a3:d1:26:99:dc:84:18:4f:
c7:56:71:17:8b:ea:88:86:db:d8:04:4e:6a:1b:df:
91:05:6d:14:13:bf:0b:cf:bb:40:19:7d:45:9d:d8:
e4:35:52:f7:93:d2:37:20:24:66:c5:95:b8:41:77:
69:95:dc:fe:c6:36:7a:9d:77:58:62:4e:09:83:c9:
e1:e4:35:08:19:06:40:27:be:6b:22:3c:c6:33:41:
6f:30:e7:9c:85:6d:a3:4e:ee:1d:66:6a:33:d4:9d:
af:ea:cb:0e:1c:40:6f:05:6d:8a:d0:f7:9b:43:07:
bc:f4:2d:72:54:b3:cd:ec:e3:37:97:22:30:a6:9f:
0d:8f:2c:b8:80:b7:99:4a:42:ec:51:5b:42:0e:cd:
47:b4:07:73:2c:84:5e:69:b9:a2:b9:24:42:1c:8f:
5d:65:d1:18:19:a8:5b:f7:1b:ae:bb:ec:cf:ce:86:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:2A:45:FA:5D:8F:60:7D:FB:3E:52:D0:69:B1:F3:9D:EA:4B:07
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/93AqRfpdj2B9-z5S0Gmx853qSwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.32.0/20
185.9.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:18:03:83:9a:4e:aa:cb:4b:9a:18:78:28:4b:04:15:6f:37:
1f:72:1d:51:32:69:ae:c5:85:55:b7:ae:64:0d:d8:c6:96:bf:
f9:43:1a:79:48:c2:0c:56:9a:33:0f:64:13:9c:32:9a:56:0b:
c6:3b:a3:26:ba:74:e8:09:90:e4:f1:ec:26:40:dc:b6:c7:6a:
36:1e:13:d7:f2:81:23:19:55:5c:2d:0b:3a:dc:12:93:ed:1d:
d7:b2:f2:7b:b3:09:16:5a:fa:03:74:a0:b6:09:cf:a6:e2:98:
2f:30:4c:04:64:01:f9:5a:95:5f:45:e2:07:4b:06:a4:b6:ee:
58:67:68:d8:37:24:2d:a1:d0:10:59:d9:20:6f:37:c4:53:bb:
6b:c5:53:9c:6c:94:50:cc:d1:81:ec:73:25:17:07:30:c1:a2:
72:63:4d:c5:5a:f8:1c:db:f8:d0:62:c9:84:f1:07:69:18:b0:
35:2b:b2:6f:f4:fb:7d:c9:ac:e0:5f:76:17:18:89:bc:de:8d:
5f:93:30:b9:7d:42:ee:ba:95:46:c0:9a:95:88:5b:91:5d:ec:
65:36:13:1a:36:d7:c8:48:d3:d8:bb:24:4c:65:d9:5a:04:ef:
20:0b:d8:fe:53:3b:3c:46:1b:19:0e:13:db:14:ee:6c:88:89:
12:0a:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org