Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/93xsaG_zKMD7zFxb2Qt5KCxK8UM.roa
File: 93xsaG_zKMD7zFxb2Qt5KCxK8UM.roa (raw, json)
Hash identifier: GpRy1A8Z0SwmlzAtyN+BiDjpIKBpJs9+/SNuzzOZS6Y=
Subject key identifier: F7:7C:6C:68:6F:F3:28:C0:FB:CC:5C:5B:D9:0B:79:28:2C:4A:F1:43
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 019007B70A5892471EA559E57D1B022E17DB
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/93xsaG_zKMD7zFxb2Qt5KCxK8UM.roa
Signing time: Tue 11 Jun 2024 14:32:34 +0000
ROA not before: Tue 11 Jun 2024 14:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49747
IP address blocks: 188.64.141.0/24 maxlen: 24
193.200.206.0/24 maxlen: 24
2001:67c:c6c::/48 maxlen: 48
2a14:5f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 13 Jun 2024 09:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:b7:0a:58:92:47:1e:a5:59:e5:7d:1b:02:2e:17:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Jun 11 14:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f77c6c686ff328c0fbcc5c5bd90b79282c4af143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:46:42:a7:1d:87:85:cf:8a:4d:51:35:a4:
9d:51:43:d1:95:07:89:8f:54:10:4f:55:ef:47:29:
43:6c:d4:99:e0:89:c9:10:32:78:69:c4:a4:9f:dc:
de:29:ae:c4:e0:ba:85:80:be:d1:7c:b0:41:4c:3c:
73:b4:68:9d:cc:a0:a2:82:07:7d:97:75:37:3f:92:
fd:6c:1c:12:ba:f5:84:e2:b3:10:c2:50:c8:a0:7c:
3f:6f:d8:74:66:0b:9a:27:83:8c:59:9d:06:6f:b5:
fa:62:30:9d:67:8c:07:de:6a:a1:67:29:d7:54:9a:
e7:ff:f2:25:3b:a9:b8:3c:8d:69:f5:e7:c3:d0:8e:
0b:f6:94:24:8a:8e:89:4d:4b:ab:fe:f2:2f:5a:63:
5b:50:5f:ba:e1:af:d7:1b:43:d8:23:04:e7:9c:51:
c3:b7:47:5e:26:46:8d:e5:02:66:f8:0e:2d:a1:13:
e7:da:f0:e1:97:0d:ea:cd:8f:1a:cb:d7:07:6d:92:
e8:a4:8c:77:64:99:cc:fb:35:c5:2b:56:8e:9f:c0:
04:b6:fd:40:ba:38:1b:40:de:d0:93:5c:14:70:de:
4d:58:08:e3:a4:c0:26:1d:ec:eb:7b:fb:36:ff:c1:
8f:51:77:ff:b5:98:f1:27:73:37:b2:bd:7e:0e:e4:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7C:6C:68:6F:F3:28:C0:FB:CC:5C:5B:D9:0B:79:28:2C:4A:F1:43
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/93xsaG_zKMD7zFxb2Qt5KCxK8UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.141.0/24
193.200.206.0/24
IPv6:
2001:67c:c6c::/48
2a14:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:8e:14:db:0a:a6:c9:6d:a5:2e:6f:e6:84:32:eb:b6:d4:0e:
b9:d1:6a:c0:b9:7f:69:71:05:3c:43:52:58:b5:ef:a3:51:40:
6d:05:c3:f2:0d:af:03:ac:7d:1f:e3:e2:5d:09:8d:9c:9f:fa:
ff:54:c6:38:5c:a2:c3:9e:c9:1f:94:c0:68:8b:74:3c:e8:cb:
e4:c6:2b:03:0f:aa:ca:a1:24:c7:e9:21:4f:94:4b:15:43:8e:
53:d0:e9:27:4f:90:2c:cd:04:51:a2:62:78:8e:13:26:73:0b:
f2:e0:f2:f9:2f:e9:a9:01:4e:e8:53:2b:fc:f9:0d:f7:b5:04:
05:7a:e6:51:e1:b6:0d:14:ca:b4:3d:03:8b:85:3a:17:19:3d:
25:0f:4f:ad:43:e8:3a:87:54:93:b6:a4:2a:39:94:ed:08:48:
c3:ed:13:a2:a9:42:58:51:f2:3c:e3:92:cf:68:1e:c9:57:db:
c1:f8:8f:10:78:89:14:a6:d1:ef:eb:9b:92:5f:36:6c:09:07:
6f:ed:97:b7:72:39:58:c7:cc:f5:80:a8:f9:91:58:85:e3:ee:
36:94:a2:b3:42:2f:dd:f4:03:c6:42:75:94:13:8d:37:d6:75:
92:b7:92:70:d6:bb:f6:45:40:d6:78:62:2d:28:18:ab:34:e7:
3d:ba:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 12:13:57 2024 by rpki-client on console-fra.rpki-client.org