Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/h9qr3Hu1SSF1CDorT3J_rydIHcE.roa
File: h9qr3Hu1SSF1CDorT3J_rydIHcE.roa (raw, json)
Hash identifier: YaguBebHn05kQBbLpc1GFMcihInnAvKcvsp3JiZ/SDc=
Subject key identifier: 87:DA:AB:DC:7B:B5:49:21:75:08:3A:2B:4F:72:7F:AF:27:48:1D:C1
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01857079B497BABC1E53CE2857B969C7815E
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/h9qr3Hu1SSF1CDorT3J_rydIHcE.roa
Signing time: Mon 02 Jan 2023 03:15:02 +0000
ROA not before: Mon 02 Jan 2023 03:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35574
IP address blocks: 93.101.0.0/20 maxlen: 24
185.40.12.0/22 maxlen: 24
2a04:a9c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b4:97:ba:bc:1e:53:ce:28:57:b9:69:c7:81:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 2 03:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87daabdc7bb5492175083a2b4f727faf27481dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:13:13:f3:fc:37:44:28:a3:97:53:73:58:
22:d7:22:91:ab:b5:52:1d:a2:f6:64:7b:37:ef:d8:
9b:78:d8:68:2c:06:c3:f1:9b:3d:b2:88:ab:3f:71:
18:1d:01:5a:99:62:d7:b6:a6:af:dc:6f:de:c4:97:
f0:94:52:03:1a:e4:0b:2b:2a:b8:a4:89:3d:0a:f5:
5b:70:89:54:13:f5:74:cf:91:21:f7:8b:c3:2b:63:
e3:e6:f0:94:34:b7:c4:e8:8c:73:6e:0b:5d:2b:68:
8e:bc:2f:80:5c:83:85:e1:07:5d:ec:45:49:6d:39:
ff:54:a5:db:35:6d:63:05:8c:d3:fb:a0:76:d5:f7:
21:e9:8e:6b:ad:d9:b8:4a:c3:21:68:c6:d6:0f:72:
15:2b:2c:fa:00:c0:11:8c:66:ec:d2:63:6f:fa:5b:
e1:29:60:05:e0:1b:81:22:2b:4b:4d:c4:4a:46:e9:
c6:e5:62:39:44:c1:ad:c8:c3:34:df:8f:69:79:79:
cb:14:9e:b4:2a:29:35:36:8e:c2:a9:18:7a:d1:a7:
09:62:9b:04:76:67:49:9e:2a:53:d1:4e:18:84:95:
5d:86:94:74:ce:fd:06:66:00:fb:39:9c:d4:f2:96:
ed:90:43:8c:de:d1:3a:b3:c8:3b:49:2c:99:da:ed:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:AB:DC:7B:B5:49:21:75:08:3A:2B:4F:72:7F:AF:27:48:1D:C1
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/h9qr3Hu1SSF1CDorT3J_rydIHcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.0.0/20
185.40.12.0/22
IPv6:
2a04:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:d1:a3:91:9d:1d:ea:7e:45:88:7a:f9:1f:8a:8e:73:11:e1:
e2:e6:ab:d2:54:20:df:29:5f:b6:2f:01:0a:2a:4a:66:f9:1f:
c1:20:ec:5f:12:a3:73:83:c4:b0:61:cb:40:b0:88:62:58:ee:
a8:4b:77:77:53:4c:a4:02:b8:d7:50:cc:79:70:cb:86:e9:24:
95:4a:cb:a0:85:70:4d:91:9d:ef:e2:07:df:e5:4a:92:60:89:
14:fd:5e:3b:a2:bf:52:ef:5b:11:6f:f0:54:31:96:47:ac:72:
35:75:81:45:74:03:25:f6:74:08:5d:37:c3:39:a5:5e:59:1c:
e3:fe:79:f8:57:ed:44:56:8f:68:d6:84:73:5b:c3:f0:f4:43:
01:f8:db:3d:c4:45:90:61:05:48:a9:02:d3:8a:ec:50:c9:49:
1c:de:83:9a:1b:e3:cc:a8:18:ac:3b:71:06:0f:66:53:30:16:
b9:cb:18:68:d8:c9:99:07:f0:14:ef:96:7d:23:d4:ee:96:ff:
83:ed:38:0c:a4:1a:7f:9e:c8:65:8d:97:73:03:b0:ae:15:7a:
3e:3b:00:94:53:9f:a1:a0:60:65:6b:3d:5c:e4:eb:c8:98:ba:
dc:1d:6a:2b:32:e3:5a:aa:52:54:11:99:5e:65:cd:09:26:ed:
3a:4d:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:41 2024 by rpki-client on console-fra.rpki-client.org