Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Li0stOSb9UzvQVbKWPnZRqEBU.roa
File: f_Li0stOSb9UzvQVbKWPnZRqEBU.roa (raw, json)
Hash identifier: 7aCd0MX09WoDSnivQwvP5dpG9GBe8b448bwtnUeOxgs=
Subject key identifier: 7F:F2:E2:D2:CB:4E:49:BF:54:CE:F4:15:6C:A5:8F:9D:94:6A:10:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01857328413DF9FAA2D59933644AA64C97F4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Li0stOSb9UzvQVbKWPnZRqEBU.roa
Signing time: Mon 02 Jan 2023 15:44:55 +0000
ROA not before: Mon 02 Jan 2023 15:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59580
IP address blocks: 85.93.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:41:3d:f9:fa:a2:d5:99:33:64:4a:a6:4c:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff2e2d2cb4e49bf54cef4156ca58f9d946a1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:88:6f:82:bf:f8:b4:94:16:08:72:dc:d1:
79:61:cb:16:8c:a4:5e:e2:b0:8d:19:25:90:17:ca:
f3:b8:53:9c:99:75:fa:08:9d:21:9f:35:51:40:bc:
ee:c0:87:20:d2:e3:90:19:05:ef:48:87:26:bf:f3:
1e:aa:72:48:77:92:42:c0:dc:6a:e5:24:75:79:18:
28:2a:fa:43:34:77:0d:89:42:07:08:7f:77:ca:be:
91:05:ea:bb:79:cb:a2:06:c5:6a:05:75:6e:66:e7:
40:ae:61:04:74:19:f1:1f:a3:43:47:e4:50:cd:b4:
20:93:fe:6c:68:8d:5e:2a:01:f3:c9:71:cd:43:0d:
d3:df:25:df:5e:2b:e1:36:7a:45:f8:af:e1:cb:e7:
64:af:e3:d2:f2:df:5a:a4:98:b7:dd:78:40:f6:d9:
9a:e8:a3:f1:2a:13:26:b6:f1:89:76:7a:62:61:83:
9c:c6:2b:fe:f4:0a:34:82:c4:04:f9:2c:43:01:7b:
1b:97:92:f2:05:ac:9a:f5:93:5b:95:58:5e:4d:f7:
dd:b4:ca:60:4a:17:9a:8f:80:08:2d:9a:16:1e:7d:
4a:1b:ca:8c:c3:9a:92:24:83:74:40:dc:f9:11:0e:
9a:8a:5f:44:87:5b:f4:8c:67:2e:87:cc:7e:7d:47:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:E2:D2:CB:4E:49:BF:54:CE:F4:15:6C:A5:8F:9D:94:6A:10:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Li0stOSb9UzvQVbKWPnZRqEBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.2.0/24
Signature Algorithm: sha256WithRSAEncryption
37:40:82:09:30:39:6d:8f:d8:44:a6:3f:7b:58:12:6c:b1:f1:
75:7e:fe:6f:e9:38:a6:57:2d:74:34:d7:8c:ae:27:b2:6d:4b:
b7:3b:39:5d:d3:d7:e2:8d:88:39:00:32:08:b3:b3:8a:2a:8f:
8f:b4:fa:93:48:7e:ec:09:cb:eb:9e:1f:d8:71:04:d3:29:96:
de:38:37:8c:04:f9:0f:b2:ea:a5:25:e8:34:ba:45:99:42:c2:
98:0d:0b:ca:17:8d:4a:a7:3e:22:50:37:48:29:5b:b0:1d:70:
62:2f:43:52:c8:28:b2:c4:98:42:c5:1c:d9:3b:99:36:cd:f5:
d3:ad:a0:bf:ce:ae:ce:6a:c4:78:76:9a:33:e3:ea:ff:b1:24:
63:e7:6e:c6:96:70:8e:14:89:f3:fc:08:99:52:8f:1b:57:18:
d5:19:8e:61:02:60:c9:a5:e5:12:46:5e:b7:f8:20:9b:ba:6e:
8d:79:65:15:c4:0c:7e:f1:72:21:bd:6f:7d:cc:2b:bc:45:be:
17:5b:b5:35:1f:35:5c:0a:73:89:e9:fc:9c:e2:59:f8:27:ff:
0b:bd:a8:65:2e:16:2a:0e:4c:e5:0f:e0:50:64:e1:5d:e9:a6:
05:93:a3:52:86:de:4c:6f:06:8a:0e:ca:b1:66:68:f8:2e:4b:
de:dd:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org