Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/y7uz0_mufbqNeuWqiLpRf4f3SZo.roa
File: y7uz0_mufbqNeuWqiLpRf4f3SZo.roa (raw, json)
Hash identifier: RlvF0ofh+Xou/shVchLxIbMF4ETbbURSkwKJU2jLpow=
Subject key identifier: CB:BB:B3:D3:F9:AE:7D:BA:8D:7A:E5:AA:88:BA:51:7F:87:F7:49:9A
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0189885F7D57FF48ED5DFAE6E80DE2DF4CD0
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/y7uz0_mufbqNeuWqiLpRf4f3SZo.roa
Signing time: Mon 24 Jul 2023 14:48:26 +0000
ROA not before: Mon 24 Jul 2023 14:48:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56958
IP address blocks: 93.95.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:5f:7d:57:ff:48:ed:5d:fa:e6:e8:0d:e2:df:4c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jul 24 14:48:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbbbb3d3f9ae7dba8d7ae5aa88ba517f87f7499a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:78:b0:70:ce:88:3d:f1:a6:b7:01:be:27:
3e:db:2a:7e:8f:77:0b:0f:30:90:46:db:c3:92:f3:
c1:1a:10:6f:5b:ef:fb:b4:72:e9:d8:43:65:c3:87:
46:6b:00:2f:c7:32:49:50:c6:67:3d:59:8c:83:b8:
99:2b:d7:72:8b:ec:3e:f4:dc:9c:1c:4f:54:c7:31:
4d:4f:65:c5:54:eb:ee:43:bf:e3:cf:f5:62:b9:62:
1c:f6:10:f5:34:73:63:01:39:1f:fa:7c:e9:9f:25:
6e:52:d4:d0:07:3f:5a:13:ad:0c:19:38:10:a4:70:
a7:66:e8:79:a8:a5:67:5d:bb:8c:98:ac:21:18:5f:
24:e2:7d:26:20:11:29:25:71:b6:fc:b1:1d:dc:a2:
3a:f7:2a:b5:82:36:b7:b7:63:f0:3e:2c:15:f5:5d:
cb:f5:1d:db:81:4a:b6:5d:35:95:b2:5c:9a:68:43:
53:f9:38:3e:63:6f:43:7c:ea:35:6e:02:fe:b6:fc:
7e:c4:9b:4b:24:d2:20:f3:de:fb:f1:ea:8e:71:e1:
2c:b2:de:b0:13:e7:3e:fb:49:8b:aa:d7:78:52:48:
6d:4d:ad:3b:ed:b3:50:9e:bd:8f:9e:4e:e2:16:8c:
96:a0:60:9c:1e:1f:f9:8e:2a:9b:31:c3:dd:17:22:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:B3:D3:F9:AE:7D:BA:8D:7A:E5:AA:88:BA:51:7F:87:F7:49:9A
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/y7uz0_mufbqNeuWqiLpRf4f3SZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:57:ab:66:27:fb:ac:36:09:a7:1b:b6:a9:4d:bd:ae:32:07:
45:57:04:d8:b1:24:73:2a:78:77:82:61:7a:8c:7c:8a:6b:38:
df:09:fa:dc:12:62:00:60:fc:51:c4:ce:44:10:7e:47:1d:2b:
a9:8a:6a:9a:29:9c:cc:a1:04:2d:74:dc:c2:2e:d8:89:6d:08:
6f:cd:9b:71:c4:8e:8f:89:bc:dc:ea:17:b9:4c:d1:1d:f8:0d:
9c:42:ed:3f:de:23:2a:ca:61:26:cd:4e:36:8c:21:0c:e2:37:
ca:aa:02:8e:ec:6b:7f:03:31:36:f7:91:b8:64:66:7b:ac:6a:
79:9d:7a:47:35:c0:3d:07:90:c9:6e:d7:64:46:fd:5f:55:4b:
19:d1:ef:81:38:52:7f:d5:b8:cb:ec:d3:db:86:87:de:9a:54:
ab:9b:ac:f0:47:43:90:86:8e:ef:b9:be:5e:bd:e3:8a:ce:de:
59:a0:62:94:99:c6:ba:0f:70:d6:92:25:eb:ce:41:58:8f:d9:
16:2f:bc:cb:f3:d0:df:02:6f:1e:23:a5:0f:af:df:64:f9:42:
b3:e7:d1:25:17:92:48:a0:c7:b2:5c:49:3d:d2:f8:bf:c8:57:
06:3d:40:b9:e1:f5:70:e1:66:1b:c2:74:7a:a1:1e:92:7e:93:
c6:e1:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:16 2024 by rpki-client on console-fra.rpki-client.org