Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/onDSxqdT3NtM9FDeKhYeaWObJtU.roa
File: onDSxqdT3NtM9FDeKhYeaWObJtU.roa (raw, json)
Hash identifier: qjO02yANV21pghLQ+rhTGL6MxvHmNZjkOUbaOOu0xnw=
Subject key identifier: A2:70:D2:C6:A7:53:DC:DB:4C:F4:50:DE:2A:16:1E:69:63:9B:26:D5
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01856FA6F655A20420289AA84C2914D152F3
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/onDSxqdT3NtM9FDeKhYeaWObJtU.roa
Signing time: Sun 01 Jan 2023 23:24:50 +0000
ROA not before: Sun 01 Jan 2023 23:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 93.157.188.0/24 maxlen: 24
93.157.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f6:55:a2:04:20:28:9a:a8:4c:29:14:d1:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 23:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a270d2c6a753dcdb4cf450de2a161e69639b26d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:fe:82:9a:85:bd:df:26:80:ad:aa:44:5a:
e3:1d:3d:81:8f:51:0e:9e:73:9d:6c:37:14:89:d2:
7b:2f:eb:b2:d1:6a:60:38:44:ab:75:ea:37:49:81:
30:96:09:b7:0c:49:ca:85:72:21:46:cf:68:d6:68:
0a:3f:a2:8c:8c:8c:e0:c4:36:73:ae:72:56:71:53:
b1:ac:93:a3:08:4e:23:50:dc:e5:ee:89:db:9c:5f:
14:0b:c3:56:e4:c6:e3:dd:c9:92:c2:7c:f9:9a:e0:
41:45:a0:63:b1:d7:01:db:45:00:f7:2e:8c:f5:00:
b7:62:b3:15:d7:a1:1b:6b:fb:7a:40:5d:e3:03:9d:
b6:b1:de:af:a6:54:db:55:d0:ec:c0:7a:e2:34:ca:
a4:5b:64:e0:02:3e:8e:11:08:6c:ba:a2:65:a1:26:
42:31:70:71:6b:40:ba:69:7d:7c:85:e1:be:6f:e3:
c0:88:3b:0f:35:a9:58:68:11:1b:55:09:f6:d4:d6:
2b:47:af:49:79:0f:3d:d8:4d:79:66:14:e5:00:f2:
ad:8e:48:f8:91:a7:74:f1:81:f2:bd:1b:02:1e:10:
5f:cc:73:23:c0:6b:24:22:f2:d8:d0:97:b0:ec:59:
c5:ea:5a:a5:dd:56:f3:94:44:55:1f:f2:c2:0d:d5:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:70:D2:C6:A7:53:DC:DB:4C:F4:50:DE:2A:16:1E:69:63:9B:26:D5
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/onDSxqdT3NtM9FDeKhYeaWObJtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.188.0/24
93.157.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:33:25:e9:e2:8f:62:b5:a4:cf:35:fb:6e:b1:81:4d:8e:8a:
9a:d4:f8:14:ff:2c:34:ba:21:10:4a:12:88:54:30:ac:ed:83:
08:a2:a2:4e:cd:c0:3d:31:65:e1:9f:c4:17:d4:9a:39:f4:1e:
3c:15:d6:0e:c7:e2:aa:99:01:dc:ff:3d:6b:77:a9:a2:c6:eb:
4e:70:9b:51:b2:0d:70:0b:d4:c8:d3:a1:fd:ec:2b:09:16:5a:
e6:e4:e7:25:2e:7f:c4:ff:65:c0:4d:18:53:2a:4b:d1:6b:b2:
4b:5b:6e:92:ab:af:ec:7a:a9:b3:10:11:b6:f1:ff:86:70:56:
41:30:16:30:9d:8f:0f:9d:b4:4a:dd:f8:6b:61:b8:2c:ba:3d:
f4:dd:82:08:18:00:8b:43:57:ae:0f:80:15:c0:22:05:15:db:
2d:01:5a:51:da:f8:01:58:a0:aa:0f:a4:1b:c4:81:fc:fa:6f:
ca:f0:99:6d:76:e9:4a:d7:04:2e:3d:cb:5e:8b:ca:f9:78:fa:
75:45:40:0a:f8:c6:c1:bc:2e:9d:67:15:83:c2:0d:46:71:b9:
7c:40:1b:99:b4:c0:1b:5d:d7:f3:fc:28:5e:8a:39:8b:e6:fd:
0c:a9:08:f9:6b:89:d6:cb:f8:4c:b2:27:6c:08:f4:86:de:df:
05:29:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org