Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/eYVx68OeKJ_Rtn3vvKMWihpeND4.roa
File: eYVx68OeKJ_Rtn3vvKMWihpeND4.roa (raw, json)
Hash identifier: 8Met/njPzbre8C0nTB973IBkIpYDLD6PD3x420y/oc8=
Subject key identifier: 79:85:71:EB:C3:9E:28:9F:D1:B6:7D:EF:BC:A3:16:8A:1A:5E:34:3E
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 019097D320CF90D40F8F2C2F8AAD75BC6DE8
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/eYVx68OeKJ_Rtn3vvKMWihpeND4.roa
Signing time: Tue 09 Jul 2024 14:08:34 +0000
ROA not before: Tue 09 Jul 2024 14:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50091
IP address blocks: 93.115.6.0/24 maxlen: 24
93.115.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 11:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:d3:20:cf:90:d4:0f:8f:2c:2f:8a:ad:75:bc:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Jul 9 14:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798571ebc39e289fd1b67defbca3168a1a5e343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:6d:99:8b:45:74:ee:3c:56:04:8e:3d:3d:
56:d1:77:7c:63:af:2a:bd:47:07:c5:69:45:07:b1:
0f:1c:ba:87:d7:aa:b9:91:d5:87:b2:77:0a:c8:25:
6e:c9:22:10:90:1a:6a:86:81:70:23:59:19:cc:d8:
46:c3:00:ce:e9:e6:7c:ce:e7:5f:e5:1e:09:1c:39:
c1:17:41:e9:2f:e5:2b:cb:85:33:0e:5a:b3:de:eb:
ae:d4:77:c5:60:0e:c2:63:67:2e:e9:8f:22:03:73:
58:19:b0:6b:61:e2:a6:2d:a6:84:2c:39:7f:dc:30:
a9:54:bf:89:4e:2e:fc:a0:2f:59:69:57:d1:a4:67:
f2:c8:87:67:26:1b:de:69:a0:78:1c:f5:53:9c:64:
16:f8:8d:44:fa:b2:c6:9c:b2:2a:2c:5e:0c:d4:8f:
0b:99:11:f4:74:18:da:5c:b7:bf:c7:b4:68:e3:75:
16:64:dc:cf:18:52:e2:1a:6e:0d:f0:6e:68:36:39:
97:41:6b:e5:82:10:46:e3:5f:9f:f3:27:d1:90:e0:
f9:d9:10:2a:3a:4c:62:32:bd:14:85:a5:28:ff:51:
64:fb:b7:47:84:90:c7:78:aa:3a:f0:07:c2:a7:41:
71:82:eb:29:11:65:2d:c3:66:c9:dd:e0:dd:6e:6d:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:85:71:EB:C3:9E:28:9F:D1:B6:7D:EF:BC:A3:16:8A:1A:5E:34:3E
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/eYVx68OeKJ_Rtn3vvKMWihpeND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.6.0/24
93.115.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:80:34:9e:ad:0b:45:f8:42:69:6f:1d:8b:01:e9:b7:99:
9a:60:81:4e:ba:87:15:f1:9a:d0:a0:e1:aa:67:e4:7e:6b:e3:
a4:f7:4b:54:52:a3:07:60:da:47:fb:f1:4c:ec:25:39:60:33:
d5:78:82:2e:7d:a9:9f:7a:51:5d:68:ad:80:ba:78:fb:60:30:
41:13:7a:d8:e7:49:78:ad:d7:4d:1a:09:24:7f:18:1f:88:9f:
99:a4:69:c5:b6:06:16:bd:c7:82:d5:a9:b0:63:2c:7d:3a:df:
84:a2:e6:48:7e:d6:30:62:c7:a8:ad:0f:7d:d9:ff:68:87:d8:
fe:57:36:3a:32:2f:79:c8:89:78:d7:ef:3e:fe:56:6d:e6:4e:
6d:e0:ee:a2:5e:bf:69:78:36:b4:66:fd:86:70:30:97:38:2d:
87:2f:e1:9b:31:28:05:3b:63:73:2e:40:e9:4f:41:94:0b:32:
2e:55:6d:a8:b2:4e:e9:e7:39:a8:e2:88:54:88:de:99:60:fe:
76:91:5b:a8:f2:46:01:34:c1:86:79:56:74:25:13:6d:84:72:
6b:b5:9d:ff:92:83:61:82:17:c5:dc:39:0d:f8:62:25:85:e5:
e7:fa:6a:93:55:7a:ca:03:f0:36:54:7d:cc:5e:c0:1e:3c:ef:
2b:78:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:16 2024 by rpki-client on console-ams.rpki-client.org