Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/DjMiVWYeUI7herYGIoCIIKl-K-E.roa
File: DjMiVWYeUI7herYGIoCIIKl-K-E.roa (raw, json)
Hash identifier: 1rZncsJn2ySpBae0P3BE6kbqJ8oX2mSN6BROdMNyPss=
Subject key identifier: 0E:33:22:55:66:1E:50:8E:E1:7A:B6:06:22:80:88:20:A9:7E:2B:E1
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 018573280EDF363BFD247A91F99EA1EA240A
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/DjMiVWYeUI7herYGIoCIIKl-K-E.roa
Signing time: Mon 02 Jan 2023 15:44:43 +0000
ROA not before: Mon 02 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213121
IP address blocks: 31.7.92.0/22 maxlen: 22
93.157.184.0/24 maxlen: 24
2a0a:cf80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:0e:df:36:3b:fd:24:7a:91:f9:9e:a1:ea:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Jan 2 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e332255661e508ee17ab60622808820a97e2be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:9d:69:9e:cc:87:22:c4:78:04:2c:df:f8:
8f:11:6a:89:53:8b:29:2d:10:53:56:f6:06:59:29:
b7:37:98:ab:0a:78:09:be:28:99:ef:2f:32:98:d7:
c5:ae:fd:cd:a6:28:4e:5b:37:39:26:ef:9b:0c:32:
d5:37:1a:41:e8:aa:b4:09:8b:3a:00:a8:38:96:ca:
d4:b8:57:b7:4b:0b:e3:f6:b1:c6:a1:bc:92:a2:28:
82:01:d6:7a:8c:5e:d8:18:03:12:5a:09:3b:d3:f2:
e9:c8:b3:85:f4:ed:ef:ac:c3:f0:67:72:02:d8:08:
69:f5:c8:19:70:76:29:8a:f3:7e:6f:2c:68:50:41:
2c:be:41:8a:b1:c2:f1:01:bc:38:0d:0f:9e:b1:bc:
3b:4a:41:ac:25:75:bb:8d:3c:c4:07:dd:6a:8f:8b:
38:e5:32:ca:48:60:90:57:02:36:d3:21:f5:b5:7c:
0e:98:45:58:ed:4c:02:8f:07:40:e9:45:5f:47:9c:
71:4c:77:b5:32:86:9d:9d:41:06:15:f7:81:54:7e:
cd:92:26:92:ae:6d:68:46:d2:27:0e:c4:63:a7:b9:
00:b6:b0:a3:be:76:29:fc:d2:02:64:81:f4:2a:36:
4b:47:56:64:a3:2d:97:04:75:a6:14:85:83:95:02:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:22:55:66:1E:50:8E:E1:7A:B6:06:22:80:88:20:A9:7E:2B:E1
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/DjMiVWYeUI7herYGIoCIIKl-K-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.92.0/22
93.157.184.0/24
IPv6:
2a0a:cf80::/29
Signature Algorithm: sha256WithRSAEncryption
90:5c:43:28:83:17:65:e4:dd:6b:9a:1c:20:b7:0f:30:a2:81:
fd:ad:83:64:bc:53:f4:e6:8a:06:61:ae:8f:19:3c:83:a2:53:
c2:12:82:36:0e:82:5d:45:4b:c3:97:e4:c7:55:a0:cf:5a:d1:
63:58:8c:e1:f9:9b:da:d5:b8:d9:4a:c7:ae:fa:e1:0c:5e:ee:
30:f8:86:a3:d7:36:a8:71:bf:33:fb:0f:66:a1:88:56:55:7f:
e2:cb:f2:00:c2:7d:7e:a9:3f:fc:b7:00:37:2f:41:18:52:4d:
a0:27:82:b3:97:67:ed:3c:c8:99:b2:59:a7:4b:91:c3:78:42:
90:43:3e:63:5d:7f:8e:1a:a1:d8:56:48:bf:f8:f6:35:75:69:
78:5d:8d:1b:a1:ac:3b:e4:78:cb:46:69:f0:5e:dd:2d:0b:d3:
7f:e7:e8:76:b9:d3:8c:75:0e:7f:05:e3:78:40:d4:8e:34:38:
43:dd:12:5c:7b:d9:ea:d0:c5:32:6b:0c:35:b1:fa:aa:81:91:
09:7b:e2:29:0f:f9:d3:25:8e:7b:9b:d8:49:5e:50:51:5e:e8:
00:c3:42:ab:6f:93:a7:e7:e3:1d:80:31:79:86:be:fa:c8:65:
41:36:cb:35:2e:bb:18:79:f1:ae:da:9e:8c:fa:1f:5d:0d:c9:
82:4c:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org