Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/azW_PCFfo84zfMzjSlKF-32q6xs.roa
File: azW_PCFfo84zfMzjSlKF-32q6xs.roa (raw, json)
Hash identifier: hEzCqCJKWHnqEwFGIT9Lw0iRu1Yr/tF/lAyNpAvHFbM=
Subject key identifier: 6B:35:BF:3C:21:5F:A3:CE:33:7C:CC:E3:4A:52:85:FB:7D:AA:EB:1B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01856E1423AE486BDB30A60ADBC447722F14
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/azW_PCFfo84zfMzjSlKF-32q6xs.roa
Signing time: Sun 01 Jan 2023 16:04:51 +0000
ROA not before: Sun 01 Jan 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 93.190.11.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:23:ae:48:6b:db:30:a6:0a:db:c4:47:72:2f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b35bf3c215fa3ce337ccce34a5285fb7daaeb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:6f:84:4a:17:a8:af:e8:65:1d:00:cd:88:
d2:d9:eb:a3:32:78:ad:3e:43:20:3f:c2:3d:9b:65:
95:f2:e5:c7:aa:28:67:18:7a:76:c2:93:91:0a:77:
9a:ba:e5:3e:f0:ac:76:60:37:b9:7c:15:8f:67:81:
98:4d:be:cd:53:0b:77:bf:9c:e4:b2:da:94:43:d1:
11:e6:7e:9d:a2:1a:61:bd:df:ab:9b:37:a9:c4:1c:
03:d4:d2:44:fa:22:45:23:4a:6f:af:0f:c4:cc:64:
84:2a:f4:c7:2c:dd:a8:31:b3:d1:d3:ea:be:39:6e:
00:23:27:e9:b0:0d:c0:02:7f:ba:6c:a6:2b:d9:53:
2a:97:6c:96:cd:4a:6e:3f:64:38:6d:e5:b6:39:e3:
60:6f:ba:59:ea:0b:af:b4:15:01:56:02:bd:84:02:
b0:84:10:e0:b0:f7:4c:07:bd:5d:70:f4:69:37:88:
7e:59:1c:d0:35:f6:68:74:3c:ac:ef:75:2b:35:cb:
37:b0:79:38:c0:e8:77:5c:12:d6:55:d2:0f:dd:05:
63:89:17:f9:e7:40:88:df:3c:fc:03:2d:15:34:d9:
5b:b4:9c:bb:75:7f:f2:3b:d2:a0:40:f1:2c:23:7c:
7d:80:c2:9f:42:5e:71:19:f7:a3:83:f0:a2:75:b0:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:BF:3C:21:5F:A3:CE:33:7C:CC:E3:4A:52:85:FB:7D:AA:EB:1B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/azW_PCFfo84zfMzjSlKF-32q6xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.9.0/24
93.190.11.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0e:e4:32:73:fd:e9:a3:fd:3f:6b:65:cb:f4:5d:ee:90:53:
b3:93:92:13:04:f0:27:46:0e:1e:ca:5b:2d:ca:9e:35:41:55:
a8:91:43:56:a6:05:6c:eb:4d:71:71:15:34:07:3a:5b:fe:ab:
2e:d5:3a:95:7d:27:bf:c3:0d:7d:e7:32:71:2e:97:3a:a5:24:
a4:4a:34:33:0e:93:be:ca:fa:24:6d:01:3a:aa:d5:49:70:0c:
eb:c7:11:24:69:96:0b:c2:a9:46:b6:1d:6a:65:05:81:8e:12:
e6:38:25:27:1f:30:77:3c:ab:e3:8d:43:10:56:77:cc:fc:2c:
e6:e9:db:52:ef:26:98:75:f9:74:a9:50:d9:04:0e:c4:fa:5e:
82:f7:84:37:30:47:4d:f7:6e:8c:e8:27:89:80:aa:ea:8e:31:
bb:ad:9f:96:b1:db:3d:02:2d:d5:b3:43:ff:e5:22:21:5a:e5:
93:50:69:99:21:0a:91:79:3b:ee:dc:82:11:11:24:28:c7:11:
cb:3e:d6:a0:35:39:07:fb:f9:ac:6b:ca:b8:9e:99:eb:38:98:
86:7d:70:30:9d:f7:26:63:9e:56:dd:d7:43:97:20:7b:39:e0:
11:9f:8f:4d:f0:9f:fd:dd:dc:5e:61:25:2d:fd:8e:e5:29:23:
3c:1c:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org