Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cn7DSANQ2NLBmcfrnzfhl7Ajk3Q.roa
File: cn7DSANQ2NLBmcfrnzfhl7Ajk3Q.roa (raw, json)
Hash identifier: 75d+AFFisgdiTQ4pJxJMyBZKTm9wlEKcXdnueL7NMqo=
Subject key identifier: 72:7E:C3:48:03:50:D8:D2:C1:99:C7:EB:9F:37:E1:97:B0:23:93:74
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01869957FD3B4EED8D2C4C5A98791B9B3BF8
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cn7DSANQ2NLBmcfrnzfhl7Ajk3Q.roa
Signing time: Tue 28 Feb 2023 18:45:25 +0000
ROA not before: Tue 28 Feb 2023 18:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 93.120.24.0/24 maxlen: 24
93.120.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 07:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:57:fd:3b:4e:ed:8d:2c:4c:5a:98:79:1b:9b:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Feb 28 18:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=727ec3480350d8d2c199c7eb9f37e197b0239374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:98:41:da:f3:7a:89:c0:8e:de:0f:47:90:
fe:52:20:c2:b1:3f:02:6a:b0:0d:98:aa:71:52:b6:
8d:f1:6a:04:55:da:8d:5b:71:47:13:66:ed:b3:94:
67:e3:4a:25:9a:12:90:16:86:f0:6d:34:d4:70:79:
b3:6d:63:9f:3c:7a:e1:35:ad:f0:bd:8a:3e:e9:b0:
17:d3:c0:b2:6e:0e:b3:98:7c:21:fa:eb:ab:1f:6e:
4e:d4:f7:7b:61:e8:7a:5a:c9:50:95:c9:1d:53:2c:
5b:51:3f:64:5c:60:f0:0e:be:c9:76:9f:97:f5:b2:
d7:f4:ad:b2:47:b9:ef:3c:14:f3:d5:9d:fc:f6:ee:
23:d4:74:d2:e0:bd:de:7b:65:51:71:3c:22:91:74:
2e:9d:b0:b7:40:0e:20:25:86:24:25:ab:d7:9a:39:
c8:f0:9b:fb:6a:7d:b4:a1:31:2f:16:0a:c2:8f:2a:
a5:f4:94:5a:f8:8e:02:b5:e5:62:e5:51:8a:f1:61:
23:78:05:00:cf:a9:51:4a:77:48:69:a1:11:37:99:
ae:85:cf:ea:62:3b:06:c4:aa:78:56:41:d8:d4:05:
e2:58:ee:a2:82:45:8c:fe:7b:be:2d:b4:61:f8:1c:
f4:29:30:f4:c2:bc:14:40:8b:8e:55:ff:ce:e1:5d:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:C3:48:03:50:D8:D2:C1:99:C7:EB:9F:37:E1:97:B0:23:93:74
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cn7DSANQ2NLBmcfrnzfhl7Ajk3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.24.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:a2:24:5c:6d:0d:7f:19:a2:66:72:90:e9:d7:4e:b9:0d:bb:
fb:32:92:48:4c:ae:1e:bf:2f:2a:78:62:5e:15:19:d3:42:ee:
0e:cf:9c:4a:84:c2:5a:56:e2:00:93:d6:51:99:23:f2:18:00:
95:9a:81:16:8e:40:00:99:c3:7b:65:f6:92:37:fb:60:eb:b2:
ea:d4:4a:26:98:98:f8:fe:3e:08:ad:bb:fe:e2:4f:d5:41:07:
a7:83:d5:be:1b:76:c7:67:0b:f5:28:d5:56:75:bd:a9:23:df:
09:43:8d:48:d1:1c:4c:b3:44:91:be:8b:8a:ce:9c:cc:f5:a5:
40:15:f5:c4:ec:83:33:70:f6:7b:26:e0:83:0a:33:02:88:e0:
c2:06:4c:46:f6:7c:4c:e4:7e:a1:8c:5a:68:ec:a1:96:e6:66:
ff:f0:4d:db:f4:df:9a:d7:68:00:59:59:d6:af:9b:f4:54:44:
8e:64:59:ef:f4:02:a2:be:d4:50:f3:d3:65:88:31:d6:d5:24:
99:d5:b2:23:2c:84:fa:3c:55:22:85:59:6b:a7:1d:da:0e:23:
8c:7c:98:f4:19:cd:22:38:d6:1f:e7:4d:b8:52:c4:6e:cf:1a:
0a:f8:73:39:af:36:3d:a1:ef:40:73:0a:5d:ee:fb:87:b5:9c:
43:17:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org