Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/e7bEvjdC27wK-Ql8POtbPX9vD1w.roa
File: e7bEvjdC27wK-Ql8POtbPX9vD1w.roa (raw, json)
Hash identifier: aN4hEJWlkBfAnabk7Q8TuwjAayQ+lJvUP10IHqUZ3Mk=
Subject key identifier: 7B:B6:C4:BE:37:42:DB:BC:0A:F9:09:7C:3C:EB:5B:3D:7F:6F:0F:5C
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01869BFD7C427EF59405D4101C6AE827E76D
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/e7bEvjdC27wK-Ql8POtbPX9vD1w.roa
Signing time: Wed 01 Mar 2023 07:05:26 +0000
ROA not before: Wed 01 Mar 2023 07:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 93.120.24.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 13:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:fd:7c:42:7e:f5:94:05:d4:10:1c:6a:e8:27:e7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 1 07:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bb6c4be3742dbbc0af9097c3ceb5b3d7f6f0f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:d4:77:ca:92:bf:48:4d:0a:6a:cc:f8:dc:
76:6d:f3:aa:51:2a:5c:6f:da:9c:a5:c7:06:99:49:
e6:96:fa:43:93:b8:38:56:58:87:6a:3d:ab:bb:2b:
90:27:6d:d6:7b:b2:07:c6:6e:bb:92:e9:f5:cf:42:
2d:6d:07:bd:20:29:fd:0d:cd:9f:7a:3e:f5:94:65:
5d:82:62:1d:7b:c1:ce:06:c2:0e:5a:d8:77:9b:1d:
66:d9:9f:cc:70:54:7b:9e:ea:eb:33:f4:82:4c:d9:
84:8b:d4:06:b1:fb:fe:f4:a5:30:6b:44:ca:e7:7a:
53:53:88:53:c0:b0:da:5b:98:37:fc:fd:44:09:34:
0b:12:42:77:63:dc:82:36:c8:e0:b5:e4:c2:b3:24:
5d:ae:73:e6:4c:61:39:52:df:68:ce:19:fe:23:14:
67:71:38:8c:94:7c:e5:aa:b5:de:d3:9c:91:cf:69:
cc:6d:79:a5:6e:e9:57:c0:c5:56:dc:0c:09:87:9d:
26:62:77:23:95:a5:94:3e:d7:7b:a3:4a:5d:ba:e6:
de:c4:a1:25:2d:83:61:6a:93:a0:33:33:27:a6:d6:
32:ab:5f:d5:cf:6d:c4:b9:c3:e3:54:0e:ed:1e:d3:
73:3e:21:96:8f:07:7b:25:53:b5:29:06:a6:d2:d2:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:C4:BE:37:42:DB:BC:0A:F9:09:7C:3C:EB:5B:3D:7F:6F:0F:5C
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/e7bEvjdC27wK-Ql8POtbPX9vD1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.24.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a8:7d:1f:06:0f:0a:e9:18:e9:be:1b:b3:90:f2:47:71:4f:
2f:6f:65:ea:1b:19:b9:cb:ac:8a:df:f3:e7:45:be:a5:23:22:
93:7a:b4:7a:8f:7e:04:f9:b5:92:c0:0d:f3:50:b1:6b:c3:69:
65:af:a9:b3:f9:2b:d7:c4:e8:c8:77:ba:9d:79:69:71:f9:8e:
cc:e9:48:48:98:67:cd:7c:31:5a:08:ef:d2:ee:cb:aa:8b:58:
5f:53:55:6c:85:93:13:bb:5b:79:99:3d:f0:de:d6:7a:1f:71:
ea:16:47:9c:9f:e0:c7:b1:98:7e:31:88:e7:d2:d9:65:ca:3b:
55:4b:7d:35:9f:57:b2:40:45:b9:52:e8:4b:87:41:7c:88:0d:
2f:93:1a:eb:d0:25:ba:63:43:a6:bf:20:79:14:6d:c4:05:e5:
15:49:55:e8:0f:72:4b:b9:d5:f8:f1:b5:73:74:c1:c2:5e:bc:
4e:b5:d7:1b:a3:af:d3:80:0c:f4:37:8e:b4:6c:90:08:8d:07:
da:b7:2d:30:a2:52:74:22:9d:cc:41:16:98:b4:e3:63:9d:29:
30:c5:23:5c:17:0c:3d:be:ce:03:b1:8f:7a:14:53:67:66:43:
08:e7:8d:10:27:79:56:f8:06:ef:ee:02:b5:e6:9d:db:db:de:
90:c0:17:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYab/XxCfvWUBdQQHGroJ+dtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwMzAxMDcwNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmI2YzRiZTM3NDJkYmJjMGFmOTA5N2MzY2ViNWIzZDdmNmYwZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+DUd8qSv0hNCmrM+Nx2bfOqUSpc
b9qcpccGmUnmlvpDk7g4VliHaj2ruyuQJ23We7IHxm67kun1z0ItbQe9ICn9Dc2f
ej71lGVdgmIde8HOBsIOWth3mx1m2Z/McFR7nurrM/SCTNmEi9QGsfv+9KUwa0TK
53pTU4hTwLDaW5g3/P1ECTQLEkJ3Y9yCNsjgteTCsyRdrnPmTGE5Ut9ozhn+IxRn
cTiMlHzlqrXe05yRz2nMbXmlbulXwMVW3AwJh50mYncjlaWUPtd7o0pduubexKEl
LYNhapOgMzMnptYyq1/Vz23EucPjVA7tHtNzPiGWjwd7JVO1KQam0tIGzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHu2xL43Qtu8CvkJfDzrWz1/bw9cMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvZTdiRXZqZEMyN3dLLVFsOFBPdGJQWDl2RDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXXgYMA0G
CSqGSIb3DQEBCwUAA4IBAQB3qH0fBg8K6RjpvhuzkPJHcU8vb2XqGxm5y6yK3/Pn
Rb6lIyKTerR6j34E+bWSwA3zULFrw2llr6mz+SvXxOjId7qdeWlx+Y7M6UhImGfN
fDFaCO/S7suqi1hfU1VshZMTu1t5mT3w3tZ6H3HqFkecn+DHsZh+MYjn0tllyjtV
S301n1eyQEW5UuhLh0F8iA0vkxrr0CW6Y0OmvyB5FG3EBeUVSVXoD3JLudX48bVz
dMHCXrxOtdcbo6/TgAz0N460bJAIjQfaty0wolJ0Ip3MQRaYtONjnSkwxSNcFww9
vs4DsY96FFNnZkMI540QJ3lW+Abv7gK15p3b296QwBcS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org