Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eueAavkkLQpPBy1kdpJ5PZ48huk.roa
File: eueAavkkLQpPBy1kdpJ5PZ48huk.roa (raw, json)
Hash identifier: 6dxJnc50+vJ1AywtP0Ik6c8fR487x4WsF9Jt3F6IWNQ=
Subject key identifier: 7A:E7:80:6A:F9:24:2D:0A:4F:07:2D:64:76:92:79:3D:9E:3C:86:E9
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCA77D586DC68C3115CCD8E94796E1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eueAavkkLQpPBy1kdpJ5PZ48huk.roa
Signing time: Sun 01 Jan 2023 05:45:01 +0000
ROA not before: Sun 01 Jan 2023 05:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 93.120.100.0/22 maxlen: 24
93.120.104.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a7:7d:58:6d:c6:8c:31:15:cc:d8:e9:47:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ae7806af9242d0a4f072d647692793d9e3c86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:53:cb:75:fd:cc:79:b0:f4:b1:71:5a:cb:
66:6c:ec:ba:98:32:f9:e4:b2:bc:f4:27:83:2d:79:
cf:fb:56:66:f6:59:4d:14:72:db:f6:1c:e2:99:17:
e3:76:9f:f6:a6:fc:67:e5:a3:5f:2f:23:a2:27:fb:
26:37:e3:95:01:5b:8a:5d:14:0a:dc:be:c3:fe:48:
0d:38:b5:31:59:66:d8:cb:b9:4e:7e:cc:87:11:dc:
eb:34:ce:80:74:33:da:36:02:e3:ad:87:c2:81:24:
a9:02:bd:45:b1:2c:d8:4f:f3:65:01:d0:21:26:45:
aa:5e:90:9e:98:44:bc:db:3f:ee:b9:12:83:bd:81:
27:c8:a7:45:53:bf:75:3a:11:5a:dc:05:e9:55:58:
0f:24:a5:dd:de:b2:36:9e:ec:01:a9:e9:3a:50:2d:
21:90:24:01:84:c1:50:7f:87:82:1a:be:99:17:9b:
66:62:6b:3a:4d:38:da:d0:1f:a0:2f:71:ca:97:84:
34:e1:b5:ef:ef:ea:e0:bd:e9:ce:28:10:7b:3d:e1:
cc:4d:47:71:d2:eb:ea:89:00:a5:6c:6b:49:50:e9:
be:f4:5b:20:d7:20:14:7c:b9:b3:d4:35:58:28:fc:
3a:8f:f1:1c:0c:77:77:3e:40:5d:d7:7f:a4:a2:97:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:80:6A:F9:24:2D:0A:4F:07:2D:64:76:92:79:3D:9E:3C:86:E9
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eueAavkkLQpPBy1kdpJ5PZ48huk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.100.0-93.120.111.255
Signature Algorithm: sha256WithRSAEncryption
47:71:93:8a:3f:8c:89:2b:ae:80:4c:88:e8:3d:52:91:84:30:
86:e9:2e:69:3d:a4:9b:b5:3f:0b:c3:b0:e1:32:43:42:34:4d:
f5:67:f5:82:1e:f7:ed:59:e5:47:74:8f:5d:27:76:23:2c:04:
50:4b:2b:fd:1e:e6:ab:a8:5e:41:a4:64:f9:c9:54:ec:2f:fd:
4d:78:74:6f:87:ea:78:86:c0:bc:83:af:ee:cd:29:0b:ad:f3:
63:58:fa:5c:28:6d:34:20:e6:41:34:7f:43:81:ba:7f:22:96:
35:68:68:0e:60:77:e1:5b:e7:41:35:db:ea:ff:95:3f:70:1c:
34:6c:ab:63:ff:73:1f:b2:90:f4:60:a1:9d:03:06:d2:b7:37:
45:1c:f4:76:36:96:e7:b2:1c:0c:0f:84:c0:57:e6:41:ac:8d:
54:91:e4:0f:02:21:b4:33:2e:28:44:24:d2:0a:91:5f:64:b6:
48:27:7d:f6:8a:67:57:b0:1f:f6:9d:cb:0b:ee:ee:73:b3:10:
82:04:c1:eb:58:47:2a:87:36:4b:47:c6:9f:28:44:06:8c:30:
35:cf:fd:07:38:ba:18:3e:52:e9:9f:f6:11:b1:c1:df:39:41:
dd:e7:dd:7d:c2:f9:96:1a:9c:fe:29:48:7c:d9:ee:e7:47:ca:
e3:48:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org