Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/D8l6AFh4csl1d-cUMyRaSkTgSnw.roa
File: D8l6AFh4csl1d-cUMyRaSkTgSnw.roa (raw, json)
Hash identifier: OG26oldLD5F0f1Jq3BOVYDXz6VHvUYcpcalkvSBatFs=
Subject key identifier: 0F:C9:7A:00:58:78:72:C9:75:77:E7:14:33:24:5A:4A:44:E0:4A:7C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94DFBC9E9FD4EF6812DDE16DC0EABF9
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/D8l6AFh4csl1d-cUMyRaSkTgSnw.roa
Signing time: Tue 02 Jan 2024 08:33:00 +0000
ROA not before: Tue 02 Jan 2024 08:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12695
IP address blocks: 93.113.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 15:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fb:c9:e9:fd:4e:f6:81:2d:de:16:dc:0e:ab:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fc97a00587872c97577e71433245a4a44e04a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:2a:d0:a2:29:b4:c8:25:3f:a3:ff:11:f2:
b2:79:d0:3a:e8:43:c6:5e:47:57:1b:4d:0d:03:33:
76:61:f2:31:b5:a3:b2:76:1b:27:98:6e:3f:94:3e:
18:4b:1f:36:79:70:a9:01:45:14:5f:a1:e1:2c:2d:
49:2c:bd:f5:8b:3d:d8:04:87:ab:c5:a0:c2:4a:dd:
f3:2a:48:2a:e3:af:09:ab:28:38:6c:ad:78:82:54:
f0:e8:a2:b3:9a:ea:83:71:76:54:c0:6a:72:f7:f4:
e6:3c:24:e2:7d:47:99:9e:f7:59:62:55:ac:4a:77:
54:a6:30:35:b2:52:12:15:23:93:e3:2d:02:75:48:
89:2f:c4:2d:a9:73:d8:47:00:a1:69:2f:96:f4:c0:
55:ca:ab:59:3b:ff:6b:3b:75:d4:30:d4:e5:e8:02:
31:14:aa:da:ee:27:21:19:87:9b:a8:45:61:08:03:
ee:9f:11:10:b6:ff:f2:76:6b:36:8f:86:b2:d6:84:
a7:e0:d1:11:02:a2:ee:1f:6b:ab:e7:16:3f:33:9d:
af:e4:25:98:8d:39:7f:b5:cd:50:06:9a:3e:f1:d0:
59:d8:38:40:7c:22:97:07:ce:63:9b:ec:4e:d8:21:
80:e2:02:10:9b:6f:c0:cd:71:ef:49:21:3b:42:f1:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:7A:00:58:78:72:C9:75:77:E7:14:33:24:5A:4A:44:E0:4A:7C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/D8l6AFh4csl1d-cUMyRaSkTgSnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.203.0/24
Signature Algorithm: sha256WithRSAEncryption
35:13:8b:61:2c:f1:c0:93:03:12:4a:b7:72:72:8a:d5:1e:ef:
16:d7:a0:54:8f:90:f5:06:47:42:d8:45:af:cb:8e:84:89:2e:
a4:7b:6b:6e:d2:74:15:6a:48:8a:07:60:03:8d:39:4e:ab:3d:
66:54:24:9e:6a:35:e6:ec:a0:5a:2a:56:45:a7:30:74:a1:ff:
1b:23:ed:23:8c:2c:0a:a0:a7:16:95:57:1e:c7:5d:ae:df:d5:
fb:66:39:7b:7f:67:70:26:39:14:46:e6:e7:ad:ac:73:28:8f:
03:b5:b0:2d:64:2e:4c:31:c7:79:89:d0:11:69:d2:e6:a7:c0:
34:9b:94:b8:a9:21:cc:0d:0c:6a:e8:77:1e:3e:1c:d8:8d:da:
6a:68:84:ef:31:9d:d8:33:c0:c2:61:b6:c1:a6:cc:aa:d2:77:
f7:f4:40:13:4f:3f:54:b5:7f:2a:6e:86:2c:7d:65:3e:0f:96:
0d:14:f5:88:54:2f:fd:16:ed:11:9c:0c:d7:07:ff:96:6c:5d:
ff:01:cd:58:e0:20:38:42:0e:b8:d5:d8:77:f7:b1:90:fe:32:
8b:9a:f3:db:a6:a4:43:eb:da:01:c7:36:69:f5:83:e1:25:93:
dc:ef:c6:88:0e:03:c5:4c:46:d2:c1:37:ba:e2:56:dd:e5:a5:
d0:26:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:54:44 2024 by rpki-client on console-ams.rpki-client.org