Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/pB6_2l9eYotRUYLpMNim245VPnk.roa
File: pB6_2l9eYotRUYLpMNim245VPnk.roa (raw, json)
Hash identifier: aLUQwqU33ClRwWHSIuHEpZWqCAphvBx9wUnPWRzlCSs=
Subject key identifier: A4:1E:BF:DA:5F:5E:62:8B:51:51:82:E9:30:D8:A6:DB:8E:55:3E:79
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0185AA94EB6B22D7318EE195590B0FB5C3C3
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/pB6_2l9eYotRUYLpMNim245VPnk.roa
Signing time: Fri 13 Jan 2023 10:02:44 +0000
ROA not before: Fri 13 Jan 2023 10:02:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 93.114.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:94:eb:6b:22:d7:31:8e:e1:95:59:0b:0f:b5:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 13 10:02:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a41ebfda5f5e628b515182e930d8a6db8e553e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:3c:de:e6:b2:2b:9e:46:7f:14:08:96:c9:
2f:54:4e:75:0e:d1:e6:07:ee:8b:41:f7:22:16:fc:
b6:b1:90:56:0f:6e:0b:77:78:0b:78:d8:f3:63:8d:
9e:23:77:c5:57:0a:ff:14:95:86:72:0b:fc:65:c5:
0b:7e:da:08:4b:6d:ba:32:a0:cb:6b:99:45:d3:6b:
5d:eb:76:8c:a7:e0:4f:d2:3e:38:b0:07:63:68:93:
37:f1:af:d8:2e:e5:ab:92:b8:72:3d:0f:b1:0c:27:
09:af:a5:a4:1e:b0:c7:6e:63:53:e5:2f:3b:34:b9:
e9:ed:96:ca:6f:ce:81:6a:ed:98:23:90:5c:d5:ca:
b2:e7:e6:45:61:ac:e1:92:59:92:80:38:04:85:54:
86:5d:af:0a:03:b8:ca:d6:fc:59:a3:ee:6a:72:93:
17:ad:b9:f5:15:92:a8:46:a6:c0:34:56:75:cd:02:
21:19:2e:d6:5c:da:ff:45:f2:a5:76:3a:be:16:3b:
2c:46:45:61:9c:a5:2d:e7:a6:18:07:57:a1:06:c1:
d3:77:40:8e:f8:03:aa:73:52:97:42:2f:f8:c8:70:
fe:b1:88:0a:b0:49:1d:a6:96:44:a0:91:31:6b:e8:
f3:83:48:0a:05:be:63:82:8e:75:dc:d5:bd:cf:64:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:BF:DA:5F:5E:62:8B:51:51:82:E9:30:D8:A6:DB:8E:55:3E:79
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/pB6_2l9eYotRUYLpMNim245VPnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.187.0/24
Signature Algorithm: sha256WithRSAEncryption
30:eb:8e:d0:fc:7a:a0:7b:7c:5d:40:95:5f:2d:d8:c0:78:9c:
b6:18:06:2c:e5:ad:e5:90:32:13:a6:82:29:fa:b4:83:83:7a:
3d:d1:4e:63:07:f6:68:37:22:ad:49:30:d7:92:24:7a:cf:3f:
98:29:9b:4f:e2:c1:88:47:fb:65:d1:18:89:a1:0a:91:2a:99:
fc:2b:2e:b5:84:21:52:8a:0a:c1:83:42:12:35:32:41:6b:4c:
7a:d0:6d:68:2d:c4:b1:68:49:a4:ef:25:31:1a:cc:df:80:d8:
f8:c2:c0:3f:72:87:40:f4:3b:33:c6:26:b0:ba:96:0e:69:22:
2d:2f:f2:14:14:29:d6:8b:12:5d:81:4c:67:53:51:68:19:1d:
a7:8b:6d:02:19:2b:ed:4c:7d:7d:78:5a:f9:da:56:69:9d:31:
1d:a7:38:16:a4:75:90:9b:c8:71:3c:42:49:87:5f:b2:73:2b:
2d:73:88:82:af:46:d3:28:b3:e0:90:fe:77:47:a5:2a:9d:5d:
77:c2:1b:5f:5e:75:4d:ee:bc:ce:0d:74:61:3c:71:83:89:24:
c6:cf:47:c8:dc:b3:fa:f2:63:91:50:26:f6:b6:7b:19:c7:76:
70:e8:2a:ad:f2:07:f3:25:8d:c5:06:c3:67:18:2f:cd:e0:b5:
0a:6b:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org