Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/dTffBL-LxbL_sVSWyxkdXxoC9t0.roa
File: dTffBL-LxbL_sVSWyxkdXxoC9t0.roa (raw, json)
Hash identifier: +B01M47f1WimPV8b1xDka2uI3WPg5qP6vye+QHDe9Sk=
Subject key identifier: 75:37:DF:04:BF:8B:C5:B2:FF:B1:54:96:CB:19:1D:5F:1A:02:F6:DD
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018895246DA6A039E116471DA554EC123602
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/dTffBL-LxbL_sVSWyxkdXxoC9t0.roa
Signing time: Wed 07 Jun 2023 09:16:12 +0000
ROA not before: Wed 07 Jun 2023 09:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 94.137.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:24:6d:a6:a0:39:e1:16:47:1d:a5:54:ec:12:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jun 7 09:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7537df04bf8bc5b2ffb15496cb191d5f1a02f6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:db:e7:b8:29:11:e9:b8:43:a4:ba:98:65:f9:
9f:e1:20:15:04:14:b1:6f:c7:51:40:97:64:ba:94:
ad:a7:7f:7e:48:c0:3c:4b:51:49:35:1a:e3:2e:20:
00:7a:c9:76:96:08:1c:2c:fb:66:cd:a9:96:9f:06:
dd:9f:dc:04:ff:c5:f4:e8:1f:c2:a8:c2:6f:eb:c4:
c5:b5:83:66:29:b4:e2:60:59:d5:ff:5d:48:7c:4d:
63:b5:6a:f4:e1:e0:67:4f:0b:d1:b8:4b:a4:e0:1b:
4d:c2:cf:d9:a9:14:69:fa:16:b0:11:75:65:ff:0d:
c1:f2:0b:84:48:c4:c8:c8:e0:95:4a:03:cd:56:01:
1c:fc:a8:60:2a:b4:8c:be:36:b2:34:98:25:e7:17:
50:f1:0e:e2:32:0f:3e:b3:65:2c:54:9f:ca:ef:eb:
0a:b7:c1:1e:42:c3:24:1b:7e:94:4e:a5:f8:f9:57:
ef:e6:0e:0d:7a:ef:18:05:33:fa:d8:12:2b:0e:90:
ab:50:46:b1:d6:e8:b1:1f:77:ff:df:f0:2a:dc:8e:
71:40:49:f3:a8:5e:d1:5c:cf:a0:46:35:b3:be:34:
e9:72:66:7d:29:a7:83:8d:00:51:2f:d3:5e:73:64:
14:01:63:d7:e5:1e:05:63:d2:85:01:72:ce:73:99:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:DF:04:BF:8B:C5:B2:FF:B1:54:96:CB:19:1D:5F:1A:02:F6:DD
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/dTffBL-LxbL_sVSWyxkdXxoC9t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
76:45:2c:15:ee:9f:6b:64:ed:e1:bf:02:f2:96:6f:67:17:c6:
90:9a:6a:71:36:0b:86:c0:79:3d:fb:9b:7d:34:fe:5f:1c:f1:
c6:02:34:f8:fc:bf:fb:ae:2a:25:26:29:d5:77:a0:18:a8:0d:
63:94:29:b1:b6:ba:8d:ab:d5:bc:12:82:4b:52:61:73:ee:72:
b7:7f:c2:ee:fc:21:e7:13:84:7c:21:cd:2d:26:df:3e:fc:1c:
44:a2:40:12:d2:e9:8a:b9:4a:46:89:72:01:67:64:ef:d0:fd:
38:83:39:1a:fe:5b:03:67:2e:98:2e:54:34:cc:3a:84:f8:7a:
21:03:ec:18:be:94:b7:d4:42:ba:63:91:dd:48:f6:44:35:b9:
30:90:c5:d9:72:44:cc:59:ff:1d:ed:00:ae:cf:3a:ba:4b:60:
fd:d4:b6:fa:d2:93:de:ad:ac:86:87:93:05:80:35:f3:89:9f:
5a:ea:66:73:c0:4a:bd:9c:fe:c6:6d:a5:fa:c8:5d:77:6d:b2:
1e:f8:d9:93:c6:7d:20:de:f3:b5:8a:53:34:45:3b:34:10:21:
06:7c:79:df:4d:25:f2:ef:80:a5:db:2a:81:99:61:f6:a9:25:
0a:ae:93:99:5d:8c:69:bb:16:fa:28:98:c1:c0:d9:9f:2d:26:
ea:0a:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 13:00:27 2023 by rpki-client on console-ams.rpki-client.org