Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4bxALCLVUGfeEijYAIZQPTVUOuU.roa
File: 4bxALCLVUGfeEijYAIZQPTVUOuU.roa (raw, json)
Hash identifier: UNsOBqkxAfmNLjSpFGSpcrRVgfSWROxL5+wS+W+cIS0=
Subject key identifier: E1:BC:40:2C:22:D5:50:67:DE:12:28:D8:00:86:50:3D:35:54:3A:E5
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018607B8BD327F577F3E1E9DAD8AD7F4F2C7
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4bxALCLVUGfeEijYAIZQPTVUOuU.roa
Signing time: Tue 31 Jan 2023 12:06:32 +0000
ROA not before: Tue 31 Jan 2023 12:06:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:b8:bd:32:7f:57:7f:3e:1e:9d:ad:8a:d7:f4:f2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 31 12:06:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1bc402c22d55067de1228d80086503d35543ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:f5:61:65:ff:be:45:2a:21:26:25:29:4f:
1b:70:e3:76:00:b3:46:e8:3f:36:a0:79:ba:ec:ba:
c7:f0:36:57:ff:c9:46:4f:a4:4e:e3:ca:ba:02:44:
1b:a9:33:e0:3c:e2:9e:34:fa:e5:47:21:9b:f3:43:
ea:2f:df:34:6e:91:3a:c7:0b:69:01:40:81:92:79:
8b:ed:db:b1:82:a8:2c:6b:3a:f9:be:af:67:76:57:
60:03:53:77:29:aa:f1:db:52:a0:18:33:5e:cb:49:
59:9f:6b:c1:d3:c1:a0:7b:ac:69:c0:b9:a2:b9:c2:
98:a3:ae:c7:b8:cb:7a:ad:52:ad:f3:61:4e:f3:87:
f2:0f:87:75:d2:c4:c9:5e:c9:c8:6e:e7:ca:ac:91:
50:7a:63:66:0c:e2:53:27:bc:fe:05:7d:e0:79:a4:
06:9d:04:ee:dc:7c:9c:2d:86:ad:af:67:46:5c:da:
ec:3e:18:e0:9b:8b:f8:34:14:e9:04:2a:d4:0d:58:
55:1a:e0:28:73:0d:3f:aa:20:00:60:3a:97:76:cf:
79:ca:57:fb:08:b1:0e:56:51:46:1b:ba:a4:11:ae:
d9:09:41:f3:3b:0b:3e:80:b3:1b:87:95:ee:53:1b:
82:b7:30:d0:63:bb:eb:c9:49:9a:6e:7a:01:37:32:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:40:2C:22:D5:50:67:DE:12:28:D8:00:86:50:3D:35:54:3A:E5
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4bxALCLVUGfeEijYAIZQPTVUOuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
36:71:82:c6:c0:93:47:9f:2c:06:52:22:ea:09:2e:4b:2d:54:
7d:ae:2e:01:4e:53:3e:bf:04:24:78:7e:5a:60:9b:9f:a8:25:
50:ad:0e:7e:2d:3a:93:41:23:3c:26:4f:2d:a8:2b:ed:3a:46:
50:00:c0:9d:08:b8:42:c1:29:b8:b1:4f:3c:45:02:19:a3:20:
2c:a0:5f:c9:04:da:fb:9b:44:bf:ba:c7:d7:f7:4a:fb:0a:9d:
c7:9e:ea:7e:42:e2:bc:a2:89:ad:da:10:c1:35:c8:15:14:fe:
17:83:9f:1d:d2:06:3d:67:c9:2a:70:1c:9d:60:91:2d:35:18:
d0:9f:da:62:23:aa:69:96:8a:56:7d:e6:65:a6:33:53:71:f9:
cd:36:c6:43:20:20:9c:2c:e9:a9:c6:5f:66:09:50:aa:40:ea:
44:04:c4:9f:17:c6:25:c4:73:08:9c:ae:2f:32:35:eb:7e:9e:
f9:ff:8c:7e:5f:89:a6:5d:e2:8b:b7:83:cf:5c:3d:ca:df:02:
85:ec:4a:18:6f:8b:13:d7:2f:6e:2f:1e:44:35:10:0e:b8:8c:
25:06:ba:b2:d6:df:ce:38:f8:ea:95:e6:84:e9:8e:a2:8f:82:
34:35:00:d8:76:30:2a:4c:ba:2e:5f:f4:c6:2b:7a:5c:c1:86:
d0:f1:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org