Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/HjMjqZjGwWWLktP3dKs3f8JCSyA.roa
File: HjMjqZjGwWWLktP3dKs3f8JCSyA.roa (raw, json)
Hash identifier: fJmVrlq2ggcEMwFkuGU82lS6ngn2qWzBkpSVhmWyTSQ=
Subject key identifier: 1E:33:23:A9:98:C6:C1:65:8B:92:D3:F7:74:AB:37:7F:C2:42:4B:20
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 01856F4B7F311D33A5A8EF421269466F0C5F
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/HjMjqZjGwWWLktP3dKs3f8JCSyA.roa
Signing time: Sun 01 Jan 2023 21:44:56 +0000
ROA not before: Sun 01 Jan 2023 21:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44637
IP address blocks: 93.93.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:7f:31:1d:33:a5:a8:ef:42:12:69:46:6f:0c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Jan 1 21:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e3323a998c6c1658b92d3f774ab377fc2424b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:61:53:c2:75:dc:4e:d8:81:01:43:ae:66:
26:77:63:ba:49:c0:57:8e:1d:3c:65:0f:83:bc:94:
a8:19:2e:2b:a6:18:cd:1c:7b:68:50:0e:dc:2b:9a:
d4:13:91:be:59:c5:ac:fb:50:f6:1d:a5:49:a6:73:
5e:89:b7:e3:f4:a2:f5:81:06:b4:18:29:70:c8:b8:
12:a3:0d:ca:c3:eb:56:10:a0:d8:4d:31:fc:f3:7b:
0a:b9:bd:21:06:31:1e:a6:64:2a:a2:87:26:95:2c:
e2:5f:f6:bf:8e:de:4c:21:8c:3c:61:7e:ae:b8:ec:
8f:d7:4a:22:39:af:5a:c1:c0:5e:27:a8:77:40:90:
b5:19:94:3e:1c:59:a7:78:27:b2:28:e8:bc:a4:4a:
f0:fd:c2:89:fa:f9:ba:81:b0:3e:0d:ba:53:30:96:
9e:56:3c:72:7d:1a:e6:62:75:61:65:74:3b:fc:3b:
5d:a9:5a:33:52:bc:3c:04:f6:4e:2f:df:78:0b:25:
c6:21:95:9d:ff:58:eb:c9:13:e2:a6:2b:12:63:20:
e7:1e:d4:30:5f:8b:37:9a:0a:1e:06:8b:51:e1:e0:
e0:c4:b5:92:54:0d:0f:5f:d0:7b:b4:1a:7a:3d:3f:
01:8a:a9:b5:15:cc:67:d8:26:7d:60:c5:18:3f:e8:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:23:A9:98:C6:C1:65:8B:92:D3:F7:74:AB:37:7F:C2:42:4B:20
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/HjMjqZjGwWWLktP3dKs3f8JCSyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.25.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bf:4a:ee:fa:5c:04:2a:58:41:91:42:b1:d5:9b:22:70:ba:
b9:46:f4:93:53:c6:c0:4f:a8:8e:00:35:89:df:27:a0:d3:94:
40:ab:a7:10:cd:ab:40:ee:5a:25:3b:e5:30:58:d9:9c:54:8a:
73:aa:21:9c:9d:f4:12:35:7e:42:d0:cd:a4:ec:3c:57:50:8a:
7d:01:8b:75:77:ea:7c:0e:59:90:d4:52:75:ac:da:d9:80:bc:
73:1a:22:7c:e6:76:ac:6f:c9:1d:09:a3:5a:c4:4d:47:8f:da:
9c:88:2c:90:22:32:63:5f:cc:b2:e5:39:25:09:f3:eb:9c:c3:
ac:db:63:b7:41:b8:f7:de:bd:c5:16:cc:06:87:4f:c8:09:09:
c9:74:70:da:78:0d:b3:c9:13:d6:3a:55:ca:14:5f:c7:3e:74:
58:b9:80:56:0c:46:24:9a:bb:a4:63:31:94:92:d7:88:d4:31:
e3:0f:82:e3:70:f9:92:a1:31:b5:3d:95:47:0d:2b:21:02:ff:
d1:c9:ad:06:9a:2d:5f:b2:75:37:79:ab:86:df:5a:d8:d1:21:
eb:51:56:3d:cb:df:7b:52:56:dd:6e:38:a5:c7:0c:11:24:c4:
b2:44:77:5b:5e:6b:76:dd:1f:09:7c:61:00:6f:07:33:a1:b5:
a1:50:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org