Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/n-DJm7Po_cUw8lzZdR_O3sRUc0A.roa
File: n-DJm7Po_cUw8lzZdR_O3sRUc0A.roa (raw, json)
Hash identifier: j7efEteSf0EhSrXdI2Ics2Od9GbhC7QBN1AIq4NTbeE=
Subject key identifier: 9F:E0:C9:9B:B3:E8:FD:C5:30:F2:5C:D9:75:1F:CE:DE:C4:54:73:40
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018B28C6718A46135030C39EE72C4B204085
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/n-DJm7Po_cUw8lzZdR_O3sRUc0A.roa
Signing time: Fri 13 Oct 2023 11:22:55 +0000
ROA not before: Fri 13 Oct 2023 11:22:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 93.93.96.0/22 maxlen: 24
93.93.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:c6:71:8a:46:13:50:30:c3:9e:e7:2c:4b:20:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Oct 13 11:22:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe0c99bb3e8fdc530f25cd9751fcedec4547340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:d6:0d:04:3f:5f:ca:52:33:aa:36:1f:33:
5e:09:ea:68:1f:85:1d:74:73:88:f7:14:3c:d6:8e:
b7:1e:2e:ce:20:db:d0:27:dd:3c:cd:07:d6:9b:e6:
82:11:89:55:3d:8e:44:fe:f3:0f:ec:a7:c5:23:e9:
b9:8a:f2:a5:df:e8:8c:30:38:65:0f:4f:f8:c2:df:
99:d0:96:d8:0d:32:71:8a:4d:7d:bd:d2:44:07:f4:
22:78:92:f9:02:26:3e:f8:a8:51:8a:ba:f3:e6:14:
70:fa:fd:8e:da:b6:5b:fb:87:18:52:84:e6:53:c2:
58:1f:09:40:04:b7:d8:b3:ed:1a:b1:4e:ae:12:de:
5d:83:c9:93:c5:90:3e:95:82:96:22:84:91:31:43:
51:08:b3:49:ab:58:80:ab:8f:5a:c0:61:cf:3e:c1:
21:f7:aa:8c:b1:13:33:9e:52:38:a7:06:dd:fb:19:
1a:7e:3b:4c:ee:5e:33:27:03:06:68:1d:63:2b:47:
51:b8:23:17:4d:05:0e:04:66:d7:22:56:0e:1e:d0:
76:6d:de:95:88:6e:30:bf:16:cd:6f:c6:57:ef:d1:
46:23:54:da:fc:84:2c:86:41:a7:be:c2:dd:2c:bb:
31:55:a9:75:1c:a8:28:00:17:2d:2a:6d:14:7b:73:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:C9:9B:B3:E8:FD:C5:30:F2:5C:D9:75:1F:CE:DE:C4:54:73:40
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/n-DJm7Po_cUw8lzZdR_O3sRUc0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.96.0/21
Signature Algorithm: sha256WithRSAEncryption
91:d7:16:ec:59:5c:3d:69:44:d7:1a:37:88:e1:71:c6:64:fe:
99:92:35:46:c1:79:4b:73:9b:be:75:04:27:a5:36:e9:fb:2e:
12:ef:92:57:e9:8d:87:bd:88:78:ed:64:f4:2f:1a:6f:4c:ba:
4a:04:b9:46:2a:e0:a2:99:dc:71:8f:7c:b5:79:61:90:89:09:
53:a0:70:ff:0a:f0:58:f4:4a:7f:3b:59:57:20:d3:0a:45:88:
56:45:74:bb:70:f1:33:a7:e6:5e:cb:79:f4:bf:26:41:b0:f8:
39:2e:ae:62:54:2e:44:5e:24:dd:bf:21:29:de:54:29:66:7d:
c4:8d:a1:18:2f:71:1e:dd:0f:9b:c4:dd:c2:d4:68:28:3f:0b:
f3:e4:b4:26:1f:94:84:1a:8d:77:4b:df:ff:18:7b:6e:4b:5d:
75:df:37:8d:14:22:2b:ab:30:70:3c:a5:30:21:a1:eb:d8:f2:
eb:24:f4:68:ee:9c:b5:41:31:4f:1c:15:97:a8:f0:e8:4a:4e:
86:8b:b0:ca:93:16:c5:28:8e:fe:3a:1f:c7:61:6a:cc:df:ff:
8c:cd:77:aa:21:46:bc:64:77:5b:45:f6:f7:65:73:1c:58:09:
72:44:89:8f:e3:13:2d:f9:04:35:0f:40:46:c4:1f:fc:99:bb:
f3:03:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org