Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/J8Kr75iedIqophVCfhMcsn3569c.roa
File: J8Kr75iedIqophVCfhMcsn3569c.roa (raw, json)
Hash identifier: nHzIyGljRJOPnituqeW1cmPUN2i6VXm1mWNuNwLlloQ=
Subject key identifier: 27:C2:AB:EF:98:9E:74:8A:A8:A6:15:42:7E:13:1C:B2:7D:F9:EB:D7
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 01898C0CA3D269486BF97ABCBA88E5BA4285
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/J8Kr75iedIqophVCfhMcsn3569c.roa
Signing time: Tue 25 Jul 2023 07:56:25 +0000
ROA not before: Tue 25 Jul 2023 07:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204773
IP address blocks: 93.95.210.0/24 maxlen: 24
2a13:3000::/30 maxlen: 30
2a13:3004::/31 maxlen: 31
2a13:3006::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:0c:a3:d2:69:48:6b:f9:7a:bc:ba:88:e5:ba:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Jul 25 07:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c2abef989e748aa8a615427e131cb27df9ebd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:65:e3:16:d7:0d:3d:4d:53:87:cf:8c:e4:
37:90:96:a2:26:9d:c3:9f:4a:7f:7b:47:cd:27:f5:
9c:75:2c:49:75:b8:0d:4b:70:f1:da:61:b1:b1:a0:
b0:1a:12:03:af:8a:dd:bb:b1:45:a0:ac:bc:7b:4e:
ac:98:e7:38:65:b4:f1:54:4d:48:fb:54:72:37:21:
2b:fb:2a:1b:6f:5e:4a:90:ca:fe:76:15:75:19:2a:
d1:0b:70:e2:fb:3f:da:7c:16:45:5f:29:95:da:6d:
d7:d4:33:ef:31:eb:c7:a5:4e:a8:e8:f2:4c:a0:62:
53:c6:88:ab:e5:d5:3b:8b:88:30:24:de:2a:8c:89:
7d:75:33:08:21:a7:9e:ee:2c:df:47:a9:38:c9:6b:
73:4c:30:c7:34:88:51:54:c1:7e:e2:7b:8d:b7:6a:
85:40:16:80:8f:4f:f1:b9:bc:e1:66:99:f7:72:b9:
13:a8:9f:d4:5f:1a:1a:0c:08:f0:ad:61:07:f1:2c:
30:c1:e2:5c:e4:57:c7:43:1e:7d:38:96:d4:14:47:
7a:e4:4a:0e:d5:a5:32:0e:6f:a0:93:71:ab:54:41:
5c:cf:d3:5f:57:66:8b:1a:41:ca:c9:35:3b:14:2f:
f2:ba:c5:75:44:4b:65:64:eb:69:0e:ab:f9:16:1e:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:AB:EF:98:9E:74:8A:A8:A6:15:42:7E:13:1C:B2:7D:F9:EB:D7
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/J8Kr75iedIqophVCfhMcsn3569c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.210.0/24
IPv6:
2a13:3000::-2a13:3006:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:10:9c:87:c4:13:3a:7a:62:4b:5e:7b:bf:00:a8:15:05:96:
e5:88:4b:9a:11:7d:e2:33:cd:08:46:00:22:26:0e:51:7d:ca:
40:de:3d:c7:87:23:43:34:ad:62:64:fb:3a:20:08:d8:1a:1d:
2b:50:a5:0e:94:b0:a6:bf:38:52:a0:4c:b9:2a:eb:bd:7f:79:
4e:16:98:5c:6a:cf:0b:4a:a0:f6:f3:93:d5:ad:09:70:af:8a:
01:4f:fa:bb:87:3d:21:40:b4:69:71:f4:87:f0:a4:e1:c5:e9:
52:bd:75:f0:af:92:6c:d5:f4:4f:54:a3:cf:a6:55:91:cb:99:
60:8b:46:eb:33:df:86:fd:0c:f1:10:fb:d2:02:e1:75:ef:58:
d6:ff:f1:64:81:c4:f4:af:5c:89:43:22:a3:ed:4f:c2:4b:2e:
e4:5e:a0:32:bb:f3:80:37:f1:35:2f:8b:f9:c5:55:b2:ef:0b:
2b:51:c7:d8:c6:52:98:82:84:63:6a:29:fc:7a:10:49:7f:e8:
00:87:28:54:ae:5a:78:60:59:43:03:90:df:b6:d6:11:c8:86:
9b:35:da:76:6d:e0:9c:94:32:d5:17:e9:f0:d9:3d:2b:e5:62:
50:63:0a:e2:73:3e:20:28:18:7e:f3:d5:42:ae:8e:34:cf:47:
c9:f6:c3:9b
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYmMDKPSaUhr+Xq8uojlukKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl
MjAyYmMwHhcNMjMwNzI1MDc1NjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2MyYWJlZjk4OWU3NDhhYThhNjE1NDI3ZTEzMWNiMjdkZjllYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV5l4xbXDT1NU4fPjOQ3kJaiJp3D
n0p/e0fNJ/WcdSxJdbgNS3Dx2mGxsaCwGhIDr4rdu7FFoKy8e06smOc4ZbTxVE1I
+1RyNyEr+yobb15KkMr+dhV1GSrRC3Di+z/afBZFXymV2m3X1DPvMevHpU6o6PJM
oGJTxoir5dU7i4gwJN4qjIl9dTMIIaee7izfR6k4yWtzTDDHNIhRVMF+4nuNt2qF
QBaAj0/xubzhZpn3crkTqJ/UXxoaDAjwrWEH8SwwweJc5FfHQx59OJbUFEd65EoO
1aUyDm+gk3GrVEFcz9NfV2aLGkHKyTU7FC/yusV1REtlZOtpDqv5Fh5ogQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCfCq++YnnSKqKYVQn4THLJ9+evXMB8GA1UdIwQY
MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt
ZmZkNWJmNTk2OWRmLzEvSjhLcjc1aWVkSXFvcGhWQ2ZoTWNzbjM1NjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm
LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAXV/SMBUE
AgACMA8wDQMEBCoTMAMFACoTMAYwDQYJKoZIhvcNAQELBQADggEBAD4QnIfEEzp6
Yktee78AqBUFluWIS5oRfeIzzQhGACImDlF9ykDePceHI0M0rWJk+zogCNgaHStQ
pQ6UsKa/OFKgTLkq671/eU4WmFxqzwtKoPbzk9WtCXCvigFP+ruHPSFAtGlx9Ifw
pOHF6VK9dfCvkmzV9E9Uo8+mVZHLmWCLRusz34b9DPEQ+9IC4XXvWNb/8WSBxPSv
XIlDIqPtT8JLLuReoDK784A38TUvi/nFVbLvCytRx9jGUpiChGNqKfx6EEl/6ACH
KFSuWnhgWUMDkN+21hHIhps12nZt4JyUMtUX6fDZPSvlYlBjCuJzPiAoGH7z1UKu
jjTPR8n2w5s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:24 2024 by rpki-client on console-ams.rpki-client.org