Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/1r1b1LkkWGEp1vOLVsQnfklknSM.roa
File: 1r1b1LkkWGEp1vOLVsQnfklknSM.roa (raw, json)
Hash identifier: JLCWbd3gtp3Y9n9NemRyNe6a8B5QNrkk5dE8V4xmDTM=
Subject key identifier: D6:BD:5B:D4:B9:24:58:61:29:D6:F3:8B:56:C4:27:7E:49:64:9D:23
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 0186A2E56A521795242A94820450392C6BD6
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/1r1b1LkkWGEp1vOLVsQnfklknSM.roa
Signing time: Thu 02 Mar 2023 15:16:29 +0000
ROA not before: Thu 02 Mar 2023 15:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201749
IP address blocks: 93.191.112.0/24 maxlen: 24
93.191.113.0/24 maxlen: 24
93.191.115.0/24 maxlen: 24
2a06:a542::/31 maxlen: 31
2a06:a540::/31 maxlen: 31
Validation: Failed, certificate revoked on Fri 10 Nov 2023 11:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:e5:6a:52:17:95:24:2a:94:82:04:50:39:2c:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Mar 2 15:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6bd5bd4b924586129d6f38b56c4277e49649d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:d3:c0:c9:0c:cb:f7:20:fd:cf:de:cf:9f:
44:ea:03:7b:d9:c2:00:d8:15:66:e5:42:8e:14:3d:
8a:f7:6b:d6:1c:b6:d7:c7:e5:e9:26:94:d0:c9:af:
16:70:d7:28:34:f1:67:a7:d4:b3:f6:10:8a:20:64:
62:24:cf:c3:b8:bd:7e:a5:3a:4a:e6:c0:48:22:65:
59:f4:0f:98:d3:9c:73:fb:c2:75:d8:91:d3:f1:94:
75:d8:74:3a:c9:2c:36:af:40:13:5f:d3:2e:ab:56:
44:aa:1c:ec:b3:87:00:5b:8b:b9:30:f0:e3:47:7f:
17:a1:26:10:8f:a4:95:14:cc:25:1e:be:89:63:73:
17:e4:66:05:02:1c:b4:77:90:ce:9a:f9:e7:95:29:
4e:09:c0:ba:e5:fe:18:70:a1:d9:d2:97:4d:f2:62:
bb:a4:83:b0:ad:36:1c:d7:ee:b4:2c:6e:b7:2b:de:
7c:97:fa:ed:c1:08:ca:81:3a:e3:95:1a:cd:99:0a:
9a:b1:33:8a:6f:4a:aa:ff:d8:65:89:ef:6a:e0:1f:
8f:b6:62:24:11:cc:d3:0f:89:4d:f3:66:4a:10:09:
42:3f:e8:ee:17:c2:3e:56:8d:51:d7:78:c5:be:34:
9c:92:7e:5b:5f:e9:f3:c1:cf:e1:58:e2:1c:cd:05:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BD:5B:D4:B9:24:58:61:29:D6:F3:8B:56:C4:27:7E:49:64:9D:23
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/1r1b1LkkWGEp1vOLVsQnfklknSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.112.0/23
93.191.115.0/24
IPv6:
2a06:a540::/30
Signature Algorithm: sha256WithRSAEncryption
0c:47:d4:18:85:2e:ed:79:3c:aa:81:e3:c7:74:a2:f4:85:fc:
8d:1a:81:d0:e6:64:c7:88:b4:77:68:da:49:82:5e:81:23:f5:
fa:de:d5:de:cb:4d:ca:cc:4f:8f:98:54:c2:23:24:bd:80:a9:
15:a0:ff:66:40:4d:0b:3d:10:6a:14:3d:e0:9b:04:26:c7:57:
54:dc:d8:e2:b9:37:70:7b:38:93:c9:0e:39:e1:19:61:57:f7:
64:9b:89:0b:41:0c:b3:9b:29:a9:d7:ad:29:7c:f0:f1:1e:ef:
45:fb:45:e3:ae:87:80:ec:b8:10:f9:a2:f9:70:67:37:e5:b2:
18:12:3e:e3:08:4f:1f:d5:52:10:c4:45:ef:17:7b:5f:8f:e4:
4e:e2:43:8f:b6:5a:09:f6:57:87:06:c2:57:9b:71:67:69:cd:
c0:96:50:9b:7b:7a:0a:ae:6e:4c:69:37:91:fe:12:bd:25:82:
c1:3a:02:5f:75:84:13:ba:d7:13:39:78:7d:55:98:f5:28:6b:
43:73:1a:96:38:7b:84:35:14:e6:80:06:67:a9:c3:4c:05:a6:
77:15:c7:30:73:64:51:72:5e:45:e0:79:7c:67:c0:be:65:26:
b4:47:28:a9:64:03:61:80:97:65:1b:d8:28:37:ec:46:7f:5d:
25:4a:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org