Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/k3HpZZbAjvHUQgto8SdvDZGSkDE.roa
File: k3HpZZbAjvHUQgto8SdvDZGSkDE.roa (raw, json)
Hash identifier: cMK/Nv3hiSSF5FCEmmLyWMpzrAGVjxaM3E0uawKUpgI=
Subject key identifier: 93:71:E9:65:96:C0:8E:F1:D4:42:0B:68:F1:27:6F:0D:91:92:90:31
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018B96BC79FCA29E8FEAAB02CE6026B9B775
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/k3HpZZbAjvHUQgto8SdvDZGSkDE.roa
Signing time: Fri 03 Nov 2023 19:50:16 +0000
ROA not before: Fri 03 Nov 2023 19:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201670
IP address blocks: 93.185.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:bc:79:fc:a2:9e:8f:ea:ab:02:ce:60:26:b9:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 3 19:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9371e96596c08ef1d4420b68f1276f0d91929031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:26:eb:68:0a:80:7f:64:e8:df:25:df:0c:
47:aa:32:3c:20:da:bb:f2:b3:5c:f1:10:f5:8e:e9:
32:16:f3:9b:38:ca:ff:78:1e:ac:b2:71:cd:81:b9:
6c:a0:dc:70:eb:3f:01:2d:d8:06:82:48:76:75:1a:
56:a4:65:64:d8:73:25:9a:b9:d9:b2:7d:82:0a:7d:
b4:78:25:0c:95:ba:c0:e2:16:ba:bc:fc:c4:83:b0:
aa:ab:df:eb:7e:4a:ab:04:43:4a:14:c9:8e:f3:6d:
87:40:d8:0f:7b:57:71:5b:8e:6b:26:e8:85:da:67:
70:74:07:21:d5:9c:90:ba:1e:8a:8e:f5:4c:e1:2c:
a4:dd:db:73:6b:fd:5c:d2:3e:fa:f0:ce:f9:1f:ee:
e0:a0:56:b5:cc:a4:e6:ee:07:f8:89:36:ad:56:e7:
84:f1:1a:e0:dc:72:28:97:b0:90:7e:8f:bd:06:12:
43:bd:38:51:36:9d:13:32:16:b6:b0:4d:2c:d7:9d:
ba:bf:fb:f7:bd:0e:1c:30:39:83:c5:da:9b:4f:cc:
a2:de:0f:bd:cd:ee:bd:42:af:d7:10:a3:f9:2f:5f:
81:92:73:0e:4a:fb:25:05:66:2f:fb:82:b3:4d:9a:
8c:d6:ad:46:df:53:56:e8:cd:71:05:7b:fa:0c:ba:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:E9:65:96:C0:8E:F1:D4:42:0B:68:F1:27:6F:0D:91:92:90:31
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/k3HpZZbAjvHUQgto8SdvDZGSkDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.165.0/24
Signature Algorithm: sha256WithRSAEncryption
96:af:87:2a:c1:e0:b3:78:23:de:95:ea:0e:69:82:30:c8:95:
7f:8f:67:a4:56:20:6a:ff:09:16:f1:9f:6e:0b:36:f6:3a:91:
e0:7a:28:41:6e:21:84:18:6c:0b:79:b6:9f:14:5f:b1:ae:ce:
03:f9:39:7e:42:81:20:6b:e8:83:f1:ba:4c:76:5c:97:af:69:
79:af:15:4e:69:13:b3:6c:40:5e:9c:d1:bf:6e:5c:86:ca:cc:
00:f9:43:43:f8:d8:67:4b:85:6b:65:3b:db:30:a8:89:b1:c0:
50:bb:3d:7c:1a:7c:fd:b3:07:06:3e:d2:9c:73:2c:9a:ca:87:
6f:c8:54:98:1f:d1:62:d1:7a:a5:d3:39:69:a7:c0:67:83:91:
b4:a0:47:07:67:67:3d:41:c2:63:ae:65:52:44:1a:96:f0:b0:
63:57:3c:c3:5b:aa:00:c2:3c:9c:ff:56:8c:62:1b:ad:c5:f3:
72:7c:18:c5:d5:b8:0e:0c:02:04:9c:f5:80:68:48:67:c5:13:
60:64:0b:da:b2:01:4b:f4:c5:38:d4:5a:74:09:64:1a:f3:28:
db:02:85:8d:a1:55:75:1e:64:c3:53:f8:a7:92:ad:54:fe:4a:
a1:f1:6f:de:38:4a:6c:56:2b:f8:35:b6:50:f7:b6:ad:af:50:
99:ab:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:38 2024 by rpki-client on console-fra.rpki-client.org