Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/kQ6H2bljEa0MwtPrfLV_mLxlMog.roa
File: kQ6H2bljEa0MwtPrfLV_mLxlMog.roa (raw, json)
Hash identifier: 6Q6T1EnLOdEROFpDvaPpAwN7jZYhyFuwddMZ6C481J0=
Subject key identifier: 91:0E:87:D9:B9:63:11:AD:0C:C2:D3:EB:7C:B5:7F:98:BC:65:32:88
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01888B11625CA7F51401148BA1B2E5CF2E69
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/kQ6H2bljEa0MwtPrfLV_mLxlMog.roa
Signing time: Mon 05 Jun 2023 10:19:12 +0000
ROA not before: Mon 05 Jun 2023 10:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60912
IP address blocks: 93.185.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:11:62:5c:a7:f5:14:01:14:8b:a1:b2:e5:cf:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jun 5 10:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=910e87d9b96311ad0cc2d3eb7cb57f98bc653288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:0b:72:27:cf:ab:4e:43:62:5e:6f:94:7d:
54:91:1e:04:a1:26:15:0a:e8:59:4d:23:33:b6:82:
e1:dc:93:df:83:13:fc:a9:76:1d:61:f3:c6:2f:af:
84:20:c1:15:4a:d0:39:90:cb:e2:3c:7f:f8:03:58:
9d:d4:2f:07:6a:83:fa:04:34:56:b9:96:d7:62:82:
4a:be:09:8b:8b:68:c2:e4:3a:27:fd:10:fb:d8:9d:
ea:5d:e4:31:90:cb:e7:ce:34:38:5a:9c:dd:c7:b4:
1e:b2:db:bd:35:7b:f7:9d:1e:59:02:ca:4e:41:ee:
5a:9b:21:60:ff:26:70:86:65:48:aa:15:88:cc:87:
72:c5:49:de:ac:28:3d:f5:25:e4:30:2e:cf:66:b8:
6c:2e:49:d4:d0:aa:6b:32:d8:41:ce:92:d8:14:45:
48:75:b7:94:14:57:7c:41:7c:b9:27:be:ba:bf:f9:
ce:42:a3:e2:eb:7a:02:82:ad:08:b2:91:57:72:45:
18:e4:41:f8:8b:a2:15:8c:ed:18:47:f8:04:d0:69:
90:74:a4:04:6b:ab:92:a7:7b:6c:00:1e:44:05:9e:
bf:53:dc:d1:52:7f:00:a6:4a:bf:51:4c:e8:09:0a:
21:be:35:83:15:76:ad:5b:60:8f:51:a0:75:fc:d5:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:87:D9:B9:63:11:AD:0C:C2:D3:EB:7C:B5:7F:98:BC:65:32:88
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/kQ6H2bljEa0MwtPrfLV_mLxlMog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3f:ed:93:c2:a9:f0:48:7a:1c:85:2a:56:94:dd:51:5b:e9:
51:23:0c:36:ff:f5:a4:9b:12:5c:70:ca:fc:c7:e5:fe:3c:df:
75:7e:7c:48:6d:62:e9:a7:53:97:6d:61:20:ab:4f:ea:35:e1:
09:16:5f:b3:74:3d:05:ae:5d:39:76:71:76:50:e6:a9:31:c7:
7b:dd:4b:61:e3:d4:f4:5e:6b:06:c2:5d:1a:14:23:32:a5:2c:
33:1a:2a:78:9c:c9:83:64:d4:91:b7:db:51:a9:dc:df:b8:55:
60:59:32:e0:04:36:5e:a4:8f:06:44:ef:7c:74:4b:df:74:f9:
b3:e4:72:32:03:4b:46:81:3e:d4:d8:26:65:d9:6c:36:00:15:
6f:1e:06:d5:e8:fa:9d:61:7a:1d:84:de:7d:2b:e1:c1:44:75:
8b:b5:ba:9f:c3:6e:96:6f:12:bd:59:2a:16:c3:2b:d1:41:dc:
8a:5c:18:04:3d:f4:f0:5e:73:e6:ac:9c:0f:0a:5c:42:98:5f:
62:0f:20:30:82:c7:33:77:cc:e3:75:a6:2a:6d:d1:9e:9d:7c:
4d:99:0f:76:84:3d:2f:bd:89:61:97:a7:29:38:55:1c:39:bf:
3f:35:f4:ed:18:ae:11:d9:fb:bf:64:5b:43:9b:27:7a:79:1c:
3f:26:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 16:36:24 2023 by rpki-client on console-fra.rpki-client.org