Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/RPxpZOzEHxaf10Pk8nsy5QPFGDE.roa
File: RPxpZOzEHxaf10Pk8nsy5QPFGDE.roa (raw, json)
Hash identifier: r1GTfY5jrSjY8NJPvp6yj2YxIFEhEdHEUT3oLq+gG0E=
Subject key identifier: 44:FC:69:64:EC:C4:1F:16:9F:D7:43:E4:F2:7B:32:E5:03:C5:18:31
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 01856F79935C18D52E3D4A4D3F644DCCE1A8
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/RPxpZOzEHxaf10Pk8nsy5QPFGDE.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42295
IP address blocks: 93.152.232.0/24 maxlen: 24
93.152.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:93:5c:18:d5:2e:3d:4a:4d:3f:64:4d:cc:e1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44fc6964ecc41f169fd743e4f27b32e503c51831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:a7:4c:5c:29:ea:57:e9:54:c4:9f:b7:bc:
24:54:df:30:e9:63:eb:71:4c:ad:16:43:9e:9e:f7:
40:b8:33:7d:df:6b:aa:45:88:37:d3:2f:e1:96:bd:
8f:5b:24:ba:d6:9c:03:4b:5e:b1:3f:8a:c9:4a:7d:
c8:08:b8:5d:49:53:d9:f0:37:03:38:90:d9:7f:80:
20:64:b8:13:9b:01:9e:b0:df:19:62:a8:8c:e2:1e:
b5:27:15:04:c1:9e:43:00:a4:04:17:62:9e:26:44:
7b:33:e7:92:93:cd:1a:45:b5:0b:09:84:8d:d6:f4:
65:8c:64:21:67:f8:f5:66:d3:eb:7e:39:83:96:f5:
05:ad:85:9e:8c:f1:68:69:cd:bc:73:03:9d:5a:78:
c2:d6:88:77:34:90:71:b4:b2:51:cb:90:5b:fb:94:
0a:e3:4f:f0:71:0d:ab:e9:f5:30:e5:bc:f0:50:7b:
02:23:4c:d4:82:17:f3:50:24:9c:88:bb:be:e4:04:
d6:e0:79:a2:27:c1:76:b3:3c:e0:40:98:e3:a9:d2:
b0:0b:22:a3:fa:89:93:e6:3b:18:bb:7c:3a:d1:d1:
35:b0:40:17:63:78:e7:a7:3a:67:c7:53:3a:93:c6:
c4:13:9c:18:8c:0d:0c:b3:f9:80:2e:fd:12:7d:71:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:69:64:EC:C4:1F:16:9F:D7:43:E4:F2:7B:32:E5:03:C5:18:31
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/RPxpZOzEHxaf10Pk8nsy5QPFGDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.231.0-93.152.232.255
Signature Algorithm: sha256WithRSAEncryption
7d:1c:4f:f2:a2:ec:cf:55:05:3e:25:6f:f6:20:83:44:ef:31:
95:c1:3e:09:93:b1:c1:81:d5:5d:ae:26:24:fd:63:8c:b2:b5:
27:dd:05:6e:a3:d7:af:38:59:f3:7a:05:3c:32:5b:b6:44:dd:
f5:33:f6:e0:1f:99:19:c1:49:90:6c:91:cf:d2:46:d5:19:ff:
89:6f:3d:12:8c:8b:88:b2:98:d3:eb:69:ac:90:af:14:56:e1:
ad:53:8e:ce:ab:2d:62:e5:9d:29:8d:3e:ee:33:45:f0:3c:e8:
9f:f9:7c:dd:7b:4b:96:5b:ce:73:e8:0b:af:24:23:3b:f3:0b:
14:a8:c3:3a:f1:3a:88:fb:5c:82:d5:14:38:df:a1:0e:28:79:
74:6c:31:2d:a2:e5:bb:38:50:0d:cb:5a:30:3c:57:8a:a6:66:
4e:9b:1a:3c:2e:4d:d8:ad:08:65:fb:c3:94:37:ee:ff:37:77:
68:e0:68:9c:c3:2e:09:8d:57:2b:54:84:55:f0:0b:cf:4d:95:
35:b7:cd:18:ba:fc:7e:0f:38:a2:6c:2f:2c:b0:9a:13:21:8a:
4c:50:7d:1c:d7:9e:44:97:96:ee:d7:7c:8f:c9:8a:f2:5e:e2:
47:fa:ab:40:a3:53:6c:6d:18:41:8f:35:1d:78:7b:24:19:c4:
9e:4d:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org