Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Aer--S5t61XoJfZ3KLxRKr2QYoQ.roa
File: Aer--S5t61XoJfZ3KLxRKr2QYoQ.roa (raw, json)
Hash identifier: 7nLasY/2xCLcwCEuGIY2Vj4yb3jeeTm2AlPZpYewP00=
Subject key identifier: 01:EA:FE:F9:2E:6D:EB:55:E8:25:F6:77:28:BC:51:2A:BD:90:62:84
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 018CC94ABA2F4F8EBC733605C93F7A8AAD35
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Aer--S5t61XoJfZ3KLxRKr2QYoQ.roa
Signing time: Tue 02 Jan 2024 08:29:26 +0000
ROA not before: Tue 02 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199101
IP address blocks: 93.93.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 28 May 2024 15:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:ba:2f:4f:8e:bc:73:36:05:c9:3f:7a:8a:ad:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Jan 2 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01eafef92e6deb55e825f67728bc512abd906284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:ce:6a:7d:68:c0:9e:18:7d:bf:26:7f:05:
c2:bf:8a:99:67:57:36:a5:6b:42:9d:55:49:64:2d:
ce:34:fc:d6:97:69:8e:7c:ec:ab:e7:b0:63:a0:34:
0e:ae:29:30:72:7a:d5:ca:ea:ae:61:fe:58:fd:18:
70:1c:d2:7b:c8:3e:54:97:5c:6a:69:e0:60:e4:0b:
1f:59:a8:97:5f:7d:4a:5c:c0:26:28:d9:ce:d2:25:
d5:64:a8:4c:ea:8f:de:69:16:31:a2:d8:46:4f:21:
98:7c:c0:fd:eb:6f:f7:55:c1:ff:09:da:3b:12:4e:
ab:9e:bc:0a:9b:4a:e2:80:0c:10:0b:7b:47:c8:a6:
42:42:aa:36:50:a8:51:68:f3:28:df:a2:53:7c:fa:
5d:06:e8:00:1f:06:b4:7c:9b:30:7b:1d:c5:3a:ab:
7b:fb:e6:ab:45:a2:a9:e8:2b:14:80:1a:60:2f:32:
e8:f1:49:fa:81:1d:91:2a:e8:55:49:be:42:47:cc:
b6:09:e2:40:4b:95:49:c0:01:5a:a9:bd:9b:69:93:
3e:79:86:7c:8a:6e:f9:37:fb:3f:75:85:80:d5:59:
b5:44:92:f3:19:c0:98:26:f0:0f:4f:36:52:97:6d:
86:bf:da:b4:d4:0b:bd:e4:f5:c0:e0:b6:35:d6:c1:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:FE:F9:2E:6D:EB:55:E8:25:F6:77:28:BC:51:2A:BD:90:62:84
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Aer--S5t61XoJfZ3KLxRKr2QYoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.32.0/21
Signature Algorithm: sha256WithRSAEncryption
35:af:be:ff:4a:8c:3f:1b:1a:b3:67:49:9f:86:95:38:a1:70:
f4:6e:8d:db:69:78:a3:50:4a:f2:49:d9:c7:3b:69:4a:7c:03:
6f:6d:f2:7d:2d:cd:52:9e:55:16:61:6b:57:cd:62:90:b1:59:
b0:62:f7:50:8b:22:6a:52:6f:02:43:ba:61:9f:ce:80:cb:87:
1d:60:d0:09:65:99:9c:8c:5b:c5:08:01:46:7b:51:76:fa:7b:
32:69:d9:d7:a6:d5:38:84:1f:0e:03:8c:48:83:30:d5:a2:5a:
ef:a2:b3:f4:f8:61:7b:87:3f:d1:56:52:e1:81:e4:03:3a:2e:
0a:db:59:61:e9:e8:5a:3c:b7:bf:40:fa:a2:35:22:21:01:a9:
02:4d:4b:2c:c1:c8:ce:38:f3:99:d1:c6:f5:72:1d:2d:81:03:
f4:1f:d6:f3:fb:89:cc:56:5b:86:41:52:d6:13:0a:8e:e9:15:
bb:8c:18:4d:19:0b:c6:11:40:8c:83:c7:e5:00:1e:14:0c:49:
37:4b:ee:c8:6f:67:7e:32:78:1d:83:9c:d6:d9:13:8b:4a:9b:
4f:c3:c5:bd:71:23:83:ef:40:4f:b6:44:2d:d5:cb:d1:f1:af:
79:8e:b0:ee:a9:46:29:47:96:50:46:c2:00:0a:a4:61:84:50:
e8:47:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:13:11 2024 by rpki-client on console-fra.rpki-client.org