Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hcM8-BsgyA8ySxRaLOM3B8glwIc.roa
File: hcM8-BsgyA8ySxRaLOM3B8glwIc.roa (raw, json)
Hash identifier: 70CR/IqYn2uJOBWCA+Cxwf4sQFrh+LsQeRP8v3TGu/c=
Subject key identifier: 85:C3:3C:F8:1B:20:C8:0F:32:4B:14:5A:2C:E3:37:07:C8:25:C0:87
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01930407375BE161DDCAF7B0F222337886BE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hcM8-BsgyA8ySxRaLOM3B8glwIc.roa
Signing time: Thu 07 Nov 2024 00:30:01 +0000
ROA not before: Thu 07 Nov 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 93.88.203.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Nov 2024 01:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:04:07:37:5b:e1:61:dd:ca:f7:b0:f2:22:33:78:86:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 7 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85c33cf81b20c80f324b145a2ce33707c825c087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:d1:7c:ca:28:c0:00:fb:91:44:8b:63:38:
32:2d:de:c7:b2:13:32:61:45:70:5f:b5:fa:75:f8:
0a:b2:e1:7e:46:61:ce:88:ef:fa:0f:a2:ab:6f:08:
df:3f:3f:19:db:7a:cc:c9:69:81:76:0a:bb:b8:b2:
a0:df:58:64:4f:b2:a0:6d:27:14:e3:aa:ad:35:b9:
ee:3c:a9:61:7d:25:39:19:4c:be:e3:a1:87:50:06:
6d:8a:b2:b6:bc:8f:65:5d:76:72:e1:db:0c:ae:25:
de:db:0f:88:a6:a4:ae:e5:1a:83:97:8b:76:8c:80:
ab:f2:84:cd:d6:e2:bc:2c:63:6d:d3:59:a0:8f:3f:
81:2d:a3:df:0a:d6:96:c4:54:01:1e:69:27:d9:43:
c0:64:b3:60:9d:ee:de:69:65:1a:ce:f2:0f:74:dc:
0e:64:fc:df:e8:f1:88:2c:f7:73:20:78:e2:74:92:
72:a5:77:53:76:09:f7:20:e6:4c:f5:29:58:2c:82:
17:ea:5b:16:d3:25:d2:44:6b:82:21:5c:0a:3e:8e:
9b:b8:b0:ce:39:c1:ac:bb:e5:d7:00:d2:32:c6:3c:
67:59:94:80:ec:d6:83:da:c4:a0:b4:98:a7:98:70:
5f:b5:bf:eb:cb:87:85:cf:92:ae:5a:4d:19:56:68:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:3C:F8:1B:20:C8:0F:32:4B:14:5A:2C:E3:37:07:C8:25:C0:87
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hcM8-BsgyA8ySxRaLOM3B8glwIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.203.0/24
194.50.111.0/24
IPv6:
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
Signature Algorithm: sha256WithRSAEncryption
a2:12:2b:dd:7b:62:81:01:43:02:e2:c9:93:2a:69:fd:7a:b7:
bf:dd:8d:f9:26:a3:64:04:e0:1b:b4:05:b8:80:e8:11:4d:cf:
be:e0:61:4a:3b:2c:29:23:8c:74:9d:b2:88:53:13:c7:c9:7b:
9e:24:5b:00:29:0b:6f:97:cc:f5:ae:f0:4b:82:c9:69:be:b9:
e1:dc:21:bd:cd:ec:d8:f1:b8:63:84:ce:0f:63:26:8d:cd:3c:
ae:6a:bd:98:88:7d:5b:3b:3c:f4:70:e8:fa:28:9e:43:73:53:
68:62:7b:bf:3c:d5:45:cf:d5:8d:97:01:c3:2a:60:f5:32:b7:
64:13:60:62:4b:e0:06:34:29:3d:2a:2f:35:37:86:08:ba:3a:
be:fb:a8:9b:46:bd:07:2b:73:8c:70:4f:23:8f:c0:bd:02:90:
d8:9b:35:a7:30:b9:99:80:d5:f0:9e:f9:bc:a5:2f:42:64:30:
3f:a4:65:bb:0a:a0:ee:94:7a:0b:d9:af:1a:7e:8f:a8:a8:be:
2b:a7:7c:64:25:d4:11:bf:c6:40:31:d9:62:ae:65:81:e4:d8:
3d:af:fc:84:72:8e:ed:f4:8d:fc:78:a7:02:71:7e:74:23:5c:
8c:4d:51:cc:98:3b:40:a6:04:e8:de:f6:b3:a1:63:5b:e2:c4:
e2:7e:7b:a5
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 8 06:31:07 2024 by rpki-client on console-fra.rpki-client.org