Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/J3Bz0nmDFvTVNJTF70UkWnXTgMc.roa
File: J3Bz0nmDFvTVNJTF70UkWnXTgMc.roa (raw, json)
Hash identifier: +bZZ8bAZ2LIKzRmc56uIBs4+OdT7GfgkNB1dUMCXudw=
Subject key identifier: 27:70:73:D2:79:83:16:F4:D5:34:94:C5:EF:45:24:5A:75:D3:80:C7
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0190DE4F5377366BF989D035B3333033F1DF
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/J3Bz0nmDFvTVNJTF70UkWnXTgMc.roa
Signing time: Tue 23 Jul 2024 06:37:38 +0000
ROA not before: Tue 23 Jul 2024 06:37:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 11:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:4f:53:77:36:6b:f9:89:d0:35:b3:33:30:33:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jul 23 06:37:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=277073d2798316f4d53494c5ef45245a75d380c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:f5:9b:17:0f:53:e6:d0:49:eb:f6:73:86:
0e:ab:de:25:b0:2b:24:b6:b8:5d:27:dc:60:3e:b2:
68:e0:b7:1c:d9:98:0f:55:77:93:41:96:15:ce:8f:
01:18:93:61:97:47:f0:89:b1:7a:08:ac:95:2d:93:
e0:2c:16:76:a5:09:20:90:0c:36:e1:5b:01:33:24:
b0:33:85:25:8d:c4:be:6c:91:b1:ec:0b:02:a5:15:
d7:29:d7:d5:a5:22:6f:76:dd:be:a9:d3:fb:fb:b5:
3e:1a:ac:b4:9e:f4:99:f7:cd:8a:db:01:59:69:81:
01:25:87:f4:1b:06:80:ed:e9:9c:01:a8:86:87:7e:
7a:85:26:73:04:79:03:3c:69:4a:aa:20:8c:03:a2:
b4:e2:fa:82:8c:17:cd:6b:16:27:6e:d4:9f:bd:af:
10:14:cf:57:b2:ab:86:bd:33:7d:b4:52:8e:11:36:
fb:1e:e3:dc:17:c7:71:9c:3a:eb:b9:9b:a8:81:fe:
eb:1f:f7:aa:a3:8f:99:bb:a1:3f:dc:45:08:39:1b:
2d:98:d6:69:de:ea:85:4d:6a:80:27:4f:e1:04:28:
12:86:5a:c7:4d:ff:77:25:2f:89:c9:c0:93:d4:14:
57:9c:88:fc:97:23:81:d5:6b:d3:99:a9:cc:49:ff:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:73:D2:79:83:16:F4:D5:34:94:C5:EF:45:24:5A:75:D3:80:C7
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/J3Bz0nmDFvTVNJTF70UkWnXTgMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
32:3a:80:f1:a6:a6:11:02:dd:74:d3:cd:df:87:9e:45:d6:1d:
62:9f:60:99:c3:b4:8a:b9:d4:e7:c6:ca:c2:b6:9d:a3:22:c7:
4a:33:6f:16:82:46:13:f1:4e:3b:ba:ad:67:f2:c2:53:53:da:
c7:c3:dc:b8:94:79:a3:8d:37:a6:db:22:1b:40:c4:41:f9:28:
82:ad:82:66:3f:9f:19:37:6a:bf:08:64:eb:4d:f4:af:61:31:
1a:6f:7e:3f:8c:17:74:95:b2:c2:15:09:24:f0:4f:8a:b6:6e:
6f:71:89:ea:c3:13:2a:16:9f:de:d4:7a:ef:24:1b:c2:45:38:
46:24:91:f1:0a:60:16:2d:5f:34:35:4b:3d:f5:4a:ae:03:07:
eb:a6:47:f9:f0:7f:94:17:8c:96:3c:7c:f7:4a:5c:0e:c8:ba:
1b:b1:00:74:09:82:73:37:51:aa:9a:f8:59:17:80:f0:4b:db:
69:21:b0:00:0b:b8:2c:54:b4:91:9a:ea:52:3c:52:1c:a7:f3:
34:e7:16:cc:d9:2c:61:d8:aa:1e:23:73:0c:28:64:4d:94:58:
43:bb:8b:24:41:78:53:de:26:43:20:d4:fa:fb:06:61:06:85:
07:52:bd:e6:56:04:f4:aa:62:db:ec:4b:92:83:f0:a1:16:e9:
f0:5e:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 16:07:25 2024 by rpki-client on console-fra.rpki-client.org