Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/wP1h8YfFyf1PhXroe4TiOW5l65s.roa
File: wP1h8YfFyf1PhXroe4TiOW5l65s.roa (raw, json)
Hash identifier: 7eX5tgdn4CjCcjEmryH8aJbM3PVosbPrlEhzPOZrSq8=
Subject key identifier: C0:FD:61:F1:87:C5:C9:FD:4F:85:7A:E8:7B:84:E2:39:6E:65:EB:9B
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018DEE9A0752C09618778017ABF9E4E8BAFA
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/wP1h8YfFyf1PhXroe4TiOW5l65s.roa
Signing time: Wed 28 Feb 2024 07:24:48 +0000
ROA not before: Wed 28 Feb 2024 07:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.132.187.0/24 maxlen: 24
185.212.206.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:9a:07:52:c0:96:18:77:80:17:ab:f9:e4:e8:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 28 07:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0fd61f187c5c9fd4f857ae87b84e2396e65eb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:cf:96:90:f1:ed:5a:dd:7e:24:84:d2:6e:
9e:89:38:a3:72:76:72:8a:a7:dc:9e:a8:71:28:bf:
3a:e8:90:32:1d:01:ea:0d:69:14:d4:fe:85:1a:10:
0f:33:1d:f8:8a:36:55:f2:83:d8:0a:68:24:04:47:
d4:0b:88:82:f8:ab:a1:fa:62:49:45:65:54:a2:fe:
1a:8e:02:25:1a:b9:c1:ac:5c:e1:7d:88:2d:3f:f5:
51:96:27:16:de:23:06:80:2d:e1:1a:0a:80:5c:3b:
aa:1c:e3:b6:6c:99:cd:59:51:92:54:86:51:a8:a1:
a5:e6:17:85:79:48:d1:fe:56:d8:29:a5:e1:f6:5d:
bd:b8:37:e1:33:b5:2e:35:56:55:4b:2c:f0:44:5d:
ca:6f:d0:c7:ca:a9:67:83:64:58:d3:cb:ac:23:e6:
a8:75:e6:32:0d:a4:bc:9d:ca:90:a7:99:cc:9c:d8:
90:ce:ac:65:07:69:41:b3:8f:c9:70:be:ef:64:1e:
b3:06:0a:4f:c3:f1:68:11:a4:95:c4:20:6e:95:3f:
66:f7:fb:4c:7d:3e:9f:39:f1:21:d6:38:cc:e0:83:
1c:87:da:9c:b2:4a:f7:6c:9e:98:c2:9c:b3:ce:03:
7c:1c:7b:e0:48:34:c8:65:49:df:be:be:77:e7:99:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:61:F1:87:C5:C9:FD:4F:85:7A:E8:7B:84:E2:39:6E:65:EB:9B
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/wP1h8YfFyf1PhXroe4TiOW5l65s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.132.187.0/24
185.212.206.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:73:94:19:94:a1:07:f6:2a:db:3f:5d:18:42:e6:70:39:60:
08:b5:9b:dc:92:c5:fa:26:c7:2d:c0:7e:6e:e7:8b:12:b9:c6:
71:e8:61:e6:2e:58:5f:5e:09:20:b2:e0:11:f9:16:d0:1c:68:
5f:c0:0f:ea:f3:1c:e3:a5:46:c5:be:fa:43:a5:a6:0d:71:75:
f8:99:da:b4:86:41:b0:2f:bd:5f:b4:63:15:80:80:5d:ad:bc:
6e:c4:d1:68:38:f4:5f:df:d7:18:23:74:45:55:6c:54:58:e5:
10:fd:b7:7b:85:01:f9:0b:08:a6:9a:30:7b:1a:52:30:24:f2:
e4:78:03:59:25:94:52:cf:3f:ed:95:9d:a1:6e:76:07:05:96:
ab:57:f5:ab:cb:de:75:cf:fa:d1:30:14:9e:92:52:e8:14:d1:
be:00:e2:8a:40:88:37:24:ba:f8:23:5c:e5:31:e0:38:4f:62:
79:26:5c:1f:bd:fa:4a:14:9b:1b:21:22:db:d1:c2:f6:3b:fe:
75:c2:00:a1:91:17:cd:d5:f2:66:3d:11:e5:9e:f5:28:3e:bb:
ef:59:15:ab:29:52:d6:80:e6:ae:f3:a9:78:ee:eb:22:1e:95:
ca:65:d5:bc:9d:85:76:bb:40:b5:13:cc:55:ee:63:7d:c2:6b:
4e:ec:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:39 2024 by rpki-client on console-fra.rpki-client.org