Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/z1JWMt-FN8SJKqFAuAUPw83fMC8.roa
File: z1JWMt-FN8SJKqFAuAUPw83fMC8.roa (raw, json)
Hash identifier: ig+qHfMWEbahk8K5HLKrSJ/wolLFPZTlakTsYgr3cM4=
Subject key identifier: CF:52:56:32:DF:85:37:C4:89:2A:A1:40:B8:05:0F:C3:CD:DF:30:2F
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01876A664EC6B2EA2F4F9A8219DF35D9A58F
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/z1JWMt-FN8SJKqFAuAUPw83fMC8.roa
Signing time: Mon 10 Apr 2023 09:01:42 +0000
ROA not before: Mon 10 Apr 2023 09:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 93.177.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:66:4e:c6:b2:ea:2f:4f:9a:82:19:df:35:d9:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Apr 10 09:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf525632df8537c4892aa140b8050fc3cddf302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:e0:18:2a:1c:26:c6:3a:f5:6d:7d:0d:19:
cb:44:b5:39:56:4f:83:2b:7a:b4:c8:7f:1c:a7:af:
df:1a:03:5d:06:44:c4:d4:b1:99:a4:87:75:ea:83:
41:b8:c2:4b:cf:4b:a5:06:d0:87:05:66:eb:3d:02:
3d:e4:70:60:bf:90:ef:01:5c:ce:5b:47:4a:ef:9d:
fa:b8:c7:d5:da:61:6d:84:e2:99:5f:de:77:03:ab:
77:34:96:55:72:42:cf:f0:04:c1:41:05:ee:8f:f9:
33:74:95:82:23:20:f9:b9:a3:e0:5d:65:bb:98:af:
3c:b6:52:30:8f:b2:c1:75:a7:89:69:a5:ec:a1:3b:
6a:0d:ca:83:3b:7b:43:7b:05:f0:13:71:c3:c9:1c:
ad:03:6b:80:37:a4:d3:80:1e:f5:4a:37:71:dd:7e:
cd:5c:fe:5a:ad:be:34:b5:d9:82:e6:03:22:82:45:
7f:02:36:76:10:eb:47:0e:d2:92:a0:7c:3f:c5:9c:
34:ec:ab:84:66:be:93:0e:fb:b3:99:4e:c7:a0:91:
9a:d8:3e:38:aa:01:84:8e:99:7e:eb:9f:e0:71:2e:
f9:72:a6:81:20:f9:5c:e2:6e:bd:2b:2e:28:73:d9:
f5:47:d5:8b:8c:f6:29:e2:62:26:d0:d5:d3:54:a1:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:56:32:DF:85:37:C4:89:2A:A1:40:B8:05:0F:C3:CD:DF:30:2F
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/z1JWMt-FN8SJKqFAuAUPw83fMC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.112.0/23
Signature Algorithm: sha256WithRSAEncryption
21:a1:a0:18:c4:3e:5a:5d:2a:4e:7c:6c:7c:2b:39:60:e5:b0:
20:70:27:c6:4a:34:ab:58:cf:f4:16:36:51:77:1f:65:f5:3d:
56:a2:cc:83:01:f0:36:74:0a:a0:38:d2:c0:f5:35:7c:18:bc:
a6:4c:38:71:77:5d:d1:8c:74:79:a9:d0:7d:40:db:fc:c0:a2:
57:03:57:b2:5a:c2:ae:ac:94:a8:f0:16:d3:4d:6d:a7:a9:d1:
22:d3:35:ac:7c:89:b1:70:09:4c:09:14:29:68:e5:cb:ba:3b:
72:64:cf:e7:ad:73:8c:45:3b:e6:0d:38:fd:08:4a:90:6a:99:
ec:32:e5:67:23:26:2a:57:a7:e9:f0:6a:14:bd:1b:46:65:34:
bb:1a:1c:9e:6b:fa:da:58:22:3d:bd:b4:c9:7b:b0:8e:83:91:
b2:97:66:81:f7:c3:e6:cc:a0:d0:35:b6:9f:a4:34:f3:a3:43:
80:49:2f:f4:9c:65:14:01:f2:dd:d9:68:6a:9a:69:45:ca:5d:
40:12:3d:47:f7:81:fb:23:e9:b6:a7:f1:6f:f5:65:08:9c:a8:
85:2b:91:9f:49:d0:b0:e5:4f:15:56:52:ca:87:05:69:65:78:
54:c1:bc:f5:c8:60:08:a6:1a:fd:cd:9d:72:5f:19:75:98:10:
ba:bb:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:59 2024 by rpki-client on console-fra.rpki-client.org