Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/IGbU2IqDGP20Be2mtWCu2mbI428.roa
File: IGbU2IqDGP20Be2mtWCu2mbI428.roa (raw, json)
Hash identifier: v0S0Z34I1TEJVJbfRcO2ycLpNOwPg45vOX0ji3YVjgQ=
Subject key identifier: 20:66:D4:D8:8A:83:18:FD:B4:05:ED:A6:B5:60:AE:DA:66:C8:E3:6F
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01856F9E06E9BF38216BF6CCBBCF6745A8F4
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/IGbU2IqDGP20Be2mtWCu2mbI428.roa
Signing time: Sun 01 Jan 2023 23:15:05 +0000
ROA not before: Sun 01 Jan 2023 23:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206764
IP address blocks: 93.95.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:06:e9:bf:38:21:6b:f6:cc:bb:cf:67:45:a8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jan 1 23:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2066d4d88a8318fdb405eda6b560aeda66c8e36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:c5:b2:c4:85:8b:b7:6e:be:c4:33:68:96:
df:b6:85:d9:d2:4a:f2:77:4b:51:0c:67:f3:b4:ce:
78:e7:bc:1d:45:19:fb:57:36:59:31:f9:86:98:1c:
51:e1:0c:14:a3:9f:31:73:3b:4b:b2:6a:a8:09:fc:
8a:a5:71:5d:64:67:4e:a6:3e:7f:ec:3a:34:69:a0:
1e:ad:b6:68:63:d6:be:24:6c:62:d8:65:a9:62:d3:
b8:f6:95:02:27:3e:0e:9e:c4:e6:7d:cc:4c:15:b5:
75:7f:f5:2d:63:f3:19:36:09:12:78:54:af:28:7a:
b5:f6:71:31:2b:d9:c6:ab:af:3c:96:31:ff:67:e6:
93:6f:c5:a0:cb:29:a8:91:ea:4f:ce:83:c1:97:30:
68:db:a0:83:44:b4:ed:9f:f5:0d:a8:21:b0:ee:21:
2c:47:73:80:5a:38:e0:17:49:b3:57:a2:e8:ba:b9:
54:77:d6:b6:8f:f3:80:1e:de:d2:dc:7f:0d:13:a8:
75:20:8d:6b:13:5a:3d:6f:66:3b:cb:6e:c6:b0:d7:
dc:d9:b8:95:df:c4:53:2e:ad:24:38:de:33:e8:d6:
78:22:ab:f9:01:5e:98:a1:73:5b:08:3a:f6:b7:d9:
7e:bf:90:38:c3:c4:46:43:35:75:c4:4d:51:fa:e1:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:D4:D8:8A:83:18:FD:B4:05:ED:A6:B5:60:AE:DA:66:C8:E3:6F
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/IGbU2IqDGP20Be2mtWCu2mbI428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.96.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bd:c3:09:4a:49:4e:6e:a8:c3:5c:4f:71:9e:90:d2:a5:f3:
db:e9:3b:99:f4:0a:cc:33:3c:7d:c1:04:28:f1:8d:50:06:cf:
e4:b4:93:03:7a:bf:6b:f3:21:4e:f5:3b:70:a7:6d:86:b9:f4:
ca:63:3e:7e:f5:66:11:60:0e:28:69:e7:bf:4d:e6:23:67:73:
1d:61:d7:e7:31:61:78:3c:64:11:0a:55:5d:f1:19:7e:c1:01:
bd:1b:7c:db:46:01:6d:f8:98:7b:3a:e8:6f:78:93:83:6c:a1:
fc:2a:76:ba:88:ed:c8:fd:76:c2:fb:0a:41:68:5c:a1:1e:b1:
99:0a:60:92:11:a4:36:eb:82:51:57:2d:dc:90:e0:75:cd:a9:
49:e7:d0:fc:6d:9a:f3:eb:14:3c:e5:ab:f0:79:50:4c:c9:a5:
7f:72:7a:88:41:b2:96:b8:c3:e9:ae:86:61:10:76:16:42:57:
65:a9:78:86:02:80:ce:69:43:86:c1:b9:f0:56:3d:98:3e:87:
6b:c1:9d:c5:16:df:ea:78:94:bb:f9:29:f4:2b:06:f4:68:0f:
a7:cc:23:2e:18:32:bf:2a:46:b2:32:b1:44:ee:af:fe:2d:d8:
f1:1c:4d:e4:0d:37:0d:c0:43:a1:b0:8a:08:da:66:9f:c0:8a:
b9:b2:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:32 2024 by rpki-client on console-fra.rpki-client.org