Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4dr0uyMLPGC2NuTUZb2REKmLVSg.roa
File: 4dr0uyMLPGC2NuTUZb2REKmLVSg.roa (raw, json)
Hash identifier: D+seDSycwEiy+0Trhfb45mGsWBG5PTfiXXOGCL5hcIg=
Subject key identifier: E1:DA:F4:BB:23:0B:3C:60:B6:36:E4:D4:65:BD:91:10:A9:8B:55:28
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190920C8DF030967D6CF5BCBEBBEE6462DB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4dr0uyMLPGC2NuTUZb2REKmLVSg.roa
Signing time: Mon 08 Jul 2024 11:13:34 +0000
ROA not before: Mon 08 Jul 2024 11:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 93.113.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 16:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:0c:8d:f0:30:96:7d:6c:f5:bc:be:bb:ee:64:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 8 11:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1daf4bb230b3c60b636e4d465bd9110a98b5528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:27:62:18:39:1a:48:a0:7a:da:98:29:b7:
93:3b:a2:7f:b9:2e:43:6c:6d:6e:e8:a8:e5:9f:4d:
0a:a8:e0:80:e4:a3:29:2c:75:87:05:5b:5c:12:9c:
28:2e:f6:e9:20:c4:00:e5:04:87:ff:64:a2:c3:92:
e1:52:68:aa:d1:bf:8c:0d:ca:88:84:93:8a:ea:1b:
27:dc:bd:e3:d4:28:d8:2b:a1:03:51:1b:ca:4c:49:
d7:a3:04:69:bf:45:f9:e9:dc:70:55:fd:81:12:65:
0d:81:d2:84:ac:db:e7:06:2e:fd:13:eb:1e:f3:dc:
68:c2:e9:cc:08:e0:42:ee:90:ff:5e:b6:eb:32:e7:
3c:ac:77:77:3b:c3:52:cc:1b:0f:40:f6:de:91:55:
3c:a4:b2:06:76:71:d4:69:bd:24:c5:71:18:60:5b:
bb:36:58:df:16:48:11:49:5e:48:81:e8:68:0d:1a:
70:5b:37:23:b0:b2:31:ea:59:4d:31:7b:d0:7e:03:
c5:b1:18:d8:de:3c:fe:c2:66:44:97:41:45:b0:1d:
dd:48:fe:e3:d7:45:c5:b7:2f:36:4b:9b:fa:33:45:
38:d7:31:7a:99:3d:29:6c:96:40:e0:50:c8:c7:ea:
89:e1:7e:95:83:92:b5:4f:18:ea:86:24:68:0d:54:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:F4:BB:23:0B:3C:60:B6:36:E4:D4:65:BD:91:10:A9:8B:55:28
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4dr0uyMLPGC2NuTUZb2REKmLVSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.255.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e1:39:36:4d:cd:78:8e:56:24:67:7f:9a:01:43:8a:15:f7:
f6:d4:4a:93:14:d2:7d:c8:e6:cc:ff:a6:b8:4a:c2:1d:43:33:
e5:b7:2c:a1:7b:02:0f:4f:af:af:67:4e:d2:7f:5d:0c:85:f3:
7f:7d:0f:ea:3b:dc:42:f9:93:61:5f:f2:35:f9:41:e1:85:34:
2f:c5:a7:d8:d0:19:9d:a6:8d:e7:66:40:7d:72:d6:3a:e6:ab:
e0:a9:ef:ba:95:8f:a3:68:e2:92:23:36:56:26:63:3b:6b:92:
23:83:90:05:1f:dc:be:bd:bc:3b:af:6d:fd:d1:8e:ce:f8:27:
9b:34:98:e2:44:24:a0:3e:76:4f:92:33:d5:e4:eb:36:b9:ba:
14:8e:4c:fc:9d:5a:36:86:b1:22:62:18:94:c4:8f:23:fe:7c:
5b:5e:92:c1:a3:52:2d:93:71:ff:ee:d0:33:2a:d5:62:2f:cf:
a6:36:97:85:58:53:a6:1e:b3:ff:70:ca:8e:fb:a0:6d:7c:96:
1c:f0:8c:e3:ea:52:92:40:97:6d:54:3b:7a:22:ea:26:dd:eb:
c9:86:79:22:5e:11:bd:fe:3c:1f:2c:e0:29:5b:91:cf:94:09:
0f:51:13:29:3e:2a:eb:bb:50:d3:87:8b:c8:88:c2:55:bf:af:
d7:b1:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 17:47:37 2024 by rpki-client on console-fra.rpki-client.org