Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9fgJwhPt3WCnahqVjaxKPxqVL-I.roa
File: 9fgJwhPt3WCnahqVjaxKPxqVL-I.roa (raw, json)
Hash identifier: j+7Ib8Aunqduw0qUmNY5bbU1r/jMWD36voVdI0RDcAU=
Subject key identifier: F5:F8:09:C2:13:ED:DD:60:A7:6A:1A:95:8D:AC:4A:3F:1A:95:2F:E2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F18933B8A8D3A6795140BEBCA139B3CBF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9fgJwhPt3WCnahqVjaxKPxqVL-I.roa
Signing time: Fri 26 Apr 2024 04:04:13 +0000
ROA not before: Fri 26 Apr 2024 04:04:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 09:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:18:93:3b:8a:8d:3a:67:95:14:0b:eb:ca:13:9b:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 26 04:04:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5f809c213eddd60a76a1a958dac4a3f1a952fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:b7:c0:81:51:73:71:a9:4c:db:55:e6:5e:
70:0c:98:0c:b1:a4:65:0f:a3:39:bd:b4:3f:0f:2a:
01:4f:68:da:a5:37:5f:27:59:6f:c3:f9:5d:9e:c1:
c3:34:78:43:2d:91:3e:6a:61:6a:46:42:09:d1:e6:
83:23:a6:61:a8:0a:52:93:7a:a3:43:5f:46:f4:44:
66:93:18:e8:3f:50:9c:25:de:44:e7:50:ac:2f:9f:
6d:38:33:ab:45:1b:fa:47:de:95:74:5d:44:1c:85:
46:b3:f1:88:05:73:2b:f8:a2:28:ba:e3:f6:14:bb:
5a:4a:49:a3:8a:95:d5:54:44:94:9e:1c:21:27:fd:
73:6e:56:22:42:03:15:69:ba:8e:39:33:d6:b2:e2:
67:61:55:d5:63:37:55:b7:ad:04:5e:86:76:fb:fe:
7f:e3:17:46:1a:16:81:04:c9:df:70:ca:63:2b:a1:
64:8c:01:d9:14:18:69:d5:28:37:11:b0:83:23:a0:
ab:60:d7:6b:82:53:d6:fa:88:e6:13:38:74:89:cd:
20:34:d6:5c:19:1f:be:ef:25:92:b8:06:1e:22:74:
ef:51:ac:2c:c4:5c:19:5f:69:d8:88:34:63:2e:95:
44:fe:1f:24:0f:fd:bd:ee:84:01:6c:ab:a6:0b:14:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:09:C2:13:ED:DD:60:A7:6A:1A:95:8D:AC:4A:3F:1A:95:2F:E2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9fgJwhPt3WCnahqVjaxKPxqVL-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.203.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8d:67:02:95:c0:43:c5:86:79:e5:0b:cc:aa:30:f3:3e:a1:
b5:b5:b7:7b:50:c3:34:98:c6:1f:04:9d:a0:6a:3a:70:44:c4:
de:d5:6b:83:31:9e:38:5f:50:47:28:fb:df:73:4a:6b:f7:65:
4b:f6:f9:23:4e:f9:3c:a6:33:37:77:fc:40:ee:ef:10:f4:e6:
70:e0:36:a7:5a:52:ac:68:0f:bd:67:a3:28:05:99:6c:a0:7b:
3c:fe:ca:17:30:d8:7e:46:75:bc:93:ca:f8:13:2c:56:ee:f7:
05:10:bd:9a:b3:48:7d:66:ed:82:f6:86:58:bd:b0:67:ff:6b:
97:20:30:2f:11:41:e4:fa:1d:ec:b6:5e:0e:3e:8f:47:e5:a2:
e1:51:b0:b7:a4:83:95:84:93:16:29:8d:c3:e1:87:48:fe:59:
15:21:7d:c5:ae:ee:d5:f3:70:9e:3f:27:6a:fd:d7:7c:a3:f1:
40:51:c1:f4:51:9f:dc:29:df:82:de:dd:e6:2f:58:10:72:1f:
a5:e7:61:9d:66:5f:ba:ad:2d:3f:02:2f:32:48:e8:c8:b7:bc:
b4:c9:9e:c7:91:d2:99:15:75:dc:1e:5e:cd:7e:d6:aa:a7:ac:
41:d9:c8:3c:70:2a:d6:c0:ee:2f:60:36:b4:3b:71:4d:25:24:
2d:9f:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org