Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AIUMtToEdPVZqo7qXtxbaUQh8_Q.roa
File: AIUMtToEdPVZqo7qXtxbaUQh8_Q.roa (raw, json)
Hash identifier: kHxbdcxcnBoQDgwKLnIrpRPxfIU5yZl3BwFd2hTdPdQ=
Subject key identifier: 00:85:0C:B5:3A:04:74:F5:59:AA:8E:EA:5E:DC:5B:69:44:21:F3:F4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186037029E46391BBABD76DC7564665569B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AIUMtToEdPVZqo7qXtxbaUQh8_Q.roa
Signing time: Mon 30 Jan 2023 16:08:47 +0000
ROA not before: Mon 30 Jan 2023 16:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 93.113.171.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:70:29:e4:63:91:bb:ab:d7:6d:c7:56:46:65:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 30 16:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00850cb53a0474f559aa8eea5edc5b694421f3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:8c:4c:6b:17:7b:e2:8c:25:c0:8d:f6:00:
16:f1:c7:8d:49:82:9a:83:f5:03:0c:c3:1e:b3:b2:
92:08:94:95:de:a6:50:6d:d6:53:8f:3f:c2:28:79:
28:cb:8a:12:1c:0e:32:3a:18:3d:d8:17:86:c0:d8:
bc:96:6d:00:f1:19:8a:8b:f7:d4:93:a5:e1:99:dd:
6e:73:76:f2:4a:4d:82:84:42:c2:37:6a:0b:b2:13:
85:bb:d2:6e:d3:46:50:b6:d3:74:c9:46:9e:14:f1:
78:ba:a4:7e:b0:ae:f3:50:51:82:5a:51:4a:8d:b5:
d2:e8:27:79:30:44:35:a4:bd:8e:76:99:60:c1:9c:
b6:85:25:f2:e6:53:cb:c5:8d:b6:c1:52:b7:30:8e:
17:f7:d3:a9:22:e3:8e:49:5b:f2:4a:d1:a5:d4:17:
70:86:00:01:cc:11:4e:5c:a9:74:e9:05:0f:7b:df:
8b:9c:1c:b8:f8:7b:77:39:c9:23:94:0d:8b:fc:ad:
44:6c:78:a3:23:7e:27:04:e3:e8:51:ba:c0:d6:33:
53:e0:75:a9:68:8b:58:d0:01:e3:c0:b5:a5:7e:af:
bc:93:77:43:b4:0a:da:e7:43:5e:83:2a:79:d3:ea:
22:c0:f2:f3:39:fd:c5:7e:0b:aa:78:7b:82:41:56:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:0C:B5:3A:04:74:F5:59:AA:8E:EA:5E:DC:5B:69:44:21:F3:F4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AIUMtToEdPVZqo7qXtxbaUQh8_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c4:bc:a9:f0:9b:12:78:e0:b3:50:ca:2b:42:43:ec:13:5a:
ee:65:03:59:a3:45:3a:e0:38:b9:6f:9a:15:75:7a:d3:a4:29:
65:4a:23:46:c7:d9:e8:e4:3f:d0:ed:c6:14:04:d7:f7:40:84:
36:9f:23:39:fb:68:ad:42:70:dd:1f:ae:e2:30:48:b5:87:a9:
87:3b:68:a2:6e:15:86:11:99:64:b0:b2:92:fa:fc:08:61:ac:
ed:2a:39:10:f9:42:b1:ae:82:39:2f:50:64:86:b5:df:42:ea:
71:2d:2f:a1:fe:54:d6:77:be:57:d3:b0:be:0e:15:e3:a7:19:
0b:9c:42:ff:63:db:77:87:39:38:10:a2:89:cc:46:14:2c:6c:
eb:c4:88:66:63:da:9b:84:bb:ca:ca:b8:58:5a:5a:a3:aa:fe:
c7:dd:38:fc:6a:58:66:81:c2:59:6d:fa:bd:81:4c:5b:9c:94:
1e:23:a5:d7:dd:e7:83:74:68:af:85:0c:37:0a:ea:86:0d:ee:
31:2a:b3:76:07:e3:82:fd:de:3d:f3:e7:74:92:17:7e:1a:bc:
1f:f9:d2:b0:f7:77:c2:8b:69:a4:f0:3a:b4:4b:df:f0:49:14:
f2:9e:77:10:7e:d1:58:12:a0:7f:66:9e:f1:d3:be:79:5e:87:
6e:73:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org