Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ALDlmOyPbsybKFDgOpRgNNIJbiQ.roa
File: ALDlmOyPbsybKFDgOpRgNNIJbiQ.roa (raw, json)
Hash identifier: orlm5irNr0qgJA+ULcgo5xLo4BK1FT/rr13IhHUz0Jo=
Subject key identifier: 00:B0:E5:98:EC:8F:6E:CC:9B:28:50:E0:3A:94:60:34:D2:09:6E:24
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49340137E12B717A2FE47888485492E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ALDlmOyPbsybKFDgOpRgNNIJbiQ.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210107
IP address blocks: 93.90.75.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:13:7e:12:b7:17:a2:fe:47:88:84:85:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00b0e598ec8f6ecc9b2850e03a946034d2096e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:ef:22:d7:d0:d5:94:e2:16:0b:09:0d:58:
3b:38:9f:dd:6c:c3:0a:76:e6:8c:81:8b:81:21:ad:
d9:d6:99:32:e3:7e:0b:0b:64:72:c9:2f:84:23:57:
6c:74:d2:40:f6:88:99:d9:33:43:dc:cd:e8:0a:e2:
e0:94:b0:5b:71:d7:1d:ed:0d:26:b1:86:76:fa:e4:
34:de:66:3c:96:8c:16:d0:0f:a4:3c:77:7c:aa:20:
c1:be:8a:dd:13:17:84:6c:52:17:7b:b5:98:c2:87:
bd:34:ea:ed:01:6e:59:8b:36:c7:ea:da:a9:55:70:
8a:c0:36:60:73:cb:66:ae:40:bd:0c:cc:c8:3c:ae:
7a:9e:d8:1a:d0:d2:43:00:63:4b:91:d5:c0:13:1a:
b4:64:1f:51:8f:c6:69:36:91:ca:b9:b0:c7:22:d2:
8c:d0:3c:65:6e:d6:f8:b7:0d:11:01:aa:3c:a2:a9:
f0:34:e4:12:ea:65:65:f7:ff:23:01:4a:5e:87:d7:
fe:d4:4c:ee:2f:08:80:76:35:05:2c:be:b9:f2:00:
44:d9:e5:dc:cc:08:ae:43:4a:a4:06:68:79:4f:94:
d5:e6:8f:00:76:f7:30:18:33:52:da:6e:41:ac:8f:
71:73:91:85:69:0a:73:b0:70:be:26:e2:62:0b:94:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:E5:98:EC:8F:6E:CC:9B:28:50:E0:3A:94:60:34:D2:09:6E:24
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ALDlmOyPbsybKFDgOpRgNNIJbiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.75.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
60:45:f2:b0:a6:15:9b:dc:f0:0a:52:14:60:1c:58:75:03:59:
4b:3b:42:9f:1d:f0:d2:a3:0f:b5:db:0e:fa:67:aa:d5:eb:70:
ae:92:47:5e:cc:e4:11:97:91:aa:12:62:ec:b5:3a:ea:fc:e5:
6c:57:c6:49:28:98:7b:4e:3d:ab:a9:9c:d6:aa:87:38:ff:26:
d4:e1:f4:54:d3:b0:4e:4b:3e:ac:c7:05:1e:0e:82:f5:a1:78:
45:72:56:b9:73:da:d4:89:c3:7b:58:b6:a7:88:08:80:f5:b7:
b7:76:2f:5b:7c:0e:41:ba:41:8d:a0:34:b5:11:5c:e1:57:ba:
0a:2a:57:25:26:35:6a:ab:53:07:34:7e:88:53:80:68:0e:f7:
e0:fa:8d:c0:82:ff:33:f2:9f:11:ad:9c:72:f3:36:88:79:7c:
a2:8b:94:7f:82:af:27:8e:05:03:46:d1:f3:0d:ae:0f:6c:2f:
29:c7:b6:99:41:d7:1b:3e:d0:b4:c5:73:4a:2a:95:e6:92:98:
fe:8f:6f:db:e6:22:b8:da:4f:48:85:ea:5b:6b:1e:06:1f:66:
af:a6:0d:98:56:5b:a4:23:4c:d3:1f:2c:10:74:ad:9a:2a:11:
c9:ee:fe:c7:d2:37:88:d6:b5:5e:18:ba:b0:20:c8:09:d0:58:
c8:49:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org