Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/E28RgNCwuRvkiay902IUOdk1r7Q.roa
File: E28RgNCwuRvkiay902IUOdk1r7Q.roa (raw, json)
Hash identifier: 0qwa52fVGlBiAJDUxBF0yEqnW+RGIsBHKvK8lJRR0I0=
Subject key identifier: 13:6F:11:80:D0:B0:B9:1B:E4:89:AC:BD:D3:62:14:39:D9:35:AF:B4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187706F82A6803CDF4998941823F28DFCF5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/E28RgNCwuRvkiay902IUOdk1r7Q.roa
Signing time: Tue 11 Apr 2023 13:09:28 +0000
ROA not before: Tue 11 Apr 2023 13:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 93.114.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 08:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:6f:82:a6:80:3c:df:49:98:94:18:23:f2:8d:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 11 13:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=136f1180d0b0b91be489acbdd3621439d935afb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:88:3f:d5:48:2a:1f:1c:d6:09:ae:c8:5a:
ae:c9:ed:65:68:80:8a:bb:5b:0f:e5:bf:ae:a7:9f:
08:ba:e5:e8:bf:13:0b:82:49:c4:86:a6:b6:c8:f1:
13:70:e2:ff:c0:5f:19:33:17:9d:cd:be:0d:07:7d:
90:3a:25:ff:e4:13:1f:a6:31:97:c2:e0:0b:8f:89:
9a:2d:b6:f8:90:fd:15:d0:ff:51:6b:ce:b3:0d:cb:
5b:92:36:8d:b2:b6:08:37:bc:03:01:ef:9e:3b:07:
f2:89:c8:7a:2d:93:c6:79:3a:c2:43:a4:3c:71:51:
e6:1e:7c:5e:8c:41:63:e7:e4:e7:ba:4e:2c:3a:a1:
81:1d:f5:b8:c6:24:61:5d:fb:c6:9c:f5:9f:55:2c:
a7:f5:8b:a3:71:4b:c5:fb:6a:9b:ec:a6:82:88:bb:
4c:87:02:59:7c:0d:f4:4e:e0:ac:08:d0:9e:2b:60:
bb:4a:61:7c:d0:ff:29:96:07:5e:01:60:42:ea:0c:
20:d8:c7:63:65:70:37:bc:41:9c:17:21:4f:6d:a1:
39:c7:82:50:30:d4:b0:37:4a:59:ca:ca:00:cc:51:
a3:81:92:3f:36:f9:95:79:26:78:38:0a:05:6d:af:
99:24:a9:f5:c0:97:30:b4:08:89:f4:ce:ea:f1:80:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:11:80:D0:B0:B9:1B:E4:89:AC:BD:D3:62:14:39:D9:35:AF:B4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/E28RgNCwuRvkiay902IUOdk1r7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.244.0/24
Signature Algorithm: sha256WithRSAEncryption
26:90:f6:87:7c:74:ee:66:5f:32:43:20:7e:87:77:17:92:54:
64:02:89:a8:2c:9b:04:2b:4a:ca:fb:b6:1a:26:08:fa:90:22:
04:16:7c:55:8e:5c:b6:27:9f:c3:cf:a5:92:79:17:6d:d1:41:
2a:14:77:38:c5:50:f2:56:3d:7f:54:8a:28:6c:95:cf:af:2c:
3b:01:1b:fe:39:7c:30:68:5f:a0:56:f3:38:80:54:10:87:e8:
94:32:c8:99:ac:b6:47:5d:9a:87:84:b4:bc:e9:99:07:59:0e:
01:3f:88:61:d9:a9:4b:6c:2a:d6:0b:81:ad:46:29:31:5e:bd:
4c:6d:8b:31:e3:42:71:9e:dc:eb:df:0f:38:24:8d:e4:87:eb:
a8:be:3f:d2:b3:c0:dd:c4:14:4c:fe:33:85:17:aa:be:d9:ac:
75:20:29:74:98:58:7c:4d:78:52:f9:3c:70:0c:34:fa:8c:7f:
5d:cd:8a:aa:01:c3:52:c4:72:cb:20:7f:e4:c3:a0:2f:28:4e:
ce:7e:f0:43:6b:18:4e:e6:0a:71:9e:b2:5b:9f:16:b6:10:f9:
30:05:b4:f8:47:e6:1d:23:4e:6e:9b:77:e9:4d:5a:6b:5f:33:
a1:26:07:82:4c:46:89:2b:59:c4:78:87:fd:4c:b1:44:ee:2a:
7d:66:1b:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdwb4KmgDzfSZiUGCPyjfz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNDExMTMwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzZmMTE4MGQwYjBiOTFiZTQ4OWFjYmRkMzYyMTQzOWQ5MzVhZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPiIP9VIKh8c1gmuyFquye1laICK
u1sP5b+up58IuuXovxMLgknEhqa2yPETcOL/wF8ZMxedzb4NB32QOiX/5BMfpjGX
wuALj4maLbb4kP0V0P9Ra86zDctbkjaNsrYIN7wDAe+eOwfyich6LZPGeTrCQ6Q8
cVHmHnxejEFj5+Tnuk4sOqGBHfW4xiRhXfvGnPWfVSyn9YujcUvF+2qb7KaCiLtM
hwJZfA30TuCsCNCeK2C7SmF80P8plgdeAWBC6gwg2MdjZXA3vEGcFyFPbaE5x4JQ
MNSwN0pZysoAzFGjgZI/NvmVeSZ4OAoFba+ZJKn1wJcwtAiJ9M7q8YBlPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNvEYDQsLkb5ImsvdNiFDnZNa+0MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRTI4UmdOQ3d1UnZraWF5OTAySVVPZGsxcjdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXL0MA0G
CSqGSIb3DQEBCwUAA4IBAQAmkPaHfHTuZl8yQyB+h3cXklRkAomoLJsEK0rK+7Ya
Jgj6kCIEFnxVjly2J5/Dz6WSeRdt0UEqFHc4xVDyVj1/VIoobJXPryw7ARv+OXww
aF+gVvM4gFQQh+iUMsiZrLZHXZqHhLS86ZkHWQ4BP4hh2alLbCrWC4GtRikxXr1M
bYsx40Jxntzr3w84JI3kh+uovj/Ss8DdxBRM/jOFF6q+2ax1ICl0mFh8TXhS+Txw
DDT6jH9dzYqqAcNSxHLLIH/kw6AvKE7OfvBDaxhO5gpxnrJbnxa2EPkwBbT4R+Yd
I05um3fpTVprXzOhJgeCTEaJK1nEeIf9TLFE7ip9ZhvO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org