Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F7elPhVYx42Q6xjvGYCUl1iplZE.roa
File: F7elPhVYx42Q6xjvGYCUl1iplZE.roa (raw, json)
Hash identifier: 4bFzG4Uey9aun1F5iRDwf9jCBuSqUhXM3PVvVAp/N1M=
Subject key identifier: 17:B7:A5:3E:15:58:C7:8D:90:EB:18:EF:19:80:94:97:58:A9:95:91
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190A29A86C783728BBE6AF22215770D5A2A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F7elPhVYx42Q6xjvGYCUl1iplZE.roa
Signing time: Thu 11 Jul 2024 16:22:34 +0000
ROA not before: Thu 11 Jul 2024 16:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 93.113.255.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:9a:86:c7:83:72:8b:be:6a:f2:22:15:77:0d:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 11 16:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17b7a53e1558c78d90eb18ef1980949758a99591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:ef:6c:18:aa:ff:57:79:22:db:50:dd:15:
45:7e:30:24:e3:4f:34:62:97:43:ba:54:4f:5a:c6:
06:7f:51:32:ed:20:65:51:ad:b3:e2:66:e8:b4:e7:
24:e6:91:ff:aa:ed:df:20:af:e2:db:b9:90:f1:17:
bd:38:52:a7:b5:6d:b3:73:a9:8d:ab:26:ff:33:f8:
bb:60:c5:8a:74:44:56:32:79:07:e5:52:38:88:c4:
48:eb:84:b9:0b:41:25:5f:81:96:a4:fd:ca:82:a9:
9b:86:f0:75:0a:60:af:f9:5c:c0:9b:75:bc:d6:cf:
ab:ff:58:08:38:4c:bf:fe:80:eb:15:7f:da:6e:c8:
ab:21:ed:e6:b8:46:de:d6:98:e7:ab:68:dd:3c:0f:
3b:7f:7e:1a:33:12:dd:21:62:5c:de:fd:ed:8c:c0:
31:f0:7e:b4:90:dc:96:4b:dc:ac:4d:2e:00:74:7e:
43:85:14:e7:b3:7f:82:02:87:bf:0d:b6:c9:4b:4f:
87:b2:65:43:41:74:04:66:8f:ea:0a:3c:b5:c0:ca:
25:60:d9:a5:f9:f7:11:f0:fa:b0:24:29:23:08:91:
c3:3e:fb:64:49:08:36:1e:2d:ea:af:7a:c7:92:49:
5b:a0:ca:1c:a0:f7:01:97:06:de:97:6d:32:7d:ae:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:A5:3E:15:58:C7:8D:90:EB:18:EF:19:80:94:97:58:A9:95:91
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F7elPhVYx42Q6xjvGYCUl1iplZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.255.0/24
185.141.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bc:37:bd:39:ba:40:d9:76:42:a9:27:3a:b1:20:70:46:d0:
ec:d6:31:b7:bd:11:23:01:a6:0f:93:05:42:fb:bb:6c:bb:b3:
83:df:e6:ab:00:6b:2f:21:5b:48:5f:49:cd:37:bc:95:af:c6:
f5:84:6c:75:0b:2f:20:d9:32:87:4f:3d:26:9a:17:8b:32:44:
b6:ca:4c:e9:b2:0a:aa:e8:6f:74:81:76:2b:43:fa:d9:e3:b1:
ae:0b:db:5e:5f:e0:a2:31:f4:1c:04:61:99:e6:ad:a9:48:5f:
d6:3f:bf:ba:21:22:3b:76:b7:7d:f2:92:b5:d9:17:b1:55:3e:
13:76:e9:cb:3f:80:19:0c:db:3b:54:68:a3:fd:86:c6:09:09:
e8:5d:17:10:95:42:c5:e5:ba:0a:03:d3:d0:16:70:ef:cd:42:
3c:88:40:d4:f2:ba:34:e4:0b:71:e4:8f:9c:1e:04:5e:82:5a:
a6:4a:50:9d:d8:f7:b7:80:81:02:b5:c5:9c:58:9f:df:3c:5d:
f0:79:da:fa:3a:57:28:a6:28:a6:35:fd:63:31:83:f8:2c:6c:
ac:0a:bc:39:b2:cc:69:29:87:87:90:88:2c:83:e9:69:3b:4d:
fa:69:01:88:57:82:9f:5b:ec:04:d1:5b:ee:2c:79:d2:c3:13:
b7:08:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org