Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OfZ5LuKX06VfkRomvYGhygmyyc4.roa
File: OfZ5LuKX06VfkRomvYGhygmyyc4.roa (raw, json)
Hash identifier: yJumGVVhKECdMMV6mo8xzINnZmbd9f3/WpqWXXyXILY=
Subject key identifier: 39:F6:79:2E:E2:97:D3:A5:5F:91:1A:26:BD:81:A1:CA:09:B2:C9:CE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A6B16DAD6B66C2C49B2B953B75152C193
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OfZ5LuKX06VfkRomvYGhygmyyc4.roa
Signing time: Wed 06 Sep 2023 15:22:54 +0000
ROA not before: Wed 06 Sep 2023 15:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 93.114.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 09:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:16:da:d6:b6:6c:2c:49:b2:b9:53:b7:51:52:c1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 6 15:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f6792ee297d3a55f911a26bd81a1ca09b2c9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:15:f9:57:2f:18:26:32:f5:e0:6f:60:2d:
3e:dc:29:9b:0a:ff:84:db:d0:33:3d:a8:56:25:9d:
21:83:94:01:c5:08:1f:9c:93:23:c9:a4:cd:80:c4:
03:ec:bb:27:3f:87:9c:30:55:6f:dd:2f:2e:74:42:
3e:24:95:3c:a3:a4:92:0e:ca:9d:05:df:f7:db:ec:
d0:4a:3f:6d:2e:45:4c:2a:90:0c:43:cf:3e:d0:a5:
63:dd:eb:80:03:32:d5:f8:0c:7a:47:16:1c:c9:a4:
fc:44:f1:d5:28:b6:c0:be:64:5a:fc:c6:b5:ec:52:
89:cb:eb:dd:b0:43:37:08:d3:fe:d3:61:02:39:da:
bf:1f:67:eb:8a:2e:8d:28:78:97:62:d0:67:11:51:
71:99:3d:ae:e2:03:93:90:a2:e3:7a:31:7b:a0:c2:
da:cd:3c:02:33:5c:7b:4f:82:c9:8e:c9:7c:66:3b:
87:fa:ca:ac:60:72:f6:e5:c1:6b:11:88:e3:df:91:
5a:57:b3:45:af:a4:07:14:8b:93:28:45:2d:b3:39:
f2:60:2f:78:a6:76:de:8e:86:d1:0e:b1:ed:4e:36:
a3:f0:83:fa:df:f5:18:8a:0f:aa:bb:90:fe:c5:c9:
1a:3b:71:19:49:79:c8:87:48:73:85:3f:49:52:46:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:79:2E:E2:97:D3:A5:5F:91:1A:26:BD:81:A1:CA:09:B2:C9:CE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OfZ5LuKX06VfkRomvYGhygmyyc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a9:73:54:b8:c5:ed:51:65:37:ed:1c:7c:90:a7:a2:09:7e:
30:82:73:78:57:14:a1:4b:86:46:c7:77:61:eb:64:be:a6:da:
dd:06:7c:2f:39:79:17:79:ec:c8:5f:75:3f:1d:8a:38:71:28:
28:42:09:7e:a3:6b:c8:c0:a4:ce:28:62:c6:a0:9e:e7:7a:b0:
34:d6:b6:19:11:d9:e0:00:3e:24:09:50:2c:dc:a6:d1:bc:95:
1a:72:f2:2a:86:78:35:54:e6:57:22:2d:be:be:6e:31:d8:b0:
a1:f8:78:97:89:c6:fe:40:d7:4c:a8:4c:81:0e:7f:eb:87:84:
e3:63:f2:56:2a:92:62:a1:3e:3d:fc:21:87:7b:67:aa:2d:11:
93:ab:58:20:78:a5:65:78:e1:9e:05:55:9f:79:a4:91:99:78:
6d:1a:6b:53:02:a1:a9:97:fb:17:ad:5b:c5:7c:89:ad:53:a3:
f0:72:64:21:f4:d4:6c:fb:e2:f4:ef:d2:f9:69:f3:76:27:cd:
8d:2d:d8:e0:2a:31:a5:b0:6e:b9:cc:c9:3c:de:f6:97:45:42:
8a:45:3e:71:07:93:49:36:d7:97:e5:30:dc:dc:ed:6e:ea:c5:
cd:43:eb:1b:4f:ca:41:fc:ac:0e:d1:17:08:78:ce:5f:c9:c8:
ef:b2:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org