Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RXZF1HC-uMxC49ppFew-2bZQIgw.roa
File: RXZF1HC-uMxC49ppFew-2bZQIgw.roa (raw, json)
Hash identifier: +M3ZrUQ94pXphdZKbKImihQyUR5JQAETZtIVC3cwD/4=
Subject key identifier: 45:76:45:D4:70:BE:B8:CC:42:E3:DA:69:15:EC:3E:D9:B6:50:22:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192E24BF4D2AE58C65793726A26ED93933B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RXZF1HC-uMxC49ppFew-2bZQIgw.roa
Signing time: Thu 31 Oct 2024 11:18:01 +0000
ROA not before: Thu 31 Oct 2024 11:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 93.113.255.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 13:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:4b:f4:d2:ae:58:c6:57:93:72:6a:26:ed:93:93:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 31 11:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=457645d470beb8cc42e3da6915ec3ed9b650220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:ef:60:fb:6e:69:11:34:5b:bd:75:63:2f:
9d:fd:b8:b6:bd:af:67:70:c0:e3:99:fb:ea:75:ce:
ee:d8:69:42:59:90:f2:51:af:b0:19:1c:df:12:19:
9d:ae:ea:aa:d1:84:8d:ba:10:76:d9:50:ee:f3:1e:
7b:59:3b:cd:c1:10:fb:e5:70:57:69:3b:83:ac:06:
f1:55:6c:58:91:87:f2:2e:49:b5:51:7a:b6:58:52:
f5:25:21:a9:be:ea:d8:6a:94:11:55:15:68:30:41:
6e:67:62:58:b8:cb:8d:69:21:37:d4:2b:6f:84:2c:
81:f9:6e:2c:0f:32:b3:99:f6:f5:8e:0f:17:b0:c8:
5b:70:46:08:21:36:ca:72:bd:77:8e:d7:32:20:51:
ff:84:6f:ea:40:d7:bc:01:a5:cc:c8:a0:1b:84:87:
06:e3:04:11:9c:23:9f:dc:f8:ab:b9:af:0e:cb:0c:
c3:69:72:b6:b2:30:5d:d0:88:fc:18:40:3c:cf:5f:
40:c9:7a:d1:c5:06:af:a4:76:5b:39:a6:b9:63:3f:
12:73:46:8b:f1:be:5d:48:fd:cf:d5:30:fb:8d:d5:
48:e7:ce:1b:31:e7:ba:89:db:50:01:b3:d3:c5:84:
98:a5:a6:5d:d1:92:b0:4f:3a:46:b1:82:48:7e:b8:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:45:D4:70:BE:B8:CC:42:E3:DA:69:15:EC:3E:D9:B6:50:22:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RXZF1HC-uMxC49ppFew-2bZQIgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.255.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1c:63:60:40:88:1f:d2:3f:9a:da:fb:a5:1a:2a:08:e4:44:
d0:0d:7b:40:b0:88:2b:02:8e:08:06:2a:10:b0:5c:9c:f3:e1:
70:b4:04:90:af:3d:50:70:6e:18:3a:0a:9e:cd:d3:dd:0a:67:
91:ec:a4:e0:db:e7:60:23:0d:ad:19:d1:68:e4:0c:9a:2d:b9:
91:9d:42:dd:c4:fb:f4:99:6b:7e:03:87:1a:b1:c5:ba:ce:9b:
fd:61:cc:76:06:af:18:5b:2f:06:1c:8e:a1:df:2b:50:b4:44:
a2:80:4e:4c:bd:f6:b2:2b:ef:62:8d:91:06:96:22:34:02:d3:
e8:fb:ef:62:d6:4e:c3:79:1a:78:c2:9a:9b:23:4b:e7:e8:98:
db:97:eb:a6:83:54:2c:6f:eb:ea:51:c1:41:73:dd:41:2c:0b:
0e:83:02:c7:7a:2d:35:19:43:57:ea:3c:55:af:0e:0a:1f:80:
22:31:ba:60:b6:05:af:75:63:c8:f6:f3:c2:49:64:e3:03:71:
64:b3:a5:83:af:eb:d0:6a:de:8f:51:88:80:c7:cc:cd:ad:15:
ff:51:18:f3:36:22:f3:e9:7a:64:ad:79:4f:13:e0:d9:12:4e:
b5:15:75:01:f2:a9:a7:2b:eb:49:09:b8:2e:b5:c3:49:bd:8f:
75:78:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org