Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/au6xZzU1IyIdseHHx08HQ_AB5QU.roa
File: au6xZzU1IyIdseHHx08HQ_AB5QU.roa (raw, json)
Hash identifier: 0ICrkJ2iioftdrd2q1VqE1IFgF6bbB/dIF81Q3IhhLM=
Subject key identifier: 6A:EE:B1:67:35:35:23:22:1D:B1:E1:C7:C7:4F:07:43:F0:01:E5:05
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01928AB00F048407FB2D6E6111978C4C9BF1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/au6xZzU1IyIdseHHx08HQ_AB5QU.roa
Signing time: Mon 14 Oct 2024 11:00:46 +0000
ROA not before: Mon 14 Oct 2024 11:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 93.113.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 11:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:b0:0f:04:84:07:fb:2d:6e:61:11:97:8c:4c:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 11:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aeeb167353523221db1e1c7c74f0743f001e505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:e9:14:d1:ca:0b:65:1d:f0:68:7c:21:3e:
02:e8:14:b4:b7:e6:70:ee:62:28:6e:8c:f9:92:20:
7e:b3:4e:7b:81:bb:77:ab:18:8f:7e:06:79:30:9d:
a1:b3:b7:c7:d4:0c:e9:bf:77:c8:41:1e:9b:59:2f:
6b:c9:b2:46:d9:3e:4d:4a:9c:f6:23:3e:8c:7d:c8:
f0:4d:3a:09:d2:66:11:e1:a4:e7:ab:b2:4b:9e:15:
5b:bf:c4:ed:c7:1b:2d:a6:f6:c2:b2:f4:b4:df:23:
b2:3b:c5:a1:39:98:70:41:74:19:4e:1b:d7:5f:36:
66:9e:ae:87:f9:3e:c6:0d:c1:7e:a7:97:e4:d4:b5:
da:2c:7d:16:41:f5:4e:b4:94:31:b6:76:d7:4d:59:
95:4d:87:81:8f:a9:42:f7:1a:7a:3f:43:d6:7c:f7:
18:8e:7b:f2:1b:ff:eb:78:76:ea:e5:46:30:48:17:
91:67:87:c3:92:05:77:da:ec:44:a4:63:ee:13:d6:
7c:5b:b2:51:a4:f3:d2:de:5f:95:4a:ab:09:7d:af:
9e:fe:4e:62:1a:a4:c7:d8:10:5b:ca:e2:aa:dd:ae:
df:76:3e:2f:3a:b2:2c:2c:ed:59:a6:ea:45:28:e3:
61:88:be:0a:d5:87:27:89:7d:d4:99:3e:9e:9d:20:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:B1:67:35:35:23:22:1D:B1:E1:C7:C7:4F:07:43:F0:01:E5:05
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/au6xZzU1IyIdseHHx08HQ_AB5QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.255.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b8:9c:d5:56:e8:70:b7:f0:fe:1f:ca:b1:a8:17:ef:f0:5f:
f9:11:2b:fb:9c:3f:c3:3c:45:e1:8c:57:05:1b:cc:84:84:83:
f2:30:5e:7c:8b:c8:7a:bf:d7:59:ad:61:49:a9:f0:62:16:92:
85:ce:f0:4f:c3:33:ba:2f:6d:e2:c8:9f:6e:42:a0:7d:1c:88:
e4:f9:a9:3e:60:b6:db:c6:4a:92:6c:63:2a:eb:21:f3:ee:df:
b0:e2:03:de:0e:cd:07:66:57:41:4f:9c:7e:f9:ab:1a:f5:ab:
85:ed:e8:6c:4f:d8:4a:a7:0e:31:96:c5:7e:c7:78:a4:e7:b4:
dc:1c:ab:31:77:fb:9f:b8:45:70:55:29:ed:0e:62:b4:ee:75:
cd:81:fd:bf:e6:1d:8b:ae:df:a9:35:d2:5c:8a:94:43:26:a2:
a4:5e:f5:b3:c9:ba:9a:3d:8b:6d:98:d6:f5:de:8d:bb:aa:f5:
58:37:c5:94:7b:92:a4:29:36:bb:56:c7:2d:3d:61:c3:d0:74:
82:0d:35:75:b3:8d:7b:3d:aa:cf:72:85:e1:ec:50:6d:16:3e:
f3:86:71:16:03:fc:03:29:06:c7:0f:b1:0e:37:47:ce:fb:af:
ca:6b:49:75:da:8b:00:0f:ae:f4:d3:39:bb:1f:3c:1e:1f:3d:
5a:1e:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 13:18:32 2024 by rpki-client on console-fra.rpki-client.org