Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cYaXXDmu1jLU0qod0hoxtv0f-sA.roa
File: cYaXXDmu1jLU0qod0hoxtv0f-sA.roa (raw, json)
Hash identifier: msnNaOy7cFS9mZQMN5ukmRH2+Geq8YhJKfDdnrUAI7Q=
Subject key identifier: 71:86:97:5C:39:AE:D6:32:D4:D2:AA:1D:D2:1A:31:B6:FD:1F:FA:C0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49333F96E31FAE9605F6C0B639E4AC9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cYaXXDmu1jLU0qod0hoxtv0f-sA.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 93.114.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 10:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:33:f9:6e:31:fa:e9:60:5f:6c:0b:63:9e:4a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7186975c39aed632d4d2aa1dd21a31b6fd1ffac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:3d:58:0a:ab:60:17:72:72:4a:23:2b:b6:
19:c8:c8:6f:7d:0e:de:ef:4d:72:21:13:4a:1d:b7:
c9:28:8a:e1:e9:5f:64:56:d7:c7:14:04:99:3a:d8:
c2:b8:39:6d:ea:cf:bc:0f:29:88:c9:72:76:5d:f7:
af:44:d4:a4:01:1b:cd:35:5e:33:77:c7:22:ea:e6:
54:c6:bb:fd:38:1e:a7:77:5c:ee:72:75:b9:0e:e9:
9d:f5:46:0c:c5:e4:10:3e:37:01:e1:a0:fb:3a:19:
0a:a7:d0:d3:6d:77:a7:fa:96:5a:ca:06:f5:d9:26:
04:93:c8:04:db:4e:81:3f:dd:8d:16:e7:e4:ed:08:
89:22:e4:64:0d:f0:a4:10:20:c0:5e:53:76:d0:7c:
a5:91:8c:f2:c4:43:63:30:68:78:ec:7d:33:e8:f3:
f9:f5:c5:c7:2e:d4:c4:ff:66:71:4a:4f:53:1b:fd:
c4:33:74:f0:93:61:39:19:7a:32:b5:d8:02:d6:5a:
8c:36:63:77:91:0c:77:89:6b:1a:57:08:e9:b1:97:
59:74:1e:60:f1:c2:05:e0:18:76:c5:e4:24:a9:0a:
95:67:3e:c3:da:e4:27:96:3e:df:5e:59:91:2e:71:
da:32:d5:e1:e8:82:21:85:c8:19:25:81:04:14:34:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:97:5C:39:AE:D6:32:D4:D2:AA:1D:D2:1A:31:B6:FD:1F:FA:C0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cYaXXDmu1jLU0qod0hoxtv0f-sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.244.0/24
Signature Algorithm: sha256WithRSAEncryption
69:95:70:4d:bc:c7:ca:22:a8:89:ce:a3:0f:1c:e7:60:9e:e5:
be:16:f3:be:3b:63:bc:c9:70:ee:49:dd:ba:41:61:48:21:9e:
af:e0:cf:ee:ec:25:e9:f2:f6:b2:b9:c4:4e:ca:42:79:56:09:
0a:b8:9c:5c:ae:f1:d1:c1:64:90:36:08:13:c9:49:30:87:14:
3d:78:05:77:66:1e:61:9a:75:10:98:60:a3:a0:20:10:f7:18:
5a:d7:70:08:77:78:78:a1:d8:bb:da:84:7f:1c:2c:bb:05:2e:
00:17:5b:f8:d5:3b:22:49:3d:53:38:d6:7b:ea:47:01:d6:27:
95:1f:3e:b0:6e:12:89:09:e4:b1:df:f8:35:37:6d:07:18:0f:
0f:71:64:e0:73:77:66:cb:61:93:9d:69:8f:86:29:cf:29:f9:
21:dd:92:ef:0b:3e:8e:be:34:66:30:b4:e0:e2:62:06:76:c7:
25:30:55:38:d4:6a:5b:89:89:86:92:03:d8:bf:03:e1:e0:97:
45:bf:89:70:2d:74:4f:9d:f9:cb:b7:3f:ce:63:96:ef:08:f4:
ab:0c:ce:0a:89:d6:77:fc:1e:25:ef:fa:3b:5f:e7:dc:41:1d:
38:9f:55:e5:1d:4f:1e:24:ef:43:88:a9:90:51:4f:8e:15:ff:
09:3c:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org