Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fHchUM6WJbo9u0Ronu-3TNdvngc.roa
File: fHchUM6WJbo9u0Ronu-3TNdvngc.roa (raw, json)
Hash identifier: i9YK1aL4jGY5H5ffvQMHSnFhA/V7aNd4MS7DoQYSrkM=
Subject key identifier: 7C:77:21:50:CE:96:25:BA:3D:BB:44:68:9E:EF:B7:4C:D7:6F:9E:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187C30C62AB6F6E14BC62630F54E23D4246
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fHchUM6WJbo9u0Ronu-3TNdvngc.roa
Signing time: Thu 27 Apr 2023 14:09:41 +0000
ROA not before: Thu 27 Apr 2023 14:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 188.213.216.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 07:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:0c:62:ab:6f:6e:14:bc:62:63:0f:54:e2:3d:42:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 27 14:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c772150ce9625ba3dbb44689eefb74cd76f9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:e0:da:16:fb:ba:ad:c8:8d:23:84:e8:42:
cd:35:96:b7:59:1a:f8:6a:81:09:b1:cc:24:83:c5:
a7:e5:e8:f8:8d:d6:cb:cb:6e:36:e3:5b:98:31:64:
86:86:a4:2a:2d:16:1f:bb:a1:08:70:07:7c:99:d8:
e4:d2:d4:dc:bc:b8:22:51:94:3f:17:81:84:45:be:
18:3c:0b:05:45:d4:cc:cf:12:4e:01:88:66:be:5e:
63:0b:8e:57:23:d6:02:ba:de:4d:a3:48:c8:54:69:
7c:ef:85:69:40:0d:98:c3:60:d8:2e:4a:b2:e9:b8:
a1:99:82:21:c5:37:92:2e:ec:d6:e3:d3:2f:7a:4c:
e4:2d:0a:96:bc:9c:f7:dc:6f:ef:9f:8f:ca:ff:4b:
79:a8:2f:02:57:cf:d6:15:86:bf:6a:08:b4:f2:f7:
cd:13:59:ff:db:18:f7:e6:2e:e2:50:54:8a:ed:69:
fa:67:e8:7d:9c:98:b8:02:b6:5c:6b:79:7d:b4:e7:
20:35:3d:3a:82:fd:98:44:b6:d4:5f:17:c9:97:5a:
0c:ae:88:15:e9:d7:9d:9a:9d:a3:5c:af:ea:9c:c7:
ed:91:2a:87:84:26:b5:aa:59:58:6d:b1:86:8b:97:
56:aa:e9:55:8c:46:2a:08:e4:69:2d:a5:b1:76:b0:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:21:50:CE:96:25:BA:3D:BB:44:68:9E:EF:B7:4C:D7:6F:9E:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fHchUM6WJbo9u0Ronu-3TNdvngc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.203.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d5:63:0a:a5:97:a7:9c:fc:e0:3f:94:e2:de:c6:72:64:9d:
88:de:fd:73:d9:6e:04:29:b7:17:c4:42:53:6e:61:28:39:27:
32:78:a6:be:c7:58:50:77:b9:13:52:31:58:2b:ef:35:69:27:
aa:e2:21:b8:d2:a0:29:00:bd:97:b7:63:ba:34:ae:17:93:2e:
00:6c:e2:c9:97:f4:95:66:a5:78:bf:70:d2:3d:ef:76:e1:25:
d9:92:1c:aa:72:13:98:c7:22:1d:3e:ba:b1:d8:ef:a7:5b:d6:
d8:11:80:47:83:7b:99:96:d0:7e:57:11:8b:92:c2:33:84:3f:
62:81:8e:59:9b:83:c0:ae:b3:c1:ac:e9:b8:68:ee:9a:2a:f3:
4c:bb:40:bb:31:f9:fc:98:d4:f6:34:d7:ed:6d:90:a9:6e:2f:
a5:a0:dd:07:37:a9:3b:39:78:0b:2e:c1:9c:d2:bb:db:a9:cf:
af:0b:6a:b1:fa:c8:79:0e:37:d2:68:75:06:1a:8d:bc:2f:a2:
de:ac:61:f6:c2:b6:10:74:05:8c:25:63:16:e2:f9:4f:f5:7c:
f9:91:3a:ef:d7:af:cd:ba:f5:36:1d:70:92:fe:ea:81:16:91:
73:f6:d0:09:1f:60:72:1a:97:c6:b1:78:44:2b:c9:06:ab:f8:
f1:3f:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org