Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iyhTDApQh3CA6Lly0b0HyWGjN4w.roa
File: iyhTDApQh3CA6Lly0b0HyWGjN4w.roa (raw, json)
Hash identifier: A5C1JFe+ABPMrFtkmD0NQk1iNcNuYd9i0crGcXSw9AE=
Subject key identifier: 8B:28:53:0C:0A:50:87:70:80:E8:B9:72:D1:BD:07:C9:61:A3:37:8C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DFA98B6CBDD4770018824FEF1E46B73D0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iyhTDApQh3CA6Lly0b0HyWGjN4w.roa
Signing time: Fri 01 Mar 2024 15:18:48 +0000
ROA not before: Fri 01 Mar 2024 15:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:98:b6:cb:dd:47:70:01:88:24:fe:f1:e4:6b:73:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 1 15:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b28530c0a50877080e8b972d1bd07c961a3378c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:fd:db:c3:3d:e3:dd:94:45:34:d3:c8:6a:
f6:82:2c:c2:34:6e:a5:96:d9:32:02:16:6b:2e:c8:
a5:de:50:e4:e8:02:f1:d1:c7:a3:a3:75:74:90:b2:
f3:6e:df:8c:01:96:47:f9:64:f7:b5:d8:e4:60:d1:
a9:b4:ea:a1:c0:23:2e:d6:03:af:e3:c0:c0:2e:0a:
a2:93:7c:fb:cc:3e:16:1e:92:35:20:b9:e2:31:4f:
83:35:fa:cb:82:c3:f6:bf:28:ca:c1:2d:ba:ea:21:
c4:09:36:d1:72:8c:5f:3e:cd:d7:ab:4c:18:fc:01:
50:e9:79:0a:35:53:14:fc:83:c6:80:22:f0:56:08:
63:b7:fe:8f:f3:98:73:ed:d5:28:d8:64:d3:b4:a1:
d3:7a:47:56:81:4a:6e:83:af:4b:6d:d7:73:b6:e4:
17:80:78:28:3f:f9:26:c6:e2:22:01:4e:a9:7a:1c:
0e:0a:73:f2:45:8c:f2:fa:85:86:e5:bf:17:6e:32:
40:50:ed:08:9e:2e:af:90:51:a2:1c:99:78:fb:3d:
fe:0b:13:d4:2c:f5:a9:f5:ea:78:d6:ed:9d:64:43:
e0:4c:93:cb:7a:19:33:e4:fc:91:64:db:1c:8c:b3:
b6:93:24:65:52:a9:2c:97:e5:a9:da:9c:11:76:e9:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:53:0C:0A:50:87:70:80:E8:B9:72:D1:BD:07:C9:61:A3:37:8C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iyhTDApQh3CA6Lly0b0HyWGjN4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e2:94:a8:a5:f2:ab:0d:23:91:85:c6:47:f2:58:33:ae:de:
c2:6b:4b:33:f5:68:ac:cf:b7:b9:0b:7a:e1:ea:a6:90:d6:13:
fc:cf:04:c2:58:23:c5:93:5d:cb:52:91:94:2d:30:6c:56:c1:
1f:52:d0:f2:66:84:37:0e:4a:79:b1:e8:70:43:36:13:49:f7:
07:19:49:e2:71:8e:6b:dc:95:ea:4f:ea:f1:ae:58:da:e7:ed:
2d:1a:fb:fa:35:72:90:c1:a6:ed:76:a7:61:ec:cd:94:fd:be:
5e:e3:dd:a7:f3:9c:9f:33:63:b9:6d:ba:62:d2:96:01:72:ec:
e6:b4:00:4f:aa:67:ed:b0:81:8d:6c:8c:6b:35:aa:03:c1:db:
9a:9c:a0:8c:24:90:15:a3:aa:8a:15:5c:07:b7:6d:63:f2:d9:
d7:85:65:8f:b4:55:c7:b0:58:20:5c:5b:3b:33:dc:9d:d6:cd:
0b:21:ad:c6:ef:39:13:bc:f0:88:c0:b9:d6:ec:72:53:15:e9:
1e:b7:40:7f:6c:d1:f1:cd:3f:90:84:0e:95:98:f1:83:e2:f7:
12:b9:e3:49:7a:28:64:11:aa:fc:46:ae:12:f5:1a:aa:38:fe:
63:94:09:a4:a7:6e:ee:d2:08:26:78:78:42:05:97:dc:e0:04:
b4:6c:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org