Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pfDd_m4Mmdv9_EmKt-MvAdqn3PY.roa
File: pfDd_m4Mmdv9_EmKt-MvAdqn3PY.roa (raw, json)
Hash identifier: qiXWQAw0GzZC++0cZR9MzATwPf022JNDzDwykMet7pI=
Subject key identifier: A5:F0:DD:FE:6E:0C:99:DB:FD:FC:49:8A:B7:E3:2F:01:DA:A7:DC:F6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01856CAF2490E78B8CFC523D0A4CECB9C18C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pfDd_m4Mmdv9_EmKt-MvAdqn3PY.roa
Signing time: Sun 01 Jan 2023 09:34:55 +0000
ROA not before: Sun 01 Jan 2023 09:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 93.90.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 13:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:24:90:e7:8b:8c:fc:52:3d:0a:4c:ec:b9:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 09:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5f0ddfe6e0c99dbfdfc498ab7e32f01daa7dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:1a:54:03:cd:43:00:46:72:58:08:52:b8:
27:92:ab:d4:58:ce:f3:30:7a:8a:e9:58:6d:58:28:
30:c9:42:68:21:77:1c:79:8c:7f:65:3a:dc:07:00:
0f:10:b2:e9:23:a2:30:07:42:2d:e8:3f:41:1a:1b:
41:f2:a0:72:bb:21:a9:68:1b:82:fd:f5:84:2f:82:
03:b1:4a:9a:f8:4c:2e:9c:ac:62:c8:7f:88:d3:17:
16:0c:3a:62:5a:56:ae:bf:6a:b0:01:0b:e5:84:6e:
93:6a:7d:04:e4:08:53:a0:5d:19:27:5b:47:7e:cb:
b7:dc:92:d8:5e:82:bb:c4:6c:44:66:c9:97:b3:93:
25:bf:98:00:28:2c:7f:6a:5e:b4:6d:31:0c:89:97:
9e:d1:ae:b5:9e:aa:b0:d0:c2:e9:3e:de:7b:6e:eb:
0e:07:bd:1c:58:ed:3e:90:9f:5a:d4:97:cc:ef:2f:
2e:4f:36:e6:f7:c1:60:d0:e5:f8:a3:1e:d3:cf:b3:
78:1a:99:5c:1e:4f:de:13:b8:be:b2:f2:1f:40:c3:
4d:a8:1c:ba:d0:7f:cd:31:8f:f2:58:38:8b:8f:8b:
95:5d:59:d7:04:c2:a3:2e:45:59:13:ca:9b:51:4c:
32:74:3f:b6:d4:ba:fb:aa:7d:f6:14:e9:4e:02:2d:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:DD:FE:6E:0C:99:DB:FD:FC:49:8A:B7:E3:2F:01:DA:A7:DC:F6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pfDd_m4Mmdv9_EmKt-MvAdqn3PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
83:10:46:df:81:0b:ff:d6:be:b5:0e:ee:46:e1:4d:95:1d:03:
89:22:84:28:ea:2d:88:61:fe:10:07:f9:a5:e2:8a:41:fb:e6:
15:b2:88:11:e0:5e:a3:30:52:96:ba:be:93:be:95:17:d3:ec:
cd:12:27:43:e1:00:5a:38:b1:3b:ef:2c:e0:d6:6c:7b:2a:de:
fb:a7:ef:f7:b8:39:66:6d:9b:3b:ec:f1:d6:86:21:3c:3e:83:
78:43:3f:3b:cd:1c:f0:b1:5c:d6:0a:bc:3f:b2:5c:a4:52:f2:
f7:87:51:f6:1e:4f:a5:47:12:c0:6d:64:b1:e0:fa:08:c1:65:
89:ba:5d:77:9c:27:85:53:4c:24:69:02:b9:11:a9:12:9e:44:
0a:6a:18:50:dd:4b:48:26:81:7f:c0:bf:bf:99:13:cc:d1:ee:
ff:0b:52:fc:25:96:04:8d:c7:6d:65:5f:62:bb:76:7f:6d:f5:
97:3a:26:34:f1:ef:7d:5d:3e:d3:07:79:ef:f0:ae:d9:c8:c2:
15:06:e4:c8:6c:04:33:7b:02:ec:b0:69:5b:3b:89:46:db:1c:
a9:b8:a8:7e:3c:b4:e0:df:92:23:62:94:1a:b6:73:bc:b2:01:
13:16:4e:d6:66:da:38:3d:09:db:85:cc:de:e9:e0:c4:56:10:
3a:c3:44:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrySQ54uM/FI9CkzsucGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwMTAxMDkzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWYwZGRmZTZlMGM5OWRiZmRmYzQ5OGFiN2UzMmYwMWRhYTdkY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6saVAPNQwBGclgIUrgnkqvUWM7z
MHqK6VhtWCgwyUJoIXcceYx/ZTrcBwAPELLpI6IwB0It6D9BGhtB8qByuyGpaBuC
/fWEL4IDsUqa+EwunKxiyH+I0xcWDDpiWlauv2qwAQvlhG6Tan0E5AhToF0ZJ1tH
fsu33JLYXoK7xGxEZsmXs5Mlv5gAKCx/al60bTEMiZee0a61nqqw0MLpPt57busO
B70cWO0+kJ9a1JfM7y8uTzbm98Fg0OX4ox7Tz7N4GplcHk/eE7i+svIfQMNNqBy6
0H/NMY/yWDiLj4uVXVnXBMKjLkVZE8qbUUwydD+21Lr7qn32FOlOAi1TpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXw3f5uDJnb/fxJirfjLwHap9z2MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcGZEZF9tNE1tZHY5X0VtS3QtTXZBZHFuM1BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVpLMA0G
CSqGSIb3DQEBCwUAA4IBAQCDEEbfgQv/1r61Du5G4U2VHQOJIoQo6i2IYf4QB/ml
4opB++YVsogR4F6jMFKWur6TvpUX0+zNEidD4QBaOLE77yzg1mx7Kt77p+/3uDlm
bZs77PHWhiE8PoN4Qz87zRzwsVzWCrw/slykUvL3h1H2Hk+lRxLAbWSx4PoIwWWJ
ul13nCeFU0wkaQK5EakSnkQKahhQ3UtIJoF/wL+/mRPM0e7/C1L8JZYEjcdtZV9i
u3Z/bfWXOiY08e99XT7TB3nv8K7ZyMIVBuTIbAQzewLssGlbO4lG2xypuKh+PLTg
35IjYpQatnO8sgETFk7WZto4PQnbhcze6eDEVhA6w0S4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org