Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ssuW-APsfj8HMyFiFgImuPUgO_w.roa
File: ssuW-APsfj8HMyFiFgImuPUgO_w.roa (raw, json)
Hash identifier: GeKoRwgLxCU+JqJt7LnjvsIpIy+p4JpO5aEaoxgAYJA=
Subject key identifier: B2:CB:96:F8:03:EC:7E:3F:07:33:21:62:16:02:26:B8:F5:20:3B:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CF7FECF7DED6F57B850D5F2ED42CFF8D7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ssuW-APsfj8HMyFiFgImuPUgO_w.roa
Signing time: Thu 11 Jan 2024 10:08:40 +0000
ROA not before: Thu 11 Jan 2024 10:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 93.114.244.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 07:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:fe:cf:7d:ed:6f:57:b8:50:d5:f2:ed:42:cf:f8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 11 10:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2cb96f803ec7e3f07332162160226b8f5203bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:27:c0:19:9a:fb:33:9d:4e:18:27:37:09:
49:4f:bf:21:c5:b6:6a:95:5f:dc:98:81:0b:2e:0d:
cb:1a:d6:2d:cf:83:ac:04:6a:f4:d6:e8:d6:be:0c:
24:23:6c:78:4a:bc:e3:2e:7f:4d:f4:0e:d8:f6:94:
bd:f3:f0:bb:03:64:3b:e5:a7:86:73:d8:34:d6:1f:
a8:a0:f5:92:17:70:cb:db:c0:96:40:ef:ca:b6:a5:
32:0c:f2:e0:40:83:0a:c6:25:66:5a:45:7f:e6:91:
90:7f:43:f8:5d:eb:72:f8:31:bf:ce:86:7c:a5:b9:
45:35:24:82:36:75:75:88:c8:74:7e:19:a4:df:57:
28:25:70:ef:3b:fd:fb:d5:cd:be:bc:67:ed:d1:43:
4f:81:97:19:a4:8b:5d:d3:9f:3c:c5:fc:17:84:bd:
2a:bb:dc:b7:ba:8b:8b:83:e7:2e:cc:f7:e7:86:fa:
6e:bc:30:05:de:55:02:22:16:95:70:8d:0e:70:4f:
71:03:ca:0b:63:c8:0a:e3:cc:3d:eb:c8:41:ff:6d:
4d:3a:4a:09:1b:c5:b3:8b:44:e7:8e:e2:27:9d:6f:
ec:d6:72:40:dc:fd:42:0f:6d:d4:be:f2:c6:48:3b:
5f:12:ae:87:30:61:f3:4b:78:96:9f:f7:52:fe:6e:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:96:F8:03:EC:7E:3F:07:33:21:62:16:02:26:B8:F5:20:3B:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ssuW-APsfj8HMyFiFgImuPUgO_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.244.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6d:95:49:bd:2c:70:27:ae:81:ad:55:a3:d2:25:a6:ea:60:
4c:6d:7e:a5:1d:ea:7a:3c:8e:5d:52:40:5d:de:20:a0:6d:e3:
5a:f1:89:38:e4:b7:e0:2a:92:76:28:43:0a:7b:c9:aa:74:97:
43:7f:74:2e:d7:85:f7:88:72:12:72:01:f7:1e:15:e9:70:b7:
c1:00:25:c5:18:f5:ab:2f:1b:b4:a2:58:6b:15:c4:ff:b0:43:
10:11:c3:92:a3:fc:f3:77:9a:84:25:8c:17:23:9d:7a:4e:cd:
e1:3d:0f:49:46:65:8f:00:c8:29:56:e6:76:a2:6c:d4:b9:92:
75:62:14:52:5c:98:11:94:2f:79:49:fd:8b:cb:7b:3c:7d:88:
cd:bd:88:aa:ff:e0:9a:e8:ee:92:9f:a4:88:86:fd:ae:fa:bf:
a1:42:9b:3c:82:ee:ea:14:97:a9:f1:bb:88:c0:0f:b0:e3:b9:
f6:f0:45:4c:56:7d:16:61:a0:18:a8:c6:84:57:93:2a:2c:81:
10:f3:49:5f:71:09:1c:ec:a9:2c:5e:00:0a:b3:46:1c:67:b8:
e2:dd:34:c5:52:c8:6e:05:9e:4b:8a:89:4b:24:f3:e5:4c:a3:
31:d5:98:31:4d:f7:89:04:89:0a:94:12:55:8e:02:fb:18:c1:
d1:b3:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org