Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/F_pngHo6Y_tn-BwiSnxvr5_LSVk.roa
File: F_pngHo6Y_tn-BwiSnxvr5_LSVk.roa (raw, json)
Hash identifier: yLQId9auEyXybxue6SEmmnIBDco516kjw9BJGsc5thU=
Subject key identifier: 17:FA:67:80:7A:3A:63:FB:67:F8:1C:22:4A:7C:6F:AF:9F:CB:49:59
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC17DCF6CA8B151327573E73CFC6552
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/F_pngHo6Y_tn-BwiSnxvr5_LSVk.roa
Signing time: Sun 01 Jan 2023 09:54:58 +0000
ROA not before: Sun 01 Jan 2023 09:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49846
IP address blocks: 93.191.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:7d:cf:6c:a8:b1:51:32:75:73:e7:3c:fc:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17fa67807a3a63fb67f81c224a7c6faf9fcb4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:0e:eb:f1:c7:b2:70:2c:3b:0d:45:5a:61:
25:02:7e:88:43:25:f4:37:e2:59:79:4c:bb:05:3f:
33:27:b6:1c:54:3c:88:7d:de:56:0f:53:18:70:59:
a7:23:9c:33:9e:45:6e:d3:3c:b1:64:f1:eb:24:dc:
0f:ff:50:05:4c:32:f1:80:12:db:97:62:d5:d7:48:
c6:21:4f:28:75:a2:1e:a4:94:5f:be:b8:86:1d:be:
64:aa:41:61:3d:4a:c8:29:ff:44:bf:53:19:74:68:
53:bd:89:03:bb:e5:88:ae:04:61:fa:42:e9:6e:e2:
b9:e7:b1:54:a8:0e:f0:e9:cf:2b:df:4d:e4:94:a2:
cf:21:6e:98:7a:d0:a9:a3:69:83:f8:4f:76:4c:1e:
d3:6f:4c:d3:3e:41:f9:2e:d3:fa:1d:d2:0a:31:aa:
e1:f7:5c:36:b8:65:27:f9:18:bb:db:73:da:63:3d:
c5:08:d9:d5:e5:fc:57:e0:50:aa:82:ee:b1:66:1d:
95:9a:00:46:e5:3a:15:79:b2:6c:fb:0c:8a:7c:06:
1c:fa:0e:d9:1b:ce:3d:db:f5:7a:65:18:45:9d:e7:
84:39:10:d4:39:17:6d:65:c1:43:b5:78:cf:10:b2:
8a:23:5f:f5:45:40:19:92:5f:0e:f6:03:13:f5:77:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:67:80:7A:3A:63:FB:67:F8:1C:22:4A:7C:6F:AF:9F:CB:49:59
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/F_pngHo6Y_tn-BwiSnxvr5_LSVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:74:e4:c2:4d:e2:2d:be:76:bf:b2:70:6c:de:a0:40:00:93:
27:25:50:54:90:2b:d4:39:9e:a7:1d:e8:9d:20:54:09:37:ee:
ca:ed:e0:9f:18:11:ba:7e:84:1e:22:5f:d0:e1:4e:a5:80:3b:
e7:89:cb:9b:24:4e:7a:3f:81:65:87:9b:b8:ec:ba:e0:b6:24:
f2:72:d1:f9:8f:cb:29:1c:bc:6c:09:6c:9b:8f:40:02:89:ea:
cf:f9:d9:cd:4a:1a:2e:90:85:19:a6:84:21:93:40:9e:4b:cd:
32:11:a4:26:09:ab:59:a8:81:03:2a:ab:b2:03:dd:8d:47:1f:
ee:43:5c:a9:75:7e:b4:dc:ab:30:f4:39:b0:1b:90:af:bf:25:
8c:d1:38:01:db:3f:e2:90:21:f1:03:05:ed:cf:31:66:2b:f8:
14:8c:ba:3b:6e:e0:56:28:8f:aa:6d:30:32:e8:41:05:34:3e:
9a:00:43:41:ba:e0:01:d2:9b:24:e7:09:d4:5d:30:26:40:53:
18:57:c6:ff:62:1c:51:00:7a:78:eb:c8:56:e0:0e:0d:5c:74:
ce:67:52:d6:22:ca:33:21:b1:b3:94:38:ba:88:32:54:b9:57:
4a:79:32:3f:d2:fb:a5:96:5c:0a:df:9a:b9:0b:7d:8e:59:14:
b1:27:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:39 2024 by rpki-client on console-fra.rpki-client.org