Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/j88R7xoR_PXmN6DE8CUo_7mVKMY.roa
File: j88R7xoR_PXmN6DE8CUo_7mVKMY.roa (raw, json)
Hash identifier: wXiB2k3TV4jjHUP33DqMNFg/pyVH/kyqlPV17JWgwBQ=
Subject key identifier: 8F:CF:11:EF:1A:11:FC:F5:E6:37:A0:C4:F0:25:28:FF:B9:95:28:C6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019050503E9F692EC8311217090C12C8C57C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/j88R7xoR_PXmN6DE8CUo_7mVKMY.roa
Signing time: Tue 25 Jun 2024 16:52:34 +0000
ROA not before: Tue 25 Jun 2024 16:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47619
IP address blocks: 93.113.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:50:3e:9f:69:2e:c8:31:12:17:09:0c:12:c8:c5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 25 16:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fcf11ef1a11fcf5e637a0c4f02528ffb99528c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:1e:c4:c8:d8:80:5e:bc:81:a3:18:7f:ae:
1a:84:ee:60:5e:4a:ed:4d:3d:e7:5d:cd:e2:2a:9f:
1f:96:78:cf:38:3d:6b:46:f0:b1:05:d4:7e:4d:b3:
a9:09:4e:50:95:02:b9:69:3c:21:69:47:96:1a:4c:
10:38:fa:d3:33:b9:d2:c5:01:0d:13:2f:84:92:b8:
33:d5:9e:25:52:e1:f7:51:dd:58:80:69:e9:40:99:
14:5d:a8:61:c7:ca:ed:98:1d:36:01:57:3e:6a:e8:
63:a9:72:63:7b:a3:68:f7:cc:c0:02:d3:fe:b5:4a:
46:eb:b7:11:e7:07:77:5a:8a:a5:2d:86:a6:a9:d5:
2f:d5:61:f9:90:94:97:5d:3c:d1:41:1a:91:6c:31:
6d:3a:87:ff:d8:81:96:67:be:25:4f:18:be:01:2d:
30:50:b5:ef:83:bc:56:fa:78:b9:b0:fe:b2:30:21:
bb:f2:63:f5:be:3c:8f:6b:8b:b3:a1:67:c5:cf:7b:
50:7b:4b:13:36:a6:51:f8:65:28:d0:22:43:e6:e8:
90:a8:22:a7:1f:87:7f:70:bd:f4:ac:be:bd:4d:bd:
f3:68:9e:5f:11:7e:65:c9:89:97:6d:2a:50:33:07:
53:a2:2f:cd:9a:bd:8a:dd:0d:74:75:b2:49:0a:b4:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:11:EF:1A:11:FC:F5:E6:37:A0:C4:F0:25:28:FF:B9:95:28:C6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/j88R7xoR_PXmN6DE8CUo_7mVKMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:cf:fd:80:97:b4:58:ca:05:80:bf:a0:91:ee:ae:38:c6:33:
c4:ee:18:6e:09:9a:b7:8d:07:7a:3e:7f:bb:69:30:2b:16:de:
7f:74:26:1a:a0:5c:df:a3:5a:01:30:ed:14:bb:46:6f:75:8f:
87:96:17:a3:48:4e:37:3f:60:b3:2c:32:a5:a9:a9:90:98:90:
c5:4b:c5:b0:e7:26:12:75:dd:3b:14:a1:8c:68:71:8d:15:ac:
af:ee:d1:a7:cf:36:9e:bc:46:f0:22:6d:8b:ad:79:d2:ac:6e:
b0:c3:00:c2:74:d2:75:18:07:04:d8:b2:ff:2f:62:dd:f8:e4:
59:81:35:1a:22:29:2e:69:73:c7:78:1c:4d:4c:80:1a:9d:d1:
c6:d8:16:b2:ba:c4:0d:87:b9:b1:86:6a:33:07:e2:62:60:a1:
1d:9c:97:7d:ca:00:f6:cb:be:30:d3:d8:98:6a:a0:e5:61:ec:
a9:42:2b:29:e8:23:05:b5:7b:e2:6a:da:ca:ce:0f:84:a8:ed:
4a:53:be:60:6b:28:4e:ab:2c:6e:3c:dd:99:17:41:df:b6:8f:
26:08:8d:fb:5b:41:c5:42:70:39:f8:fc:7d:1a:0c:07:b8:af:
23:58:94:38:44:f6:0d:18:80:e5:ef:90:a4:3e:40:62:fc:3f:
91:a5:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:34 2025 by rpki-client