Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yeHk2QKq6Enm69lBO0oBdfKOwWw.roa
File: yeHk2QKq6Enm69lBO0oBdfKOwWw.roa (raw, json)
Hash identifier: ZeGGv+50fC5Fd18oHedET8hv1K1fgoF9xiJbExqtbSQ=
Subject key identifier: C9:E1:E4:D9:02:AA:E8:49:E6:EB:D9:41:3B:4A:01:75:F2:8E:C1:6C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79557557DAC79CBD35B4D3E6F9887CA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yeHk2QKq6Enm69lBO0oBdfKOwWw.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52044
IP address blocks: 93.113.255.0/24 maxlen: 24
46.102.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:57:55:7d:ac:79:cb:d3:5b:4d:3e:6f:98:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9e1e4d902aae849e6ebd9413b4a0175f28ec16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:52:0f:82:67:fe:5a:1c:6b:8f:5d:77:d0:
25:0d:68:37:4c:98:1b:8a:45:d8:50:56:97:b2:92:
f0:7a:3f:61:21:72:03:f7:7a:dd:61:c7:a1:f5:be:
cc:20:b6:07:0b:40:1a:e3:fc:f7:22:b6:76:67:b9:
02:15:cc:79:fd:32:ab:4c:23:7a:f8:dc:58:bb:d3:
cf:5b:dd:b5:01:b8:e1:95:ed:02:66:15:d3:f7:a1:
60:3b:00:4b:8e:a6:7c:ed:6a:a8:55:0f:28:c0:21:
a9:b8:17:c8:fb:6f:3d:db:f1:98:56:35:b5:69:79:
da:2e:64:3a:e2:93:99:08:98:47:ff:4f:ec:35:51:
41:66:b3:f9:6c:14:ee:f0:c2:9c:2f:ad:25:48:ff:
17:25:ab:ba:40:cb:3c:a6:73:91:94:4e:c6:9f:4c:
f4:7f:ed:1c:a1:fb:9d:96:a6:c6:9c:71:28:09:10:
d3:1d:a7:ce:cb:14:5a:9f:98:90:b3:7d:e4:70:bf:
7c:24:16:b5:51:18:0e:6d:4f:1d:bc:d4:e2:12:ad:
83:87:45:bf:ed:a6:9d:f1:6b:15:32:91:57:9c:02:
c3:0f:db:4f:b0:4a:af:19:84:d3:12:6b:8a:9d:5a:
bb:ed:7d:45:f5:f4:46:7f:d1:6c:c3:5c:21:df:e2:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:E4:D9:02:AA:E8:49:E6:EB:D9:41:3B:4A:01:75:F2:8E:C1:6C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/yeHk2QKq6Enm69lBO0oBdfKOwWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.175.0/24
93.113.255.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c0:61:f6:0b:8c:12:4a:e7:8d:51:4b:32:19:f7:ee:88:81:
de:64:d8:c0:a3:cd:44:b6:aa:b2:c2:70:1b:ca:1f:f5:0a:69:
f3:bc:9a:c2:f4:4f:dc:c3:c3:5c:38:f7:79:d3:da:c1:86:22:
3e:cc:d3:a8:7c:38:6a:3d:c9:9f:43:30:04:e6:85:29:35:9f:
6b:fc:5a:7a:60:06:86:0e:6c:d6:00:01:57:25:f7:10:f8:29:
b9:5b:e8:fd:d0:ce:dd:12:7f:17:6d:c1:6c:e5:11:f8:56:75:
55:e1:c9:8e:b8:f1:3c:2f:4d:93:14:15:e4:a9:c5:4d:b3:e3:
c2:1e:b3:bb:7f:b3:e2:51:b6:80:32:25:37:e2:ef:e0:c7:ae:
ab:c4:15:4b:3f:c3:05:68:a1:1a:40:ff:64:f4:a4:21:7f:f7:
63:c6:43:b8:b5:0b:7d:d1:a8:8c:2f:76:61:a0:94:4a:89:31:
94:25:d1:78:cc:1c:05:e5:e7:54:b6:0e:d5:ff:33:ec:de:2f:
62:a2:22:3e:b1:72:f1:88:23:b3:4c:7d:ce:a1:37:84:c3:2b:
44:ab:df:b1:20:c1:72:46:2d:60:11:1a:05:fb:f2:00:6a:b8:
b0:38:56:14:5a:45:2d:fb:7a:2c:e7:86:ce:30:0b:58:97:75:
ea:6a:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 13:50:09 2024 by rpki-client on console-fra.rpki-client.org