Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/4My_RyAEc8M8x6npW9nqN-xCXqA.roa
File: 4My_RyAEc8M8x6npW9nqN-xCXqA.roa (raw, json)
Hash identifier: E291QR6AvmcziO7uzzEBUYomg1TgES38Aerc3SxqLd4=
Subject key identifier: E0:CC:BF:47:20:04:73:C3:3C:C7:A9:E9:5B:D9:EA:37:EC:42:5E:A0
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 018BE49C2A57BCB44A8C7A333FB22E80CE02
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/4My_RyAEc8M8x6npW9nqN-xCXqA.roa
Signing time: Sat 18 Nov 2023 22:45:21 +0000
ROA not before: Sat 18 Nov 2023 22:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25141
IP address blocks: 93.157.8.0/23 maxlen: 23
93.157.9.0/24 maxlen: 24
93.157.11.0/24 maxlen: 24
93.157.8.0/24 maxlen: 24
93.157.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Nov 2023 00:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:9c:2a:57:bc:b4:4a:8c:7a:33:3f:b2:2e:80:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Nov 18 22:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ccbf47200473c33cc7a9e95bd9ea37ec425ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:c4:0e:8b:70:e9:14:c2:66:20:31:54:c3:
90:1d:06:b7:df:06:33:ff:74:f3:a5:28:d7:1a:59:
6f:19:28:48:c0:09:a0:fc:98:82:00:eb:96:0d:a5:
20:cc:ad:d8:bb:d7:7e:ed:db:da:51:bf:ad:99:82:
ff:01:b6:77:b3:c8:90:ef:5d:86:53:0b:04:9a:72:
ac:bd:19:68:30:be:81:07:68:17:e5:c5:a2:30:79:
03:71:ff:3c:8e:92:7e:28:7a:3b:60:91:1c:19:0c:
3b:13:12:62:ff:ac:e4:3b:bc:47:65:e9:78:ca:97:
cb:04:cc:c1:8a:78:b4:1e:61:42:65:a5:ee:b2:c8:
8e:a2:2d:40:9d:71:79:3d:99:32:bd:91:85:60:ca:
cb:e5:98:52:1c:a1:f9:e8:3e:60:1e:38:6c:05:26:
d8:29:e6:75:0a:0b:55:35:9a:20:cf:71:94:6d:3f:
11:45:ff:03:3e:64:66:37:35:ff:31:58:65:aa:07:
25:32:ba:08:96:61:4d:b9:57:2f:02:ea:76:22:d4:
43:f9:b9:e3:98:40:94:c1:15:f2:f2:63:31:28:7a:
a4:e6:ec:08:bb:66:9c:ab:4d:9a:7e:6d:5f:f2:7e:
9d:b1:63:86:da:19:da:11:6c:c6:dc:37:68:c0:5f:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:BF:47:20:04:73:C3:3C:C7:A9:E9:5B:D9:EA:37:EC:42:5E:A0
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/4My_RyAEc8M8x6npW9nqN-xCXqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.8.0/22
Signature Algorithm: sha256WithRSAEncryption
52:30:35:8e:36:84:b4:cd:2b:e7:f6:73:83:45:41:67:98:da:
0e:b3:5b:81:c9:52:00:8e:3b:42:34:18:5f:a1:3a:50:f6:6f:
c1:97:21:69:8f:eb:46:05:6d:2f:ee:ca:f9:bc:88:e1:b0:6c:
6c:8e:78:c5:95:d3:ef:40:97:f1:d4:1f:66:a3:a9:06:14:38:
aa:3a:c4:06:04:02:df:1f:11:87:7d:88:bf:0a:d7:b1:f1:5e:
89:56:9c:5b:a6:ca:b3:a3:ec:52:8b:15:73:74:3a:25:8f:8f:
71:3d:f6:c8:48:c0:4b:30:05:dd:38:ba:04:e5:bd:c9:de:bb:
fc:b1:47:ab:8e:1a:2a:b3:33:7f:74:3d:15:d1:43:c1:e1:30:
eb:32:0e:99:73:81:ee:b1:ec:20:66:94:31:a2:37:6b:73:21:
c9:34:fc:8d:10:46:d8:b8:af:f1:d3:88:a0:e5:2c:c5:f7:6a:
23:cf:eb:d1:42:57:2c:51:e1:7a:99:58:db:d4:ed:62:91:d7:
a3:e6:5e:ee:ea:38:21:7e:4e:0e:ee:91:48:f2:61:89:fd:07:
f1:44:76:ab:63:e9:12:e2:d6:43:5c:3b:0a:1d:45:0b:21:3b:
73:57:d0:e3:a6:b2:9c:8d:7c:89:ff:34:d4:98:89:9d:0f:f2:
6e:aa:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:55 2024 by rpki-client on console-ams.rpki-client.org