Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/2VMUe39JmImg3Cc13l4mIM_U42c.roa
File: 2VMUe39JmImg3Cc13l4mIM_U42c.roa (raw, json)
Hash identifier: C5w0/YrsqXYDjX3yQ4noU2R/QEU1doZw+VIEbKF+0Vs=
Subject key identifier: D9:53:14:7B:7F:49:98:89:A0:DC:27:35:DE:5E:26:20:CF:D4:E3:67
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 01856EEFD399A15CBBF81ECF653E77EE7E37
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/2VMUe39JmImg3Cc13l4mIM_U42c.roa
Signing time: Sun 01 Jan 2023 20:04:48 +0000
ROA not before: Sun 01 Jan 2023 20:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62201
IP address blocks: 93.159.183.0/24 maxlen: 24
93.159.188.0/24 maxlen: 24
93.159.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d3:99:a1:5c:bb:f8:1e:cf:65:3e:77:ee:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 20:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d953147b7f499889a0dc2735de5e2620cfd4e367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:d4:4b:59:82:ab:3d:4f:6f:87:73:5c:26:
47:e6:e9:c6:da:49:f4:22:77:1c:16:3e:3b:47:90:
f8:ca:64:98:30:81:22:72:07:5e:04:6d:77:1d:43:
be:db:23:a2:50:15:4e:50:47:0e:74:57:96:61:99:
6d:3c:9e:8d:f4:b2:cb:6c:8c:95:7f:3c:3c:9d:d3:
29:10:9d:ae:0c:eb:92:dc:54:0f:d6:ca:30:33:d7:
fb:ee:6a:d1:b1:ab:ad:37:72:b4:a5:c0:66:0f:e4:
f4:bf:62:0d:d4:58:f0:fa:88:aa:0b:31:5e:8d:d9:
5b:a9:59:22:cc:df:37:92:1f:28:8b:a4:e2:d2:aa:
1a:13:37:de:e5:60:67:c8:6e:2c:76:6a:e7:88:29:
48:6a:57:65:7a:3c:0d:74:d1:5a:79:58:5a:0c:f2:
36:12:3f:b5:0d:8e:c8:19:db:0d:02:b6:c3:a5:07:
73:50:25:4d:ed:3d:f7:e9:c6:00:03:84:d4:ab:0b:
b6:12:58:43:0e:6e:bf:a7:54:ee:59:59:18:7d:8f:
be:b6:72:45:8b:8c:da:be:83:d5:44:61:8d:88:c8:
a3:25:ea:26:1e:b6:93:2e:98:be:ae:fb:c9:8d:73:
2e:b1:42:2b:89:c2:d2:f9:78:bb:d2:16:3b:7d:c1:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:14:7B:7F:49:98:89:A0:DC:27:35:DE:5E:26:20:CF:D4:E3:67
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/2VMUe39JmImg3Cc13l4mIM_U42c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.183.0/24
93.159.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:e8:36:e3:7d:6e:60:55:f3:f2:df:4d:22:a4:b0:e9:d1:55:
ae:50:5e:d9:c1:3c:3a:2a:18:59:2d:8d:08:ed:0e:ee:fa:76:
98:a3:5b:32:c3:9b:04:e6:10:47:4b:85:ac:85:03:dd:22:ec:
5c:98:91:24:53:6e:e1:2f:8b:77:9b:b2:02:e4:11:b9:dd:0a:
f7:3b:b1:af:b1:b6:fa:8b:8b:1e:b0:48:36:cf:3a:8e:aa:30:
f6:e0:3c:04:43:ee:d0:d6:dd:bf:66:1c:28:1c:4c:71:41:5f:
94:e8:9f:05:39:05:2b:1e:cf:be:d9:a8:19:c7:f6:59:bf:fd:
fa:6f:2b:3a:06:92:00:31:b4:13:b6:e0:f6:b6:9e:6a:0b:4b:
72:85:4b:41:cd:fc:60:ab:6c:58:b2:fc:55:2f:5d:f5:4a:8f:
02:73:c5:b8:e1:be:07:08:21:fa:19:01:64:fa:be:e1:56:67:
83:61:45:75:14:e0:93:a7:9e:c6:f8:05:2b:e5:30:e4:a0:4f:
bd:b3:bd:0c:90:c8:7a:ee:44:3e:90:43:6b:8c:9c:33:ed:bf:
4d:5b:41:dd:40:ce:7e:f6:ac:0f:a4:e3:c4:b8:79:c3:2b:0e:
98:0a:1b:62:69:80:b0:3a:45:70:e5:68:5a:cb:72:e2:d0:77:
81:69:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org