Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/F6R2eCdfD9qM3QuzsDU0m1DkF3c.roa
File: F6R2eCdfD9qM3QuzsDU0m1DkF3c.roa (raw, json)
Hash identifier: MjmnPdxXu0PCQL5Uv1Eriur40LqxITout7FRcv7DXak=
Subject key identifier: 17:A4:76:78:27:5F:0F:DA:8C:DD:0B:B3:B0:35:34:9B:50:E4:17:77
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 01856EEFD4484E66C5C0BB2579B7D13DACE5
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/F6R2eCdfD9qM3QuzsDU0m1DkF3c.roa
Signing time: Sun 01 Jan 2023 20:04:49 +0000
ROA not before: Sun 01 Jan 2023 20:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198187
IP address blocks: 93.159.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d4:48:4e:66:c5:c0:bb:25:79:b7:d1:3d:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 20:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17a47678275f0fda8cdd0bb3b035349b50e41777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:d0:bb:90:a4:bc:85:ad:48:b1:a4:45:0e:
24:df:de:38:91:bf:8a:d1:44:7f:6a:be:75:2b:dc:
41:bd:1a:1a:4b:31:5d:bf:5d:3a:17:0d:04:06:99:
f4:7c:22:46:3a:13:14:7b:47:00:05:ae:f6:96:a1:
69:3a:16:9d:62:f2:42:5d:9e:2a:eb:50:2c:9d:3a:
ae:20:30:0c:8e:b9:51:bc:4f:c0:64:1a:b4:be:dc:
98:67:1c:6e:5e:fe:3f:3b:df:5c:77:8d:df:f1:a3:
cc:53:f3:e9:c8:34:85:68:ac:61:73:87:56:33:06:
b9:88:2b:ca:91:7b:f3:01:bc:a2:cf:92:ff:77:02:
21:3a:fa:35:82:02:74:a8:50:f5:5a:40:74:a6:18:
4d:f4:19:ba:d5:af:06:f0:f5:9d:ce:3a:f6:1f:75:
d2:72:1e:01:f3:a3:2e:a4:40:a0:25:26:da:6c:5e:
05:b3:95:68:18:8c:89:cf:d1:77:37:d4:9a:45:03:
e9:6f:7d:07:f9:2f:d9:d9:70:86:e1:d5:0d:11:cc:
f2:20:3a:e3:1d:28:21:bc:97:a0:25:c5:bc:b6:5b:
19:e7:d7:83:b6:f9:49:54:d2:18:8b:f3:25:3b:44:
23:7a:92:35:bc:84:ec:c9:78:53:17:d9:91:a0:bb:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:76:78:27:5F:0F:DA:8C:DD:0B:B3:B0:35:34:9B:50:E4:17:77
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/F6R2eCdfD9qM3QuzsDU0m1DkF3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.186.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ea:82:d5:69:7d:fb:ee:a1:66:23:43:bd:b1:32:1b:0f:10:
87:91:64:42:05:b7:96:b7:2a:e2:74:ae:3e:de:07:c8:4f:52:
0c:ff:d3:6d:e9:c8:b1:95:2e:76:e8:7a:ec:1e:1f:7c:3d:8a:
61:0f:b5:1e:dd:6e:69:91:63:51:5f:4f:1f:99:9d:a9:88:69:
b2:64:3c:ed:6c:aa:5c:0a:12:db:c6:42:6f:8e:76:bf:f6:f1:
0e:19:6b:bc:a4:32:76:d5:55:63:b2:80:a6:22:1d:4b:d1:60:
cf:b1:97:20:5a:8b:8c:a6:1a:cd:1f:dc:d4:1e:a1:a7:93:5f:
69:83:02:e3:8b:7c:6e:b4:b3:6e:22:d8:07:0b:5b:ba:73:f4:
da:dd:15:cb:ea:56:e8:1c:3e:64:3a:c4:51:9b:3a:4b:ce:66:
a1:cc:8f:42:09:52:aa:26:57:d7:3b:16:26:cd:28:4d:70:0a:
7f:7c:07:90:db:b7:f6:bc:5f:85:09:90:93:a3:4f:a6:e8:32:
d6:12:74:0e:9e:c7:66:06:33:06:56:d8:42:b3:18:19:b8:80:
6c:1b:5b:68:09:2a:0b:6b:e2:b7:ce:e1:d1:2c:a2:37:6a:5d:
0d:5b:82:5f:72:e5:4e:35:d5:b4:1a:68:d2:ba:91:32:38:7a:
8e:01:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org