Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/nR81CCZwfN3quvr5D4m2OtVVGx4.roa
File: nR81CCZwfN3quvr5D4m2OtVVGx4.roa (raw, json)
Hash identifier: 6ndmTH3wQkc6lrWNF7Xkq/F0DPR9XN8KiZsRw0E6I28=
Subject key identifier: 9D:1F:35:08:26:70:7C:DD:EA:BA:FA:F9:0F:89:B6:3A:D5:55:1B:1E
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 01856EEFD6D42CB6E478896EEDA165FDD807
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/nR81CCZwfN3quvr5D4m2OtVVGx4.roa
Signing time: Sun 01 Jan 2023 20:04:49 +0000
ROA not before: Sun 01 Jan 2023 20:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205384
IP address blocks: 93.159.181.0/24 maxlen: 24
93.159.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d6:d4:2c:b6:e4:78:89:6e:ed:a1:65:fd:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 20:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d1f350826707cddeabafaf90f89b63ad5551b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:9a:8f:a5:64:3e:c5:3e:2d:fe:b5:54:4c:
65:a2:80:ac:5a:d4:1a:94:9d:e1:08:e7:06:cc:9f:
69:43:60:b4:61:26:51:86:5d:c4:e7:7e:c1:13:c8:
45:84:ed:9c:a1:11:06:9a:32:30:7e:44:9b:53:72:
76:89:3b:85:02:da:4a:65:2b:2d:18:c4:5d:23:95:
5e:c5:eb:57:ac:10:e5:67:6a:cc:70:11:c9:05:8e:
d0:ef:6d:7a:ba:71:dc:71:ec:dd:ef:b9:6a:a4:0a:
86:6c:dd:f2:23:db:75:b6:9b:de:75:d1:04:6b:c0:
42:89:ed:b0:92:32:18:3d:19:b0:3b:bb:29:a8:ee:
1d:df:66:07:52:0e:9c:36:c0:5a:a7:60:6f:ff:ab:
11:f4:0f:ce:10:97:41:3b:c1:59:97:d8:c7:b2:c1:
ac:10:a6:d4:0a:26:a0:fd:32:21:96:e1:5d:ce:2b:
0e:6f:af:2f:f3:4e:90:70:66:a2:1a:d3:c9:a1:a9:
8c:0d:99:6b:8c:c0:67:3b:ee:90:dc:2e:d9:4e:c4:
d7:3f:e3:09:c5:41:32:9d:85:0a:7c:38:5e:18:0e:
a9:06:28:f8:51:20:48:6e:3d:f7:69:cc:f8:6a:55:
7e:12:db:d8:2e:91:8d:07:a6:7f:a4:43:25:a0:b4:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:35:08:26:70:7C:DD:EA:BA:FA:F9:0F:89:B6:3A:D5:55:1B:1E
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/nR81CCZwfN3quvr5D4m2OtVVGx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.180.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:7f:f2:7f:1f:d8:40:47:71:0d:8d:a3:80:e7:84:42:09:32:
24:33:4d:18:c6:aa:83:46:5e:91:4d:bd:e5:29:4e:c5:e5:33:
bd:a4:29:15:35:68:a1:5a:1c:33:34:b3:96:45:a3:ca:a5:6d:
9a:ab:9b:35:f3:07:96:f0:a6:75:b9:db:c6:70:56:5d:c6:51:
8b:be:3e:2a:f1:cc:4b:1a:e1:c3:59:f2:1d:12:5e:63:ad:96:
47:48:37:11:41:87:5b:36:a6:ff:c0:73:41:89:ae:c0:76:a5:
3f:d0:61:6f:d5:eb:66:c1:93:99:5c:a3:a8:37:6d:c7:f7:92:
57:9b:03:05:5a:f0:96:28:42:d3:83:fc:5b:0b:bf:64:0c:23:
cb:15:aa:bc:2c:94:e0:18:a5:3a:a7:99:d9:53:e5:b2:42:e3:
da:29:6e:83:56:e9:30:58:4c:cd:36:5d:6b:0f:01:e2:84:64:
4c:0e:94:4d:d6:0c:b5:c0:22:1d:30:91:22:eb:3a:d4:a3:9e:
c2:98:9b:b1:7a:4c:aa:1e:da:10:f6:dc:e0:bd:34:e3:64:cd:
9f:fd:39:95:82:7a:8c:07:ea:d1:40:c8:36:c1:12:b9:58:fc:
e4:f5:26:a7:55:c5:a8:6d:d3:67:84:57:40:93:e1:56:31:9a:
5a:df:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:00 2024 by rpki-client on console-ams.rpki-client.org