Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/sIKr0bZTsjhdpXwIdrKm-gP01D0.roa
File: sIKr0bZTsjhdpXwIdrKm-gP01D0.roa (raw, json)
Hash identifier: OFXdFz6zsVkI0QmFX186Knva6ga9ybgiwj5OYQHU+14=
Subject key identifier: B0:82:AB:D1:B6:53:B2:38:5D:A5:7C:08:76:B2:A6:FA:03:F4:D4:3D
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 01856EEFD2013ED11D73116B62B8A79F930F
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/sIKr0bZTsjhdpXwIdrKm-gP01D0.roa
Signing time: Sun 01 Jan 2023 20:04:48 +0000
ROA not before: Sun 01 Jan 2023 20:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49102
IP address blocks: 93.159.128.0/18 maxlen: 18
2a00:1578::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d2:01:3e:d1:1d:73:11:6b:62:b8:a7:9f:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 20:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b082abd1b653b2385da57c0876b2a6fa03f4d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:3b:38:62:47:df:9a:38:57:d8:fb:3e:b0:
f3:bd:fe:09:8a:4a:42:54:24:1e:7a:c8:9d:a3:35:
68:c8:33:8d:2a:2e:f5:d6:a3:4d:c8:0a:d6:9d:cf:
4f:bb:1b:1d:b1:c5:62:02:18:d1:a3:a2:8e:ef:85:
47:82:2e:98:02:d1:6f:72:63:27:76:e5:83:49:65:
2a:64:93:09:da:f7:bc:a8:6a:80:5a:2a:fa:e8:41:
56:dd:64:38:50:9f:15:6c:1d:19:99:60:8e:70:d0:
35:aa:52:70:e4:8d:90:20:c2:92:04:61:bc:17:84:
e7:2c:35:4b:b6:d0:db:88:be:dd:45:dc:bc:9e:f4:
55:55:ff:1f:4d:eb:fe:a0:09:51:7d:96:b3:93:e7:
f2:a7:62:9e:17:65:26:fd:52:64:be:e7:66:5f:f4:
8e:e9:11:c3:04:7e:0a:14:8d:32:f8:41:b8:15:a9:
97:d9:6e:80:cb:74:f7:26:23:73:57:29:9c:27:f3:
a5:aa:9a:9b:70:32:bf:7b:31:01:04:a2:82:98:23:
e5:2f:d3:71:b2:6b:2f:07:47:63:65:cc:e0:5f:a3:
05:1e:46:02:08:1f:da:94:9b:35:08:e1:e8:55:7c:
45:d4:dd:e6:a3:61:c2:ff:ac:84:54:39:ba:2d:35:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:AB:D1:B6:53:B2:38:5D:A5:7C:08:76:B2:A6:FA:03:F4:D4:3D
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/sIKr0bZTsjhdpXwIdrKm-gP01D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.128.0/18
IPv6:
2a00:1578::/29
Signature Algorithm: sha256WithRSAEncryption
35:a0:a9:4c:0a:0e:fe:e8:15:ba:55:0b:a2:b0:c5:b5:94:0c:
f6:08:60:26:39:7f:8d:da:17:1a:d0:aa:cd:2e:5c:88:fb:89:
57:c4:6f:35:23:dc:cd:39:17:97:cb:dc:d1:07:cc:e1:77:2e:
f3:76:09:fe:db:d3:b1:a6:3d:0d:5a:42:71:6f:4f:70:6e:3d:
91:62:48:39:60:ac:fa:a4:bb:35:3c:9f:bd:bd:ef:a3:a7:84:
bc:d2:15:d0:0b:ce:f9:8c:ac:b2:15:2b:17:f9:a0:df:09:01:
b0:25:b6:73:be:5c:d0:34:bd:f7:3f:17:39:34:d4:12:03:c7:
ec:a5:f5:d4:5d:ad:ac:2f:d3:9c:2c:69:05:b3:3d:ec:f6:79:
9d:e6:e2:c8:ab:03:a3:67:26:fc:45:59:fd:49:61:0c:b2:ce:
b5:60:1d:16:0d:2a:21:7a:ca:f6:d6:48:c7:21:17:41:aa:19:
65:10:0e:af:d2:8b:d4:6c:8e:9a:c5:aa:ed:49:84:61:92:73:
f2:8f:ce:6d:c4:74:08:6e:21:5a:ab:0b:4e:60:c1:49:9d:16:
6d:5f:ea:84:3e:d7:24:b6:2e:38:36:05:aa:c4:48:fa:f1:33:
85:ae:7d:a2:17:a9:8e:5e:15:c0:fe:7d:53:93:f1:b3:45:4a:
a4:4c:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org