Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/19HYKJtpUf78x42YOEJ9n0SNRpo.roa
File: 19HYKJtpUf78x42YOEJ9n0SNRpo.roa (raw, json)
Hash identifier: 52Ze+bKEPwG9RX9zcONJ0I1+DrRJyWKqr3ByeUcLR2Q=
Subject key identifier: D7:D1:D8:28:9B:69:51:FE:FC:C7:8D:98:38:42:7D:9F:44:8D:46:9A
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018570027D86C63032E4CADCF04029988A54
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/19HYKJtpUf78x42YOEJ9n0SNRpo.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210019
IP address blocks: 93.105.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7d:86:c6:30:32:e4:ca:dc:f0:40:29:98:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7d1d8289b6951fefcc78d9838427d9f448d469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:1b:8c:5b:2d:b9:97:38:7d:fd:3f:a4:22:
af:93:bc:f8:8c:4b:fc:fb:fc:64:65:b3:2e:08:91:
00:30:ea:a6:df:5e:a4:b6:1b:63:a9:08:92:25:9b:
24:8a:4c:7d:6a:e3:8e:96:02:58:66:f0:1f:0a:53:
2e:00:c3:58:2a:1b:cd:10:42:5f:e0:f2:e5:4f:11:
3c:99:9f:82:26:0e:bb:ef:47:9f:40:74:92:00:aa:
9d:e5:b4:b5:a8:6d:bb:ef:e5:50:5c:a3:2a:0b:4c:
b4:24:64:d2:42:b5:0a:57:77:82:b1:0f:b3:5e:c6:
9b:12:1e:f5:0a:5b:da:03:63:12:0d:53:dd:a6:cb:
66:00:01:b2:7d:03:f8:77:d5:95:7a:93:67:82:67:
f2:f3:b7:64:57:74:ab:a3:3b:ab:82:f1:5a:dc:1e:
a3:d8:e0:d6:2d:9a:d8:15:94:ed:5e:dd:a5:fe:c7:
7a:0a:fa:60:31:3d:8e:12:66:86:8d:99:0f:d4:10:
27:af:99:bb:92:09:4b:ee:c6:6d:b9:1d:bd:b0:2b:
90:8a:f8:fb:4f:c8:6c:c4:23:df:12:66:25:5f:e0:
7f:04:80:3b:2b:92:90:fa:3f:8c:2c:1d:af:a0:d4:
8e:83:c7:b0:d5:93:09:07:a2:57:ce:08:6a:83:35:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D1:D8:28:9B:69:51:FE:FC:C7:8D:98:38:42:7D:9F:44:8D:46:9A
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/19HYKJtpUf78x42YOEJ9n0SNRpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ea:18:7b:8f:06:8a:f0:a7:82:fa:f7:5d:5c:6d:75:25:89:
5c:44:a4:1d:23:75:99:68:1a:07:0a:21:ab:b5:08:5f:82:50:
05:3b:35:e9:bc:74:c1:3b:a4:3c:ad:9b:1f:30:6c:f7:0e:08:
25:ec:52:f0:bd:c3:76:96:12:40:15:d0:17:bd:1b:ab:1c:b2:
5e:c0:0e:9f:c4:d5:d5:82:5c:58:e3:ee:49:56:b7:e1:fd:39:
93:28:49:8f:21:21:ca:11:aa:88:dc:d5:30:93:de:dd:da:4b:
e3:38:6d:8e:b0:ec:ed:43:4d:90:b6:ea:af:58:45:69:f5:64:
05:6a:c1:b2:5c:85:f9:77:3a:31:5a:b2:83:19:83:2a:23:9d:
21:1d:f5:89:dd:e5:ae:d5:8f:ff:b6:ed:ca:31:72:55:a3:41:
1a:74:08:b6:55:e9:56:08:63:91:e2:c0:82:3a:a8:b3:95:b0:
89:cd:06:69:14:5c:23:39:27:14:ea:53:4a:fc:d9:37:03:45:
56:dc:51:cd:2f:67:87:5f:e8:2d:6b:cd:96:93:12:0b:08:2c:
1e:eb:67:c3:bf:34:2f:2c:58:13:09:01:77:0d:17:4b:70:81:
ac:32:a5:2f:76:d5:fc:6d:08:5c:59:bf:a7:74:dc:df:9b:6d:
3e:f4:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:29 2024 by rpki-client on console-ams.rpki-client.org