Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/VFyoKoGkUM1g4CGw_MyNBA1hUGE.roa
File: VFyoKoGkUM1g4CGw_MyNBA1hUGE.roa (raw, json)
Hash identifier: +EP4+EJchdMvtSg4bFOFJSl/s6LwsitUieTU68NEzbM=
Subject key identifier: 54:5C:A8:2A:81:A4:50:CD:60:E0:21:B0:FC:CC:8D:04:0D:61:50:61
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018570027A3AF1571B9545233BBE3D8EE595
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/VFyoKoGkUM1g4CGw_MyNBA1hUGE.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35007
IP address blocks: 93.105.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7a:3a:f1:57:1b:95:45:23:3b:be:3d:8e:e5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545ca82a81a450cd60e021b0fccc8d040d615061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:30:bf:71:2a:76:a7:4d:e2:38:c6:c0:42:
61:fc:a6:8e:a4:5d:73:25:1b:91:be:c2:1e:8d:e3:
ee:b5:b5:66:fb:7b:28:0e:6a:61:c3:cd:13:1c:12:
0e:48:50:33:77:fa:35:d3:c4:40:e1:09:8b:3f:a4:
84:56:11:4b:71:c7:51:83:cc:a0:88:81:69:3b:36:
41:47:e9:02:18:43:2a:a9:a4:ad:a8:e8:ad:98:a3:
0e:c6:e0:58:18:59:07:90:69:79:f0:19:ca:d4:c4:
a9:f3:b6:30:96:3a:93:0e:03:3e:b3:c1:a0:65:f2:
c9:92:aa:67:74:67:f8:22:83:0d:2e:2b:7c:e7:97:
1b:ba:41:93:ff:b4:fe:9f:15:5a:e5:f1:e1:2b:9a:
4e:e6:7a:68:6c:4a:07:6e:68:27:bc:35:4b:4e:e0:
1f:48:d9:79:93:08:89:ea:dd:d7:0d:10:48:11:86:
a0:70:2c:c3:65:03:d1:6c:cd:f5:60:a5:14:fc:f2:
4f:2f:62:49:51:b3:5e:87:88:a3:1b:85:fb:fe:b2:
9c:99:b0:c8:35:c2:9c:ca:44:8d:b4:c1:f7:59:d1:
77:f7:05:56:1e:5b:7f:39:06:52:cc:b3:db:a3:db:
21:ba:0f:a1:51:67:a8:81:56:ef:5d:a5:c7:54:fc:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:A8:2A:81:A4:50:CD:60:E0:21:B0:FC:CC:8D:04:0D:61:50:61
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/VFyoKoGkUM1g4CGw_MyNBA1hUGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.74.0/24
Signature Algorithm: sha256WithRSAEncryption
16:34:3f:95:0b:df:ac:52:c0:bd:ab:06:b4:26:b0:a3:20:4b:
73:d1:0d:c2:31:85:64:8e:22:dc:84:c8:83:a1:89:1f:17:f2:
d3:0f:50:9d:b9:95:5f:c3:e2:91:75:63:b6:43:37:34:a1:ce:
4b:c3:78:91:cd:87:49:22:27:e0:5e:25:50:5c:63:55:07:0f:
89:aa:a9:f9:2f:6a:7b:4a:99:4f:58:05:64:0d:ae:a9:db:9d:
30:19:e2:0a:17:19:8c:fd:36:7c:fc:65:7f:17:ec:77:26:ab:
22:d9:05:98:80:c9:53:34:1a:3e:ef:74:a0:e3:0d:cb:33:8f:
7c:29:bd:84:18:ed:7d:c8:81:8f:1f:1a:63:f2:45:fd:db:40:
8d:8c:37:3f:d4:cd:68:7e:c1:26:f1:59:94:a3:56:32:1f:44:
42:45:67:1e:2f:6d:d1:ba:b3:79:51:a7:5c:ef:3d:ba:97:50:
84:37:38:56:4b:d2:2f:5b:42:1f:e2:f8:78:1c:03:1e:a3:81:
23:78:58:48:5d:52:bb:c0:11:de:26:c0:d3:2a:64:09:a3:2f:
24:ca:48:42:be:c7:9d:fb:44:cb:7c:b6:6b:43:3b:a0:e9:e5:
37:e5:bf:26:16:e6:f1:c8:14:25:a2:3b:3e:74:fe:c7:29:6d:
af:09:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org