Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/TXhB-sF3Qnox5wThZCFGmDbfs_4.roa
File: TXhB-sF3Qnox5wThZCFGmDbfs_4.roa (raw, json)
Hash identifier: KXZMIPFCocL2rHhUQ9LU6PIGAUdFH0/EZm73lNSYLDY=
Subject key identifier: 4D:78:41:FA:C1:77:42:7A:31:E7:04:E1:64:21:46:98:36:DF:B3:FE
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0193453EE4C8252101488F8502C732AE8C46
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/TXhB-sF3Qnox5wThZCFGmDbfs_4.roa
Signing time: Tue 19 Nov 2024 16:26:09 +0000
ROA not before: Tue 19 Nov 2024 16:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48813
IP address blocks: 93.115.102.0/24 maxlen: 24
93.115.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 05:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:3e:e4:c8:25:21:01:48:8f:85:02:c7:32:ae:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Nov 19 16:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d7841fac177427a31e704e16421469836dfb3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:24:d3:7d:ad:0a:03:58:e9:fa:13:46:c4:
d1:54:a2:d9:a7:ed:ed:d2:2f:4b:b8:d5:c9:a7:c8:
f0:02:bc:f0:db:00:d6:6b:64:44:3d:f2:04:90:e2:
e2:70:05:18:22:62:f7:c1:5a:d0:42:f4:8c:93:8b:
60:f4:c4:8a:f5:22:d8:8a:f0:0d:57:f6:1c:5a:b5:
87:21:70:e8:e3:68:f9:3e:35:0c:5e:94:87:4e:bf:
33:cd:e7:34:8f:02:01:c5:b3:80:de:7d:5c:81:63:
8c:50:7f:a2:28:54:db:de:62:ef:94:b1:56:55:2a:
18:50:5e:cc:3d:a7:0b:de:d3:5e:50:50:bd:81:9f:
8a:fc:cc:1a:78:b5:2c:0d:b2:ae:0c:52:61:10:7d:
6e:aa:e7:11:7e:77:3b:d3:5a:16:6f:98:4b:c0:85:
01:3c:5c:95:08:ba:1b:ab:51:ba:71:f3:78:e7:63:
e8:9c:59:63:61:62:0e:c1:a5:93:b7:a3:84:a6:40:
fb:11:44:cc:d3:59:b2:20:45:e3:91:33:26:fd:59:
4a:d3:3c:a2:cb:1f:cf:48:81:09:dc:38:7e:c0:89:
5c:ca:62:1f:da:f8:b0:d3:3a:72:52:b1:43:5a:10:
7b:ae:c2:eb:94:37:83:3d:f9:db:86:37:d3:48:bc:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:41:FA:C1:77:42:7A:31:E7:04:E1:64:21:46:98:36:DF:B3:FE
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/TXhB-sF3Qnox5wThZCFGmDbfs_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.102.0/23
Signature Algorithm: sha256WithRSAEncryption
af:61:0d:32:1f:53:15:94:97:8b:35:29:b2:60:dc:dc:6e:3c:
84:0f:ec:62:fb:04:b9:ea:ba:2e:a9:bf:3d:8c:19:b9:94:2f:
c0:96:b0:0d:df:c0:38:cc:31:4c:58:b7:80:9f:23:91:75:57:
82:67:5e:05:6a:7f:62:4a:9f:a5:3a:62:21:24:6f:d0:0e:93:
6a:a9:5f:7f:bf:64:ab:54:30:63:3c:f6:d9:85:75:fa:d7:70:
9b:72:03:57:72:06:c3:ce:38:fe:01:a6:ab:41:d4:79:98:dc:
85:d6:70:13:1c:d9:4c:19:03:ea:e8:4d:ab:92:28:2f:9c:3b:
e4:f7:55:99:50:34:14:b6:15:a3:cf:43:51:2b:53:59:0a:5f:
ea:74:57:ea:00:c8:46:2d:c6:e9:a8:97:82:e4:29:ef:fe:9f:
22:c3:5b:90:14:9e:0f:e9:83:17:ec:a9:78:38:07:69:0c:3f:
98:84:13:3f:89:9c:d8:d3:d0:26:21:43:0c:4b:00:9b:db:3e:
36:be:12:04:fe:b3:0a:e2:15:d1:e2:c8:b4:3c:36:96:ef:fe:
e3:a1:f5:38:3c:34:06:9d:fa:16:3c:a8:1d:33:c1:c6:04:9d:
52:4c:ca:88:ca:07:b5:0e:09:55:00:b2:c4:50:72:6f:b7:c4:
f8:61:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 09:39:30 2024 by rpki-client on console-ams.rpki-client.org