Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/0Ktf97mQiXo3gvpMZaO6ALgqTkU.roa
File: 0Ktf97mQiXo3gvpMZaO6ALgqTkU.roa (raw, json)
Hash identifier: ppPmAChFSo66rK2E0nXZJo+t4/A8RaADhKoLVBATbP4=
Subject key identifier: D0:AB:5F:F7:B9:90:89:7A:37:82:FA:4C:65:A3:BA:00:B8:2A:4E:45
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018570CBD54416C0A752C33C54BAF28959DD
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/0Ktf97mQiXo3gvpMZaO6ALgqTkU.roa
Signing time: Mon 02 Jan 2023 04:44:44 +0000
ROA not before: Mon 02 Jan 2023 04:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21276
IP address blocks: 93.187.111.0/24 maxlen: 32
185.110.92.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d5:44:16:c0:a7:52:c3:3c:54:ba:f2:89:59:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 2 04:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0ab5ff7b990897a3782fa4c65a3ba00b82a4e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:a6:40:47:1f:e3:0b:60:41:8d:9b:fb:4e:
88:27:43:b7:b1:25:a8:1b:f1:59:3c:38:8a:f4:1f:
e7:08:84:9c:e0:d4:a1:61:f1:7b:cd:23:cd:d0:f9:
85:a8:02:3e:ca:83:ff:0e:fb:a4:0c:46:e8:d4:fa:
3b:3a:99:cd:3b:0c:c5:ab:27:4e:3c:fc:aa:ca:e7:
cd:ad:06:48:47:98:ad:ea:5d:d6:58:cf:64:c0:dc:
a7:5d:fd:d9:3d:b2:b7:b8:18:8f:6e:94:6b:e2:bf:
13:1a:ba:43:70:5d:e6:96:4d:ba:20:a6:7c:45:64:
dd:79:8c:ad:cd:45:d3:76:7f:3c:c6:27:51:be:2d:
bf:ba:22:21:07:a6:84:88:fc:00:a0:43:75:53:30:
15:0a:e7:75:d5:65:e6:19:25:c1:07:64:16:d0:1d:
1f:4f:65:65:b3:e5:cc:0d:f6:02:a9:9e:f5:32:a8:
f0:2a:c2:c5:24:7b:96:de:32:a4:56:a1:fb:7d:29:
b4:46:df:a0:d4:aa:a2:b8:8e:bf:c8:08:f9:03:f6:
dc:85:9d:91:4d:80:ab:7f:2a:9b:1e:e7:eb:b2:b8:
79:ac:41:11:da:94:6b:ee:32:b8:ca:9e:f6:82:25:
ec:00:df:68:d2:93:44:03:43:ad:37:fc:81:59:dd:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:5F:F7:B9:90:89:7A:37:82:FA:4C:65:A3:BA:00:B8:2A:4E:45
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/0Ktf97mQiXo3gvpMZaO6ALgqTkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.111.0/24
185.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0c:71:f3:70:2f:83:14:cf:19:11:80:63:d2:64:be:73:34:
48:5a:73:65:cf:03:ab:12:5e:ab:7d:ce:17:9f:82:e5:af:cb:
f9:be:3c:61:d2:63:5e:67:30:82:6e:5a:a6:27:28:63:b2:0d:
52:1d:1c:a5:07:c4:f5:0f:b2:b5:60:80:38:e8:60:f3:78:83:
09:a7:f4:2e:fe:f1:cd:ef:37:fa:db:f8:3f:bf:cf:d9:d4:28:
fe:09:c5:af:93:d2:6d:a9:4c:ef:f6:a8:28:e7:e4:03:70:ae:
8d:a1:fa:ad:1b:c0:38:aa:b9:26:33:4b:4b:1f:65:9b:97:56:
fa:19:4f:e3:f7:96:25:5d:e0:0e:e1:20:eb:05:34:ec:a5:1e:
d7:67:c3:68:d8:3f:4d:ae:11:82:ea:42:fe:fd:57:8c:ca:95:
9a:49:0b:38:46:60:c3:c5:e8:23:2a:11:29:b9:b3:66:f3:79:
81:17:c5:e3:84:64:4f:bb:5f:35:5f:83:66:8b:ba:6f:04:a9:
3f:3d:ea:71:46:3d:9b:cc:d9:00:a1:e0:3e:de:ec:33:7b:72:
09:bd:ec:f1:42:e8:57:59:7f:50:b0:c4:2d:02:73:3b:be:93:
f8:e5:9e:7e:e1:b0:74:3d:f6:a7:44:5e:5c:9f:81:1a:1c:e5:
a6:35:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:56 2023 by rpki-client on console-ams.rpki-client.org