Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/X303efjNTWLzDR3_uDfmJ694L7U.roa
File: X303efjNTWLzDR3_uDfmJ694L7U.roa (raw, json)
Hash identifier: IO+RGG37BHnTEMxmLS5gaVI2O3wH16MGHfydI91hacM=
Subject key identifier: 5F:7D:37:79:F8:CD:4D:62:F3:0D:1D:FF:B8:37:E6:27:AF:78:2F:B5
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01915ACE6A09790DA4F80A0126DD33F84F48
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/X303efjNTWLzDR3_uDfmJ694L7U.roa
Signing time: Fri 16 Aug 2024 10:49:22 +0000
ROA not before: Fri 16 Aug 2024 10:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 93.126.14.0/24 maxlen: 24
93.126.23.0/24 maxlen: 24
93.126.36.0/24 maxlen: 24
93.126.37.0/24 maxlen: 24
93.126.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 14:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:ce:6a:09:79:0d:a4:f8:0a:01:26:dd:33:f8:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Aug 16 10:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f7d3779f8cd4d62f30d1dffb837e627af782fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:b4:ad:3d:32:7a:ee:c1:31:93:c5:dc:5a:
fd:3a:65:f2:88:40:33:06:04:ad:1f:51:09:3b:fd:
16:75:55:45:a2:e7:a4:04:4b:6a:56:6e:8f:02:97:
f6:cf:1f:ff:10:c6:32:87:05:8d:eb:f0:87:b9:23:
9a:0a:0d:22:40:3f:83:29:f5:63:3a:e3:45:86:d6:
7c:17:aa:8b:43:0e:d9:50:5a:aa:08:d6:72:c8:8b:
cc:19:bb:2a:b8:18:f1:6e:7a:59:8f:a4:b9:ea:ef:
2f:db:ff:8c:23:df:43:aa:59:99:d1:6e:76:59:2b:
73:92:f0:92:ee:83:b1:3c:9b:33:9d:9d:6a:00:19:
7c:4b:5a:15:62:c8:0a:4d:11:62:bc:ac:94:af:e8:
69:5b:75:02:81:ee:d1:91:74:6c:c5:bf:bb:c1:f2:
35:1f:2a:80:d4:8d:ee:14:e3:ad:62:c3:98:72:04:
11:16:45:a1:a5:28:ec:c4:f9:0c:e6:ce:f5:fe:07:
c5:26:44:4e:25:b4:68:65:63:0a:0e:0f:2b:bb:05:
b8:a7:00:69:8e:12:5d:4e:6c:b5:ff:48:d4:b1:95:
e8:91:26:cd:16:64:dd:4a:11:b7:76:0f:6a:12:14:
37:61:de:6c:ed:a3:c1:e8:cc:b3:8d:97:8e:1e:68:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:37:79:F8:CD:4D:62:F3:0D:1D:FF:B8:37:E6:27:AF:78:2F:B5
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/X303efjNTWLzDR3_uDfmJ694L7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.14.0/24
93.126.23.0/24
93.126.36.0-93.126.38.255
Signature Algorithm: sha256WithRSAEncryption
07:02:09:2a:8a:04:c0:25:81:b7:f9:49:e9:62:a9:92:cb:6a:
66:d5:56:be:72:f3:22:4a:02:aa:e5:8a:15:ce:35:79:8c:d1:
00:83:2a:25:5b:77:dc:6e:ad:82:44:0c:9a:73:f8:5f:78:0b:
fc:3e:da:dd:ab:b1:8b:d3:31:96:f7:65:3c:28:da:5f:8e:fe:
a5:bb:97:e8:8b:bd:b4:be:b7:85:e0:d4:47:30:8a:ff:f1:6f:
4b:75:01:3f:de:b0:17:10:c9:73:cf:ab:f5:9d:2e:d5:2d:c8:
3d:fa:65:cb:d3:d6:2a:7c:ea:1f:b3:80:1b:77:f8:55:71:d7:
c6:37:22:c6:2e:26:85:36:ff:73:f5:97:9b:02:14:84:04:01:
b2:32:6d:47:fb:1e:34:44:29:15:4a:a8:33:1e:a7:ac:37:fa:
99:f5:4c:32:30:7b:73:9d:66:d7:4c:6b:06:b3:8b:3f:8b:cf:
67:1e:bf:75:8d:cb:31:d7:84:c5:6f:38:ea:97:80:72:a1:bd:
c0:e2:eb:9c:97:6f:f5:9e:e1:17:df:d0:e2:4f:93:73:12:06:
1e:2e:4f:0a:6b:62:10:e1:fc:93:85:f5:dd:8f:24:d3:e8:d0:
e5:65:30:47:31:5c:c9:3f:a0:98:cd:91:2b:5c:bf:63:be:e9:
66:99:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:48 2024 by rpki-client on console-ams.rpki-client.org