Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/mCanH7m33PHId4XJaAyLjdAT5fY.roa
File: mCanH7m33PHId4XJaAyLjdAT5fY.roa (raw, json)
Hash identifier: ddM4ZT+iOWmnnkWOwrc6m6rDIn2IZcGKw+DCcq+CfwM=
Subject key identifier: 98:26:A7:1F:B9:B7:DC:F1:C8:77:85:C9:68:0C:8B:8D:D0:13:E5:F6
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01856D13DA7590F362F3FA534C9E5F79ABCF
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/mCanH7m33PHId4XJaAyLjdAT5fY.roa
Signing time: Sun 01 Jan 2023 11:24:55 +0000
ROA not before: Sun 01 Jan 2023 11:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206854
IP address blocks: 93.126.30.0/24 maxlen: 24
193.178.201.0/24 maxlen: 24
193.178.202.0/24 maxlen: 24
93.126.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:da:75:90:f3:62:f3:fa:53:4c:9e:5f:79:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 11:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9826a71fb9b7dcf1c87785c9680c8b8dd013e5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:28:ed:89:c5:a7:9f:22:3c:2b:19:79:45:
5c:2b:a7:4a:9f:c2:b0:0e:9d:95:37:06:87:c5:dd:
72:ec:a1:e1:b2:d4:9b:71:c9:f2:19:18:f8:73:a2:
b7:cd:bc:6f:38:db:52:36:04:e0:ed:f1:58:eb:71:
ac:75:ec:8d:6e:af:f6:c8:38:af:86:69:5e:bd:3a:
5c:8d:b6:4d:7b:42:88:d4:e7:8f:bf:39:22:bf:dd:
ed:f8:72:d1:be:4e:8b:58:71:e8:1d:3c:1a:f8:68:
1b:e4:3c:c8:5f:a5:da:3a:b3:01:03:11:38:3e:fe:
74:e7:1a:8c:bb:4f:d0:ad:af:79:4e:bc:ff:0b:58:
e2:af:76:5d:ea:57:57:50:ba:0c:46:22:17:18:d2:
0e:1a:6a:44:37:6a:4b:89:ce:6c:18:da:90:14:d7:
d4:4f:d1:b7:44:14:d6:4d:e4:9b:8f:06:3a:7c:72:
cc:e3:48:8e:ef:af:f7:10:8f:77:ef:b6:5c:b5:0b:
1c:c6:83:6c:1f:d1:01:6f:c5:5a:a9:ee:1f:c4:3c:
e1:e0:5e:19:b6:ff:f1:52:9b:97:da:a3:8a:38:fc:
8e:eb:a8:29:c1:83:ed:d2:71:64:39:1b:4f:3a:77:
8a:8a:f6:a8:ad:73:84:60:12:bc:db:3c:f4:30:52:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:A7:1F:B9:B7:DC:F1:C8:77:85:C9:68:0C:8B:8D:D0:13:E5:F6
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/mCanH7m33PHId4XJaAyLjdAT5fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.30.0/24
93.126.55.0/24
193.178.201.0-193.178.202.255
Signature Algorithm: sha256WithRSAEncryption
a4:c5:53:16:e6:c2:e8:85:f3:5f:ea:a6:f7:0b:93:d1:b0:a3:
95:f7:e6:e2:d6:68:5c:13:98:37:3c:a6:e2:0d:4b:d2:ae:dc:
87:52:14:05:38:b4:2c:a8:70:41:ab:f8:cd:fc:28:3c:62:c9:
c1:6f:b5:a8:ce:66:3e:f3:a3:7d:f2:2c:70:de:4d:3e:26:68:
82:ef:d9:0d:2a:b7:fd:35:4f:d8:66:cb:7e:23:52:bf:74:2b:
90:da:6b:5a:b4:56:ce:d8:37:f2:98:cd:a9:f7:e9:e8:e2:19:
43:cc:9e:91:55:25:66:41:4d:e1:0f:af:27:85:44:da:fa:0b:
bd:ff:c4:3a:12:9e:b4:85:d3:ae:06:4b:ed:00:9c:7c:27:e0:
28:b5:6a:fb:c2:bd:8b:07:b4:7f:7d:d8:1c:30:2b:e1:96:31:
2d:00:00:d4:f2:9e:b6:46:47:f9:10:e0:fa:a4:97:57:11:4e:
22:50:c3:f5:08:17:79:3b:cc:d2:ef:ce:01:71:07:a4:2d:37:
3e:5d:4f:cc:82:36:68:ba:43:a2:f3:e3:70:15:a3:2c:ab:12:
a6:91:db:de:5b:28:b5:bb:eb:58:c7:6f:2d:a0:50:83:54:2d:
b3:ba:ce:a5:ec:a3:7d:46:db:c9:0a:ed:af:02:27:9f:f6:d5:
c1:f8:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org