Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/rLUSmJ-IZHEG96UOWMSw7kXgOhc.roa
File: rLUSmJ-IZHEG96UOWMSw7kXgOhc.roa (raw, json)
Hash identifier: Pp1dLxAtSx8mOvHal04KqDRVQ8mU3fqlc3GuO7/i27U=
Subject key identifier: AC:B5:12:98:9F:88:64:71:06:F7:A5:0E:58:C4:B0:EE:45:E0:3A:17
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01923F8CDB4D8C28C53DF25AACB169D974E0
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/rLUSmJ-IZHEG96UOWMSw7kXgOhc.roa
Signing time: Sun 29 Sep 2024 20:50:48 +0000
ROA not before: Sun 29 Sep 2024 20:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 93.126.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3f:8c:db:4d:8c:28:c5:3d:f2:5a:ac:b1:69:d9:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Sep 29 20:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acb512989f88647106f7a50e58c4b0ee45e03a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:c1:0e:d5:7e:3d:00:64:d9:93:b8:00:de:
89:0e:c6:f5:22:29:92:6c:74:75:bc:ed:60:e7:b3:
15:51:60:0b:75:64:1d:52:cd:b2:6a:a9:bb:90:69:
2c:31:bd:de:6b:b4:8c:97:97:c4:6f:69:50:8e:51:
f6:53:43:25:5f:99:aa:c9:bf:4e:d6:87:3e:ae:5f:
de:f4:9a:41:6d:8c:f1:b9:ab:c3:58:50:0a:90:fa:
3b:b6:06:78:b2:f2:38:6f:6b:22:77:48:7f:60:5d:
ec:ee:3f:64:78:98:ce:69:95:ca:07:07:13:9d:9c:
08:4b:85:06:ea:94:c0:5b:fb:28:26:d0:e0:6e:d5:
73:a5:54:75:f2:b8:73:f9:84:e1:0f:4a:61:87:4a:
41:6c:ed:8e:78:0a:66:ac:93:e4:54:c8:cc:20:c6:
e9:e6:9e:84:8e:93:c0:fa:a6:f7:2f:27:d8:e0:6f:
2e:87:f7:b2:37:4b:3a:c0:ff:66:88:f9:77:af:30:
53:02:dc:2d:fd:e9:9e:0a:68:8b:ae:59:42:3e:b8:
86:db:c5:fd:5f:48:26:80:cb:63:1e:15:87:a4:66:
5d:cd:cc:c8:5e:25:1a:74:3e:99:03:c4:6d:40:13:
6f:6f:3b:f0:2a:17:9e:0d:50:59:1c:26:f5:85:4b:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:12:98:9F:88:64:71:06:F7:A5:0E:58:C4:B0:EE:45:E0:3A:17
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/rLUSmJ-IZHEG96UOWMSw7kXgOhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.50.0/24
Signature Algorithm: sha256WithRSAEncryption
02:33:e6:64:c4:1b:df:46:5d:33:13:4f:d5:fd:bd:cf:36:c3:
39:86:71:69:a0:4d:11:c1:d3:70:ad:80:0d:a8:b8:6d:99:43:
99:45:f4:b0:53:a4:7d:34:64:ad:a8:9f:b0:a4:a0:60:c3:f1:
b8:38:4e:f9:10:03:e6:29:ea:13:ae:d1:ee:f8:a6:a2:fc:18:
36:3b:a4:8e:09:f0:c3:fa:cf:46:c0:3e:81:3b:9a:16:07:0a:
89:64:b6:fe:55:71:26:74:34:89:48:23:64:48:11:b5:2a:3c:
66:23:9d:4e:bd:4d:17:7f:bd:ce:6e:25:0b:fa:af:2e:76:bd:
35:6e:1e:21:f5:5b:71:d2:17:2a:07:2e:ff:b6:1e:d5:e0:77:
5a:d5:fb:b2:a9:44:35:b1:64:87:3f:23:0e:85:45:7d:67:37:
da:ff:d9:ab:e0:dc:51:76:0e:27:01:4f:54:9c:60:8a:bd:1b:
b2:0f:ca:83:ec:4b:42:8c:72:90:43:b9:cf:fa:62:54:18:6b:
81:bf:68:5c:fd:05:2d:95:9a:71:fc:42:c1:e8:4c:ab:d5:16:
3f:dc:6d:92:84:c6:1a:5c:45:94:ab:03:08:05:55:6f:62:87:
97:b0:5a:f6:e9:36:9c:ce:9c:3b:ad:00:2d:95:89:f1:2b:b4:
5d:98:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:06 2025 by rpki-client