Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/T3dw6YK7sZV5uoqcF7HLiH2Fx6Q.roa
File: T3dw6YK7sZV5uoqcF7HLiH2Fx6Q.roa (raw, json)
Hash identifier: AEG03YvoZIKBrI9pDl66gF2WAr3pHJzKj6YeqIRBIRo=
Subject key identifier: 4F:77:70:E9:82:BB:B1:95:79:BA:8A:9C:17:B1:CB:88:7D:85:C7:A4
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 01856F30112FB799005CE48841D742E0305A
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/T3dw6YK7sZV5uoqcF7HLiH2Fx6Q.roa
Signing time: Sun 01 Jan 2023 21:14:59 +0000
ROA not before: Sun 01 Jan 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209791
IP address blocks: 93.175.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:11:2f:b7:99:00:5c:e4:88:41:d7:42:e0:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Jan 1 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7770e982bbb19579ba8a9c17b1cb887d85c7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:b2:f2:66:12:6b:fd:bb:d9:73:a9:84:5d:
5c:a6:c1:d9:b2:32:76:96:80:d6:38:69:7e:c4:b6:
51:99:e4:ef:af:30:d9:10:f0:17:0f:93:6c:60:68:
39:6c:69:4f:6b:f5:50:1c:f4:5d:0b:0b:af:8f:01:
50:03:74:89:a5:12:23:24:cc:a2:7d:6e:4c:26:93:
95:c1:2d:8b:fd:02:f5:fa:d2:82:3c:de:c8:1d:61:
45:c9:40:af:45:23:09:80:ca:bc:a2:19:24:7e:db:
4b:ee:e0:71:d1:26:f9:04:5f:fb:b8:91:a2:42:67:
b8:31:15:ed:54:2f:de:7d:97:76:60:0a:70:0f:76:
0e:7d:e3:a2:b4:b8:02:1c:05:e0:bb:d6:67:71:21:
90:c0:54:7a:4f:10:c2:55:96:dc:55:e9:6a:13:98:
13:82:aa:fa:84:6e:b8:0f:0c:3a:4b:f5:74:00:9c:
79:9b:8b:8f:4e:45:35:ca:77:14:b5:af:59:68:9e:
76:75:e6:f2:08:c7:b8:2d:2b:c1:32:06:25:8f:dc:
4b:f4:8a:2c:f2:9e:2b:d5:95:44:d9:40:1c:bb:28:
cf:29:83:cd:5d:db:39:75:fe:cc:b0:1c:55:60:ca:
79:68:22:f0:30:c2:1f:34:b4:e5:11:46:74:86:12:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:77:70:E9:82:BB:B1:95:79:BA:8A:9C:17:B1:CB:88:7D:85:C7:A4
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/T3dw6YK7sZV5uoqcF7HLiH2Fx6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.240.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f5:63:4d:fc:27:a6:c0:ad:ef:29:19:69:45:eb:17:59:1c:
18:33:5b:26:73:f3:0e:78:02:32:15:6c:35:ec:ca:bd:6a:c7:
39:73:b2:2e:0d:3a:29:bc:d4:fa:3a:94:3f:96:32:77:e9:39:
43:c0:d0:74:e5:b8:1c:56:d4:7a:5f:ce:89:62:f6:09:f1:f7:
ed:02:ee:a5:e1:60:d9:5d:e4:6a:32:1c:33:51:7c:3f:b3:79:
60:b4:37:08:17:86:3f:40:dc:0c:d5:66:48:2d:29:46:a7:bf:
33:e0:09:04:45:d0:70:01:98:cf:9b:f8:1f:af:f3:f9:3a:1a:
1b:65:bc:a3:c3:0d:da:3e:8e:84:34:1c:6a:be:bd:7c:96:17:
13:9d:23:9b:63:02:0a:e7:59:f4:aa:28:19:ac:b2:29:42:31:
74:b5:f3:80:49:61:df:42:84:b9:a0:e8:34:c5:0b:61:0c:ec:
54:9b:c2:bf:d1:8d:0b:fb:4e:fa:6f:9a:0b:76:f7:8f:96:db:
5d:b0:87:5d:e5:96:ec:2d:21:63:a3:db:fd:10:9d:f3:64:fc:
d2:85:2d:0e:db:ee:2f:df:e2:a1:9c:19:27:8b:27:25:ed:1c:
67:23:5f:61:23:53:1b:5b:d2:0c:28:e3:65:18:80:14:37:5e:
83:f8:a4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:13 2024 by rpki-client on console-fra.rpki-client.org