Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/JDd_Xa2ZM2rZ6fjew8CKqcF0FCg.roa
File: JDd_Xa2ZM2rZ6fjew8CKqcF0FCg.roa (raw, json)
Hash identifier: ws994SHfSjdeQ07/dIieEdQt1oW6h7qjxSKKAKQTjtM=
Subject key identifier: 24:37:7F:5D:AD:99:33:6A:D9:E9:F8:DE:C3:C0:8A:A9:C1:74:14:28
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 01857321D11F67D8D2B7C7D9AF596B07DF3C
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/JDd_Xa2ZM2rZ6fjew8CKqcF0FCg.roa
Signing time: Mon 02 Jan 2023 15:37:54 +0000
ROA not before: Mon 02 Jan 2023 15:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210861
IP address blocks: 93.190.126.0/24 maxlen: 24
2a11:7980::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:d1:1f:67:d8:d2:b7:c7:d9:af:59:6b:07:df:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: Jan 2 15:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24377f5dad99336ad9e9f8dec3c08aa9c1741428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:06:bd:5c:e8:bb:96:fe:90:66:c0:6a:3e:
80:cb:7d:2e:80:a8:9a:d4:7a:34:91:b3:ef:93:64:
d1:14:53:b5:6e:43:22:2d:ae:87:6b:d8:39:20:bb:
a4:c4:82:e4:06:65:c3:1e:a7:4f:5d:5f:72:f2:bb:
fc:55:c7:19:16:13:31:72:97:9a:6e:56:1a:f3:85:
ad:d3:34:6a:94:8f:4a:c3:b3:fd:67:60:bc:c6:ab:
08:95:7b:43:37:ad:6f:77:30:cb:a6:c4:bb:4d:7a:
91:3d:bd:3b:ba:3a:59:b6:b5:e3:a0:67:4d:eb:a8:
45:a9:5f:aa:d6:b7:59:41:f8:12:ab:95:e9:64:9a:
b6:91:bd:f4:03:36:f7:c1:12:9c:61:e6:ca:48:db:
ca:ce:2b:eb:e7:a6:88:fe:9c:3a:c8:b4:23:28:20:
5c:df:e5:36:a6:a6:3c:56:44:cc:23:b5:de:f9:b7:
b1:e2:13:c4:94:81:0e:55:36:9a:31:7c:37:f4:72:
23:af:ed:ff:35:eb:bc:8f:7d:4b:3d:2f:e5:93:f9:
ed:cf:91:4a:d5:00:fb:28:c0:20:a9:e6:df:d2:33:
92:78:75:73:6b:83:45:55:00:72:2d:cc:3c:9e:ec:
39:7f:69:02:06:55:dd:52:20:93:76:2c:61:03:00:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:37:7F:5D:AD:99:33:6A:D9:E9:F8:DE:C3:C0:8A:A9:C1:74:14:28
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/JDd_Xa2ZM2rZ6fjew8CKqcF0FCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.126.0/24
IPv6:
2a11:7980::/40
Signature Algorithm: sha256WithRSAEncryption
18:2f:69:1d:75:40:cb:ee:e9:32:89:d2:11:af:11:9a:ee:40:
4e:5b:13:20:22:01:9e:c0:62:70:f1:19:fa:0e:4c:8c:a4:18:
f7:6a:44:9d:0c:d3:1e:22:c8:0b:ed:eb:44:7c:71:56:ce:c7:
f2:a0:4b:43:23:f2:2d:f1:33:ff:ab:9f:a8:9f:f1:8b:bb:c7:
65:bf:e4:ac:4d:42:f5:44:da:5f:1d:f2:f5:2a:39:bb:f9:09:
10:b4:63:7b:53:d2:1b:8c:0f:e9:5b:c5:04:db:44:37:10:f5:
32:b4:cc:9a:ba:80:b1:f8:d1:23:83:c3:19:c6:27:ff:d6:2d:
f6:eb:fc:d8:32:7e:c3:96:34:1b:57:a0:02:b7:a7:6b:08:98:
57:14:08:a6:0f:69:5a:eb:2b:84:d1:eb:cf:22:01:be:8e:f1:
44:35:f5:3e:68:0b:1c:16:9b:b5:34:bf:aa:e0:18:f2:e3:bf:
d8:9f:88:d7:a6:3e:c8:a0:f8:a0:bd:07:ae:69:a0:89:5d:3d:
f4:c9:9a:ba:e7:42:57:e4:7d:de:89:34:23:af:76:2e:de:ce:
fe:f1:2c:5d:82:11:ea:06:3e:ee:7c:f5:61:4a:60:39:fe:ff:
70:80:d8:bb:e6:e5:07:a2:30:a3:e8:8d:33:a8:ca:dd:9f:00:
48:0a:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:39 2024 by rpki-client on console-ams.rpki-client.org