Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/XCbIzcQwVMU_RItdYknmvGej9E0.roa
File: XCbIzcQwVMU_RItdYknmvGej9E0.roa (raw, json)
Hash identifier: c0dOfhseMJoiyoKgXLID2LuGeJNFO86sL4Gbm3WF2R4=
Subject key identifier: 5C:26:C8:CD:C4:30:54:C5:3F:44:8B:5D:62:49:E6:BC:67:A3:F4:4D
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0192FB023FFFA2B74ABDBDA1460A3773762F
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/XCbIzcQwVMU_RItdYknmvGej9E0.roa
Signing time: Tue 05 Nov 2024 06:28:01 +0000
ROA not before: Tue 05 Nov 2024 06:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 93.119.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:02:3f:ff:a2:b7:4a:bd:bd:a1:46:0a:37:73:76:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 5 06:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c26c8cdc43054c53f448b5d6249e6bc67a3f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:f5:6a:16:c9:f4:02:d2:04:90:0d:1e:58:
71:a6:d9:2e:a7:8c:0d:5a:49:8d:e3:73:55:06:54:
65:ec:b3:77:88:14:81:f9:0a:5f:0e:85:cd:78:4c:
94:1d:44:40:ba:68:38:1c:7b:c3:5c:f5:0a:44:cd:
03:35:9e:6e:04:6d:66:bc:08:a7:52:38:14:a0:99:
5c:f9:c0:7e:97:7d:0f:de:8b:d7:b5:17:78:55:b2:
5c:d8:ee:9c:75:c5:44:80:96:99:59:e4:92:0f:60:
59:35:d7:d6:92:4d:af:19:75:28:c6:7c:88:f7:a1:
58:f2:d3:85:d2:c5:f1:40:26:4d:11:02:86:39:04:
e8:3f:b2:84:e2:a2:e4:ae:df:5e:ac:82:12:e3:2d:
4e:26:9f:61:44:d8:80:c0:e0:78:9b:15:68:19:15:
e8:96:ff:ac:19:78:fa:34:6e:c2:d2:7b:65:9a:e7:
e1:43:c9:c5:28:65:9e:45:5f:f6:cf:90:46:af:be:
2b:ab:37:89:39:33:ff:aa:da:e6:7f:1e:15:73:58:
6f:5f:9a:7a:a2:f7:54:d5:72:ab:43:8e:e6:d0:1a:
c0:5c:e9:99:a7:b1:d0:f6:2d:34:1f:7b:86:ec:01:
4c:74:fc:62:b8:f7:47:0c:63:77:b7:fe:8b:8b:a0:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:C8:CD:C4:30:54:C5:3F:44:8B:5D:62:49:E6:BC:67:A3:F4:4D
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/XCbIzcQwVMU_RItdYknmvGej9E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:96:49:45:cb:1e:29:e6:d0:99:1f:b4:a1:d0:23:6f:be:71:
46:ca:4a:9e:e4:1e:70:40:7d:8d:16:59:16:96:86:43:49:07:
6d:8a:a6:1e:38:a6:bc:65:29:b0:ad:94:74:7b:a1:b3:f4:4a:
dd:85:cb:c2:64:4d:0a:6c:e7:a3:d9:96:be:21:52:cf:65:03:
c2:d3:91:54:e6:c4:d6:5b:09:9b:bb:43:7b:9c:53:19:07:4b:
d3:4f:6a:c4:0d:86:d8:4b:6d:83:59:8b:65:26:84:f3:b8:33:
70:05:c5:a1:41:02:55:60:cf:cc:81:e0:a5:b5:80:c6:fc:89:
1a:22:ca:17:35:46:1b:35:2a:31:b8:e8:b4:aa:54:63:3b:26:
0a:a3:75:38:36:22:d8:d1:a7:2a:19:9c:4a:bc:aa:f2:61:b0:
90:01:39:56:87:4f:29:2c:20:ad:1b:59:89:2b:fd:37:53:cc:
b2:45:c6:84:12:95:3f:7d:b5:48:b6:34:57:52:ff:cd:63:33:
e8:ab:0b:3c:dc:c5:af:7c:a9:63:fb:ca:87:2e:94:eb:cd:9f:
a0:9e:7a:e2:93:3f:9d:2a:67:fa:83:cf:64:2b:c0:95:a4:26:
e1:ea:23:17:01:ad:89:6a:30:a4:ad:76:dd:b7:e6:f7:44:fc:
dc:c5:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:09 2025 by rpki-client