Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/U9qKsic9dvzkYb1RrKsh9Jo1OuM.roa
File: U9qKsic9dvzkYb1RrKsh9Jo1OuM.roa (raw, json)
Hash identifier: B2jvDDC3Cb6nZpdJ78lUGA3EzYNgBJHuKfKC7L1HsYY=
Subject key identifier: 53:DA:8A:B2:27:3D:76:FC:E4:61:BD:51:AC:AB:21:F4:9A:35:3A:E3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0191B7FD659F113CADA3715473EB6E9098FE
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/U9qKsic9dvzkYb1RrKsh9Jo1OuM.roa
Signing time: Tue 03 Sep 2024 13:05:22 +0000
ROA not before: Tue 03 Sep 2024 13:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 93.183.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 08:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:fd:65:9f:11:3c:ad:a3:71:54:73:eb:6e:90:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 3 13:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53da8ab2273d76fce461bd51acab21f49a353ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:25:f1:8d:85:92:7b:8a:87:ac:5d:2e:91:
33:a0:73:ca:6a:fe:83:e0:48:ed:b3:1b:ec:46:f3:
99:b0:e0:cb:4b:55:d2:14:71:68:d5:7a:e7:2c:2b:
f4:52:ce:a2:e3:89:24:39:3f:ec:fb:fa:b6:0a:7e:
b3:4a:3c:58:5a:da:de:6f:47:8b:5e:50:a1:e4:51:
9f:86:97:d5:c5:e2:22:49:71:c8:0e:61:2c:7a:7c:
a3:76:93:41:d7:03:b4:f1:95:be:2c:60:e0:86:03:
4f:d0:1d:0d:7d:ef:55:d4:e6:75:3f:17:e9:c6:ac:
2e:4c:12:07:31:7b:ce:cc:57:89:32:0d:a4:cc:61:
89:63:09:dd:18:f3:98:fc:25:01:8f:5d:f0:3a:0d:
be:96:51:41:49:49:e2:80:2f:e0:c3:a9:85:3b:42:
b7:5a:b8:14:ac:e4:12:ae:9f:de:cb:5d:45:a7:41:
05:98:9c:ff:e6:f8:92:7d:f4:07:c8:03:60:83:91:
45:e8:28:b9:ed:d8:23:3a:c6:0e:da:e8:0d:b1:b3:
55:97:18:ab:13:40:4c:07:e2:35:c1:4b:38:6e:33:
c6:52:14:f6:7e:a7:c5:9f:ff:5e:83:6f:8a:d9:04:
af:7d:22:d6:19:11:b0:4d:c1:1a:27:f8:8c:49:13:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:8A:B2:27:3D:76:FC:E4:61:BD:51:AC:AB:21:F4:9A:35:3A:E3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/U9qKsic9dvzkYb1RrKsh9Jo1OuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:20:8f:1a:39:42:af:a4:13:62:95:82:a0:db:b8:f4:c9:7e:
44:e9:ff:7e:e2:d3:10:92:e0:59:b6:18:6f:2c:a5:bd:5e:16:
ee:6e:a1:b4:14:5e:d9:a2:ce:b7:47:21:cb:bf:c1:ac:d2:50:
b2:07:79:07:88:55:53:72:16:78:aa:66:94:da:ae:d9:1f:31:
a0:c1:ef:db:4b:bb:ca:0d:69:d6:b1:2e:19:34:85:43:4e:af:
b0:f9:c7:e4:29:87:79:55:46:a1:42:05:a7:b9:ad:32:26:7a:
c0:f3:45:6a:6c:1f:48:aa:f7:36:ea:21:7d:76:c5:b2:9a:b6:
cf:69:d7:ef:50:61:e7:7a:de:c1:61:8f:6d:51:d4:81:7e:1d:
eb:0e:7b:73:3e:3f:5a:b5:6b:7c:2e:f0:ff:fa:a6:31:89:c2:
df:91:3c:53:58:28:8f:28:63:ac:39:4b:a7:cd:1f:dc:1b:00:
e7:e4:73:24:e7:21:02:be:5b:c1:9d:46:af:43:c5:41:77:64:
e9:76:07:d6:6b:2c:9b:e3:3e:43:d0:87:fe:ae:65:cc:4c:66:
59:38:3b:73:f3:e2:eb:cd:6a:a6:1c:54:af:98:0b:f1:cb:b7:
30:71:86:8a:68:19:cb:88:79:8c:15:eb:d4:35:bd:b3:44:e2:
de:bd:81:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 10:53:20 2024 by rpki-client on console-ams.rpki-client.org