Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/VUxEl2ojZAUa-ATJa4wgFFV3qVk.roa
File: VUxEl2ojZAUa-ATJa4wgFFV3qVk.roa (raw, json)
Hash identifier: tX0mFALYJUzePhrZ5Mz8TAmiTqq7g3Na93Q3xxJPb2o=
Subject key identifier: 55:4C:44:97:6A:23:64:05:1A:F8:04:C9:6B:8C:20:14:55:77:A9:59
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 018D187FCFAE057BA17518534F74CC103CFA
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/VUxEl2ojZAUa-ATJa4wgFFV3qVk.roa
Signing time: Wed 17 Jan 2024 17:37:25 +0000
ROA not before: Wed 17 Jan 2024 17:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 93.95.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 13:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:7f:cf:ae:05:7b:a1:75:18:53:4f:74:cc:10:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Jan 17 17:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=554c44976a2364051af804c96b8c20145577a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:b8:e8:7d:96:28:6b:8c:59:cb:95:40:77:
64:a6:7b:ae:79:47:f0:79:2a:c9:93:b8:6d:c4:a0:
3e:13:2f:5c:00:87:21:d2:e2:73:a7:8a:b1:ff:bf:
e1:06:18:ae:ee:4e:f0:ee:b0:30:7c:63:bc:13:e5:
c1:97:f0:1d:e1:26:40:c5:d2:a2:52:1d:bf:3e:8d:
4d:52:69:c6:cd:49:95:16:d3:6f:ea:73:89:c4:0f:
13:4a:f8:27:42:43:3d:ee:a1:71:1a:10:ae:10:6e:
99:4b:03:63:9c:f5:03:a5:4a:8e:32:12:6f:5a:cd:
ac:5b:ac:93:8d:23:2e:ab:2b:1a:5e:e3:c2:9f:9e:
57:ae:77:ec:18:7a:8c:1c:54:ef:f3:3b:25:42:d1:
b0:0e:42:d6:bd:66:39:d3:4a:9a:62:59:91:f5:20:
d3:20:02:17:f8:6b:67:e7:a2:5e:5b:3d:ea:20:c8:
55:ed:89:a4:cb:eb:91:70:4b:ef:32:d2:f3:fd:89:
eb:61:51:53:ed:01:9e:17:0e:55:1c:26:f8:ce:c8:
42:eb:44:f3:a7:85:61:40:eb:73:f2:4a:e2:8f:ee:
83:c5:e1:51:e5:1f:3f:cc:ac:06:7e:e6:14:83:ab:
24:c9:3f:cf:0c:8b:2d:49:8b:78:68:c7:08:3b:b0:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:44:97:6A:23:64:05:1A:F8:04:C9:6B:8C:20:14:55:77:A9:59
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/VUxEl2ojZAUa-ATJa4wgFFV3qVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
08:04:88:f2:cf:8a:b5:7b:80:00:50:8f:6d:2a:9a:b5:8b:fb:
05:c2:51:45:f2:ee:d4:33:b7:19:8b:b7:ca:0d:5e:f0:ab:14:
76:90:2c:b0:5b:fa:3f:af:0e:3f:64:1f:a3:0e:fc:99:2c:70:
99:bd:95:24:d0:cb:65:80:61:39:d2:ee:ed:75:c8:3f:47:00:
98:26:cc:00:db:46:3d:0f:07:c4:93:4d:51:93:19:4b:ef:cb:
d2:f8:9a:f1:cc:5e:80:98:8d:bd:72:dd:b9:6f:3b:3e:98:e0:
d4:3f:08:61:ef:14:07:1a:42:18:ad:57:4c:22:0d:49:e2:41:
9a:c0:a9:5b:be:40:04:53:2b:0a:e7:09:47:43:35:a7:fc:ba:
16:10:a6:c7:14:df:90:ef:d5:88:f0:96:81:13:67:06:a1:1c:
b9:39:17:3e:5e:9c:e1:79:e2:33:4e:d8:65:2e:fd:ea:7a:f2:
e5:a6:ca:e6:7f:88:4b:8d:da:8c:97:70:54:e5:91:78:c7:38:
31:46:72:9a:ea:b0:64:98:16:b2:3f:32:3c:67:4d:f9:9e:26:
a9:37:0e:35:7e:3c:d7:c3:90:f5:21:d9:1a:e5:2f:f8:61:8a:
12:b7:51:4c:87:44:17:f1:56:46:b2:2a:18:99:d1:65:46:bc:
4e:9a:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org