Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/ui2tEZHOS1avUGr7_0ZbfJ7yJT0.roa
File: ui2tEZHOS1avUGr7_0ZbfJ7yJT0.roa (raw, json)
Hash identifier: OODIQMXjg+ZjR/ex12rC3WevaC9LPrwSlv3g6/3oEMo=
Subject key identifier: BA:2D:AD:11:91:CE:4B:56:AF:50:6A:FB:FF:46:5B:7C:9E:F2:25:3D
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 018E664F6CC51CB77094A0F61794740D2981
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/ui2tEZHOS1avUGr7_0ZbfJ7yJT0.roa
Signing time: Fri 22 Mar 2024 13:17:44 +0000
ROA not before: Fri 22 Mar 2024 13:17:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 93.95.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 17:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:4f:6c:c5:1c:b7:70:94:a0:f6:17:94:74:0d:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Mar 22 13:17:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba2dad1191ce4b56af506afbff465b7c9ef2253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:cc:be:de:04:e6:b0:17:c7:e5:dc:ce:13:
17:c4:d7:5d:57:c9:8c:a9:9a:7c:be:df:89:af:90:
bc:51:8b:82:97:7f:4e:4a:04:5a:59:aa:f2:0a:f1:
9a:1f:a0:b9:55:b0:b2:2c:fb:77:df:8f:4c:94:3f:
ca:69:89:3e:d2:4a:df:14:5d:a3:7d:03:3a:2a:d3:
9e:80:f9:9e:37:a2:bd:26:2f:99:d9:96:36:ca:6e:
8b:01:d0:fb:03:59:e6:4b:e3:20:a0:2c:da:8f:5f:
4b:0b:45:0f:f8:d0:8b:38:1c:d4:be:8a:d2:ab:f9:
24:22:93:09:10:a4:74:c7:e8:f4:88:2e:6a:2d:e5:
92:8e:73:ef:54:55:0e:2d:8f:ff:1f:ff:a8:d2:bd:
a5:e8:0b:b0:69:29:23:0e:b4:bb:37:8f:89:dc:f4:
36:53:7c:e1:36:82:f5:78:b9:e8:32:0f:96:61:31:
bb:36:bd:64:08:89:e0:0a:29:41:75:f6:e4:25:e5:
ca:10:49:b1:2c:10:6f:a3:63:35:a6:d9:df:49:1e:
be:e5:88:b8:26:b2:33:7f:c0:7a:a5:e1:55:f9:91:
93:d9:c9:f3:7b:ed:65:8f:2b:82:62:58:ee:48:33:
bb:49:c3:58:d3:7f:89:15:48:f0:73:e1:99:ba:95:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:AD:11:91:CE:4B:56:AF:50:6A:FB:FF:46:5B:7C:9E:F2:25:3D
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/ui2tEZHOS1avUGr7_0ZbfJ7yJT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
95:15:fd:48:d1:ff:64:20:42:18:97:3c:c2:7b:9d:83:72:25:
31:83:76:2b:29:52:a7:4b:49:08:6f:c3:a1:93:03:55:ae:c1:
6c:8a:09:2a:80:6f:b9:4e:3f:35:ac:0d:7f:10:8c:36:4c:13:
7c:53:29:86:3b:33:49:6c:13:95:00:b1:2d:07:5d:56:f3:9c:
10:d4:81:0b:ed:34:77:d1:4c:e1:ca:5a:00:57:c1:96:47:17:
cb:30:c9:f1:40:58:aa:92:53:96:5d:7a:8d:19:a6:4f:b0:b1:
2f:97:63:e9:98:46:ed:fb:2c:ba:fc:a0:41:f8:bb:8e:9a:36:
f2:4e:71:03:74:8e:20:aa:d3:9a:41:f3:a8:8e:45:a3:ee:14:
d8:b9:66:ec:6a:06:b7:5c:ed:ce:7d:16:27:8d:77:2c:91:67:
ff:f6:40:08:f1:cd:cc:35:55:75:aa:a3:78:35:26:2b:c7:c7:
0c:23:64:9a:41:d9:f5:67:65:c9:72:c3:5f:04:5c:cb:7e:73:
57:ff:1b:dc:00:da:a3:8a:e0:9e:4a:8a:58:1a:88:73:bf:ba:
21:3b:7c:44:69:21:65:61:e1:40:91:ce:5a:c3:e8:a6:60:c8:
cf:1b:59:9a:f3:ae:a2:b4:29:a7:4c:8c:af:a0:e1:9c:cc:78:
ae:d6:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org