Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/qxri1cSFk5sjUYDCIc6V-yQ3XMk.roa
File: qxri1cSFk5sjUYDCIc6V-yQ3XMk.roa (raw, json)
Hash identifier: mK2ieKD1fusWisi7TRBr098uI8W+7cWnYp7sBlaXTLA=
Subject key identifier: AB:1A:E2:D5:C4:85:93:9B:23:51:80:C2:21:CE:95:FB:24:37:5C:C9
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 018EA7F3EE28B4DF093CBBA0DCF6EF7CC852
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/qxri1cSFk5sjUYDCIc6V-yQ3XMk.roa
Signing time: Thu 04 Apr 2024 07:12:44 +0000
ROA not before: Thu 04 Apr 2024 07:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 93.183.68.0/24 maxlen: 24
93.183.70.0/24 maxlen: 24
93.183.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 16:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:f3:ee:28:b4:df:09:3c:bb:a0:dc:f6:ef:7c:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Apr 4 07:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1ae2d5c485939b235180c221ce95fb24375cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:ab:82:a5:f1:5d:84:84:dc:2b:de:1f:48:
55:3d:72:30:57:56:fa:0d:51:e2:29:75:f7:56:6d:
61:63:dc:83:ad:59:82:74:6f:de:d2:2d:e8:a2:d4:
4d:fa:f6:29:6a:e5:7c:b2:c0:15:a9:28:4b:8a:de:
b1:39:0e:62:ad:47:ed:60:0b:6f:82:76:c3:f3:f0:
31:44:0f:ce:d9:8d:84:47:94:b4:97:27:3a:09:fa:
75:6a:08:17:ba:92:f0:bf:1c:62:ec:03:05:74:93:
d0:61:4f:1a:d0:94:1e:f4:dd:22:6a:9f:8a:f0:0a:
ed:b1:80:34:a4:4f:90:a9:77:c6:3b:dd:20:52:96:
31:da:4f:e9:ea:b9:ee:09:1b:84:d9:dd:1a:6e:f9:
34:a1:a7:3e:2a:e4:ac:cf:cd:9c:f2:77:c7:86:39:
92:92:20:5d:53:db:b4:f4:c5:d1:59:94:e4:b4:84:
b4:3f:d9:60:c7:e9:93:23:36:0e:53:3d:cf:62:5a:
99:0b:cc:86:f8:81:0e:4f:51:4c:22:67:b9:a7:3f:
95:7c:2f:51:22:f5:23:e2:ec:32:05:2f:c4:da:8e:
ce:87:b5:c1:f0:e9:e9:52:85:f3:7e:98:8a:b9:bd:
4e:93:af:b2:2c:b7:cb:ac:bf:bb:2d:fd:93:b9:80:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:E2:D5:C4:85:93:9B:23:51:80:C2:21:CE:95:FB:24:37:5C:C9
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/qxri1cSFk5sjUYDCIc6V-yQ3XMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.68.0/24
93.183.70.0/23
Signature Algorithm: sha256WithRSAEncryption
57:c5:b0:be:8d:12:2b:3e:7c:3c:37:83:d0:0a:47:b4:e3:0b:
87:bc:f3:ca:bd:9f:33:06:e8:9a:45:05:10:1c:fe:71:76:1e:
26:ba:21:96:33:30:31:38:e6:b2:47:3a:61:61:b5:f4:fc:36:
10:93:ee:53:a6:85:d9:97:4f:d5:8f:da:09:31:ac:bb:02:5d:
d9:d2:a2:6a:f6:fe:bc:65:06:1b:99:77:78:49:ac:a1:c6:5c:
d3:84:f5:37:26:bc:24:a0:e2:d5:3f:c1:50:4e:c9:82:82:a8:
07:c5:d6:f0:f8:4a:8f:7d:f4:cc:dc:bc:7c:4b:37:c5:4a:73:
4f:75:d4:88:6c:aa:fd:41:30:76:14:0a:ad:ec:3c:29:9d:88:
e4:21:84:f5:1d:81:6b:33:dd:30:66:88:4a:6e:33:70:f9:92:
dd:4e:dd:0e:5b:f1:57:04:14:07:c7:f5:6c:5f:4e:e6:21:47:
ff:5a:fd:6a:5f:43:9a:03:b8:14:9a:6a:77:a5:9e:4b:ec:81:
fb:4d:94:40:e0:84:bf:ea:0d:8e:3d:88:66:3e:1f:41:35:2d:
07:4e:6d:2f:08:c7:8e:ff:df:a7:38:31:72:ab:37:bb:a3:44:
c1:c8:55:5f:f7:82:d2:82:93:8c:34:1f:73:a4:76:ea:0f:bb:
9c:56:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org