Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/b8BU2Uvif8hxpNT1gD-0sUz7pV0.roa
File: b8BU2Uvif8hxpNT1gD-0sUz7pV0.roa (raw, json)
Hash identifier: X8pdtqPWTvvvtX3yMFiuVw3xQZXCtGJPESepHv/2qLU=
Subject key identifier: 6F:C0:54:D9:4B:E2:7F:C8:71:A4:D4:F5:80:3F:B4:B1:4C:FB:A5:5D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018A9A56BCFD1C80BD7C9A65AC06464FDC96
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/b8BU2Uvif8hxpNT1gD-0sUz7pV0.roa
Signing time: Fri 15 Sep 2023 19:34:50 +0000
ROA not before: Fri 15 Sep 2023 19:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 93.185.160.0/23 maxlen: 24
45.93.164.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:56:bc:fd:1c:80:bd:7c:9a:65:ac:06:46:4f:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 15 19:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fc054d94be27fc871a4d4f5803fb4b14cfba55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:9d:94:d8:63:e6:7a:68:18:95:0c:54:23:
01:02:55:4b:cd:4c:af:9d:a0:e3:15:47:ae:0a:76:
0c:66:77:23:7f:4c:a4:38:a2:e9:4c:1b:b7:9b:b3:
8b:7a:1d:71:9d:08:c7:19:c4:39:c7:b6:7b:52:1d:
25:dd:b8:93:81:45:2b:62:cd:8b:4f:a3:05:e9:78:
12:37:75:29:0e:65:0e:b0:b0:ea:0c:d4:ca:fa:5f:
0f:19:1b:71:dc:33:0e:4a:44:7b:a2:e5:17:df:9d:
b4:f2:0f:ed:d4:aa:5a:62:07:82:9b:16:1a:20:64:
88:c0:e3:65:9a:cc:f6:85:7f:0e:60:50:98:27:b3:
3d:5c:85:59:c1:53:24:a4:02:84:df:0f:40:d4:b2:
32:d1:8b:20:52:65:99:98:db:f4:57:9c:05:51:1e:
f7:ea:34:a5:70:83:69:83:b3:9e:e4:3f:a2:96:c8:
76:42:77:98:8c:bb:2c:fb:d7:5b:92:77:53:6f:82:
e6:2a:fb:dd:bb:23:35:6c:e6:69:bb:c9:ef:bb:e6:
77:7b:7c:4a:9c:ee:12:a6:23:24:bc:b6:03:2c:3e:
81:9e:06:f5:65:ff:24:c5:5e:86:c1:46:85:a4:54:
79:8e:5a:39:ca:5e:26:4c:b5:2f:fe:cb:8b:a1:8f:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:54:D9:4B:E2:7F:C8:71:A4:D4:F5:80:3F:B4:B1:4C:FB:A5:5D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/b8BU2Uvif8hxpNT1gD-0sUz7pV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.164.0/23
93.185.160.0/23
Signature Algorithm: sha256WithRSAEncryption
28:f7:1f:72:0e:5b:da:4a:a9:71:d4:47:32:76:79:35:7b:f3:
5b:95:8e:cc:c5:ba:d5:f6:ce:ea:30:eb:a7:e4:42:59:bc:72:
e8:23:7e:9d:86:bb:0b:b6:30:09:ec:b4:ed:83:94:81:15:a8:
fa:dd:d4:d9:c8:79:5d:58:57:6b:c9:5a:e9:8e:a9:55:bc:a1:
5d:56:3c:f7:01:d4:26:87:69:b5:38:1a:19:d1:4f:78:2a:b6:
f1:46:7f:b1:57:75:76:22:6d:b3:21:90:6c:2f:20:6f:25:4f:
3a:89:07:84:06:f4:3b:c5:01:11:71:dd:32:8d:fd:8d:a1:c6:
23:51:e2:00:f9:cb:17:b9:29:9c:07:8c:19:34:58:da:bd:b6:
4c:7d:7c:8b:30:f2:a1:58:12:b8:33:67:8b:88:18:83:84:77:
31:01:04:71:95:6e:9a:d5:56:8b:ff:be:86:f5:0b:11:e1:4b:
c9:5c:96:a8:a7:81:38:23:9c:ff:36:44:96:b9:dc:02:a0:5d:
19:8b:95:7e:1c:29:bb:0e:2d:fd:8f:58:fb:45:91:f7:4c:a2:
f0:f8:cb:dd:9e:dd:cf:bb:a1:bc:c9:ef:5e:38:5f:1b:a1:83:
d5:3b:98:ff:95:06:ac:aa:8a:fe:8a:e4:70:40:5f:50:98:63:
12:2a:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org