Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/yM8fOiWZEknf8krnS7HafbFp3qQ.roa
File: yM8fOiWZEknf8krnS7HafbFp3qQ.roa (raw, json)
Hash identifier: L3R2X4eY7VmUMxVvPb5QiRxB5KYVJkvjjO88Sta6WNg=
Subject key identifier: C8:CF:1F:3A:25:99:12:49:DF:F2:4A:E7:4B:B1:DA:7D:B1:69:DE:A4
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 01879DDAE65A71D0B8E6D272091C1113ABE5
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/yM8fOiWZEknf8krnS7HafbFp3qQ.roa
Signing time: Thu 20 Apr 2023 08:49:41 +0000
ROA not before: Thu 20 Apr 2023 08:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207333
IP address blocks: 93.188.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:da:e6:5a:71:d0:b8:e6:d2:72:09:1c:11:13:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Apr 20 08:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8cf1f3a25991249dff24ae74bb1da7db169dea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:77:6c:d6:98:d9:d9:56:e6:09:58:02:5e:
66:47:b9:37:cc:24:b1:c7:eb:14:ba:2f:c9:18:f5:
5f:c6:a3:a5:51:d2:0a:4c:9c:bc:61:ff:20:fe:08:
f6:3c:71:00:bb:15:2b:66:04:a0:eb:be:55:93:03:
dc:79:47:fe:59:db:89:3d:7a:50:40:c0:e1:99:ec:
ea:57:1c:36:be:62:ff:ae:ff:86:73:e7:e8:c2:43:
83:f4:99:94:09:aa:9c:2b:30:bc:2e:1b:c4:1f:69:
d7:17:a1:71:1a:7a:ec:b6:c6:0d:6c:a2:80:27:30:
5b:73:1e:5a:49:ec:b3:8f:a9:bd:19:6c:bf:3e:8e:
18:36:10:f6:3e:0e:12:0e:62:72:e3:81:b3:55:66:
6e:b9:5b:2f:77:3d:f0:91:bb:bc:58:56:01:90:5c:
64:87:2b:ad:60:19:be:05:cd:10:3b:8b:7f:3b:d7:
23:67:ad:e5:7b:ce:1a:ea:26:15:5d:50:65:3b:1c:
42:13:e3:e0:28:1e:b3:d4:88:d7:1d:ef:e7:00:63:
4a:05:65:61:bb:16:13:e7:5a:5c:55:16:29:8b:db:
dc:4d:00:17:69:a3:89:b4:7d:aa:6c:bf:6e:cc:22:
8e:ee:81:46:9a:06:b0:79:b2:4d:99:3f:97:da:8d:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:1F:3A:25:99:12:49:DF:F2:4A:E7:4B:B1:DA:7D:B1:69:DE:A4
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/yM8fOiWZEknf8krnS7HafbFp3qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
42:90:79:80:46:88:2f:9d:ac:f3:02:5a:0c:64:f1:f5:b8:c6:
a2:00:ef:fb:35:45:ac:74:b0:c3:54:af:e2:a0:7e:a5:a1:df:
e7:82:29:14:ca:1c:c7:56:71:d5:68:d1:fe:bc:b3:1c:04:02:
cb:cc:b5:10:4e:c0:c7:2f:0d:60:59:65:ac:de:62:2c:2f:95:
10:55:d1:1e:0e:e0:3e:07:b6:ec:06:73:a8:3c:1a:0d:99:80:
6e:5d:5c:92:4f:55:a3:73:a5:45:4a:85:ea:da:4c:dc:8a:15:
99:84:2e:d8:05:2d:ac:a0:ec:90:1a:ca:b7:02:4c:91:f5:4f:
00:df:3f:f1:f7:f7:c7:26:56:06:bd:41:de:c1:d0:42:8c:3b:
b0:67:d6:e2:d1:cd:93:cb:f6:46:3d:f3:b6:bf:5a:0d:5e:04:
b6:d9:79:c3:b9:44:b5:27:3f:64:58:29:c7:ea:43:50:fe:a1:
75:14:da:a2:ee:96:f1:8a:8d:9c:de:d7:c2:93:11:b0:47:33:
29:3a:2a:91:b4:d5:47:28:16:05:c6:7d:60:ba:54:5c:ab:3b:
d3:21:cc:00:fe:33:99:e8:d3:ec:de:2e:21:3e:63:73:d4:86:
d3:a5:e0:3b:0e:6c:35:ad:9f:f1:4e:cc:cb:46:4f:31:07:88:
e4:2d:fc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org