Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/x_UOosKqs6RNowN8Yn6hbcymRPU.roa
File: x_UOosKqs6RNowN8Yn6hbcymRPU.roa (raw, json)
Hash identifier: LPfUKHsSu7wOkYZRmRatjF0ewa/emw6n4kd0oVyim8o=
Subject key identifier: C7:F5:0E:A2:C2:AA:B3:A4:4D:A3:03:7C:62:7E:A1:6D:CC:A6:44:F5
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D663F73CFCDC2FB45DF5BE270203559
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/x_UOosKqs6RNowN8Yn6hbcymRPU.roa
Signing time: Sun 01 Jan 2023 12:54:55 +0000
ROA not before: Sun 01 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20756
IP address blocks: 62.93.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3f:73:cf:cd:c2:fb:45:df:5b:e2:70:20:35:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f50ea2c2aab3a44da3037c627ea16dcca644f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:fb:ee:8d:f1:10:28:25:5b:d6:4b:5f:ca:
ab:72:4e:e1:0a:b3:83:ac:05:77:a0:9e:0f:ae:14:
62:9d:8c:09:93:e5:d0:69:6f:28:ec:03:55:0b:0b:
3a:aa:fb:db:98:29:dc:78:40:8b:fd:0a:62:a7:f5:
25:5c:70:9d:be:22:68:02:38:2e:f5:bb:67:30:54:
0a:1e:9a:b0:4e:58:8b:cb:f0:8b:fe:a4:9c:c2:49:
42:46:7c:3f:06:eb:e0:b4:00:f9:83:b8:ab:ab:22:
13:a5:1e:11:98:6a:20:46:ce:34:e2:88:0b:24:b8:
df:ce:a7:25:db:43:ab:ca:09:09:ba:f0:22:e7:62:
e0:a1:a3:71:01:64:a1:72:11:0b:a6:94:a2:1d:57:
4c:71:ee:7c:cb:db:85:12:bd:74:4b:4b:aa:dd:44:
a3:d6:5b:36:b2:a8:e3:86:1a:8a:51:42:8a:c7:3c:
e6:14:88:88:c1:91:c5:b0:df:3b:40:0a:e3:7c:ba:
40:8e:e0:d4:01:33:7c:22:90:54:cc:2a:64:ee:3e:
54:df:73:7b:f8:e6:0c:35:6d:84:a0:fa:a9:de:46:
65:90:ad:31:b0:5c:67:df:61:9f:c3:84:11:4b:cd:
e4:08:74:af:1b:10:40:f4:bb:ea:9f:f5:1e:e6:e4:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F5:0E:A2:C2:AA:B3:A4:4D:A3:03:7C:62:7E:A1:6D:CC:A6:44:F5
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/x_UOosKqs6RNowN8Yn6hbcymRPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.195.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7e:2e:13:93:ad:0c:2f:20:01:4c:ef:2b:ae:aa:83:bf:b3:
7c:40:ab:40:5d:df:dc:28:72:bf:a9:d5:71:f2:7d:1a:d5:f3:
a7:2b:12:3a:2d:99:b9:e9:39:d8:f6:6b:e9:92:35:92:78:c4:
85:bf:f2:e9:41:b0:22:78:95:9a:c3:65:ae:db:e8:8b:83:73:
10:b8:46:d9:87:88:9b:24:c5:ba:35:dd:96:7e:1b:19:ef:6b:
a1:75:90:7b:14:e0:c0:42:a9:f5:05:1b:50:bb:b1:c0:57:7b:
17:1c:7e:4d:18:30:df:18:89:36:62:29:be:b7:26:df:53:e1:
65:37:a3:7d:42:2e:f1:e4:8d:74:6c:ab:83:7a:6d:0a:4f:62:
d7:c5:28:31:03:d4:e5:73:97:ee:fe:42:2d:9b:d5:60:af:4d:
63:a6:e3:1b:91:aa:a1:70:cf:cf:cc:97:67:1b:2b:73:5b:59:
87:62:3a:5b:57:c7:3b:74:19:36:3e:74:29:40:eb:e6:7b:23:
02:4a:b7:c8:46:09:94:b2:9d:ab:10:26:ad:26:d7:e8:d0:2b:
1c:ee:b5:47:da:57:7f:14:84:5c:b8:82:75:0c:d1:41:79:d4:
a7:68:cf:2f:66:9f:23:a7:2e:d8:18:51:88:ed:27:bc:dd:06:
fe:3e:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:13 2024 by rpki-client on console-fra.rpki-client.org