Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2hwmpdulbKI5IMASvmLLAIsVUDA.roa
File: 2hwmpdulbKI5IMASvmLLAIsVUDA.roa (raw, json)
Hash identifier: +1YThNemPQzhnvkOfg2TTCPLQFY1Si3yBVkLtskfdhs=
Subject key identifier: DA:1C:26:A5:DB:A5:6C:A2:39:20:C0:12:BE:62:CB:00:8B:15:50:30
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D252154AFAD963C74F3ED95042AB5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2hwmpdulbKI5IMASvmLLAIsVUDA.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:25:21:54:af:ad:96:3c:74:f3:ed:95:04:2a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da1c26a5dba56ca23920c012be62cb008b155030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:cd:1c:6d:c8:d7:93:e1:3d:b1:a5:8d:ee:
00:c7:39:2f:97:5c:d0:94:4a:15:14:ca:c2:39:46:
0f:ae:5a:4c:9f:d3:a3:62:dd:e3:5d:a5:31:30:5a:
99:68:1f:f0:30:07:9f:f0:12:73:9d:12:86:e2:fd:
bd:c1:54:66:e7:6e:b0:4d:9f:4e:62:2f:56:76:d4:
ff:1d:d3:b9:47:85:ed:b3:90:b5:d0:78:1e:ce:7c:
2e:86:c5:32:46:78:97:e6:37:f7:fc:63:6a:eb:cf:
49:89:19:0d:1e:9d:83:8a:81:15:2f:11:03:d5:54:
b8:78:0a:bb:12:e2:34:50:c4:e9:ed:51:4c:c2:54:
13:60:cd:e0:6d:24:8c:40:7e:a3:c4:43:92:30:35:
83:70:e2:dc:6e:82:b3:32:a0:a3:4a:3d:4e:9b:cc:
86:cf:28:32:ce:69:53:8f:ef:a5:67:dd:ca:2e:eb:
5b:53:e9:a2:c7:2f:ac:21:44:28:38:89:46:f9:ba:
2c:2c:db:4e:f5:40:9c:26:4e:15:6b:3c:8b:d2:1f:
39:15:ca:9b:cd:5d:e9:51:d7:db:ef:d5:c6:a9:5a:
ce:35:e7:43:bd:e9:1e:1d:27:f5:37:db:88:41:fe:
d1:93:bc:ef:9d:d9:b6:10:b9:f0:a1:ea:c6:77:73:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:26:A5:DB:A5:6C:A2:39:20:C0:12:BE:62:CB:00:8B:15:50:30
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2hwmpdulbKI5IMASvmLLAIsVUDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
66:64:9c:b6:df:d4:1d:6a:c4:fa:64:49:39:cb:4b:f2:01:ad:
ad:e8:ce:3b:a2:e5:0d:9e:13:06:e9:16:46:a2:b1:12:55:87:
a6:59:38:aa:a1:d1:50:e2:8e:d3:9a:3e:b0:2c:6f:6d:95:67:
5a:0d:29:cb:6d:72:28:0d:48:0f:3c:88:6c:ff:d8:2b:87:18:
16:f9:99:cd:e2:c8:41:80:bf:f0:c8:0b:0f:95:05:6e:00:cd:
02:81:75:0e:3c:b7:94:94:71:f0:51:82:ba:78:2b:8f:8d:e0:
a6:f5:b5:7d:ae:49:cb:b2:18:fb:c0:cd:24:ab:fa:b5:47:9c:
6b:ce:53:d2:43:ff:15:0f:11:c7:8b:2a:ca:a2:b1:7a:db:47:
f9:dc:ec:c9:ea:c0:47:29:50:7b:43:8f:d4:c0:3c:7b:87:5f:
fd:38:3e:90:83:5e:7c:8e:e2:fa:ae:c4:b5:43:c8:9e:2b:58:
fe:51:17:79:99:09:df:da:ab:a8:ed:30:c8:a8:0e:97:62:fe:
7b:fa:cc:26:70:15:45:bd:f5:b8:c2:29:16:f8:57:80:4e:1e:
99:72:e0:90:0b:34:5a:69:b7:a5:aa:5f:6c:36:1c:6b:4d:cb:
71:78:3c:8f:de:55:61:47:80:84:09:e0:4b:20:c0:6d:ce:4e:
3c:84:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 11:51:12 2024 by rpki-client on console-fra.rpki-client.org