Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/34HZgG5FQyAipAijtj7dBf8n4Xg.roa
File: 34HZgG5FQyAipAijtj7dBf8n4Xg.roa (raw, json)
Hash identifier: 5y5M/JZoao8UGaB4T4SS7YyjMvCg3N0rZbqKOR3PvkQ=
Subject key identifier: DF:81:D9:80:6E:45:43:20:22:A4:08:A3:B6:3E:DD:05:FF:27:E1:78
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019260A7E4D5A00AE9B63873679900217AA7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/34HZgG5FQyAipAijtj7dBf8n4Xg.roa
Signing time: Sun 06 Oct 2024 07:07:48 +0000
ROA not before: Sun 06 Oct 2024 07:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 06:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:60:a7:e4:d5:a0:0a:e9:b6:38:73:67:99:00:21:7a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 6 07:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df81d9806e45432022a408a3b63edd05ff27e178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:fe:7b:68:46:16:fa:d6:cc:cf:a7:0e:23:
4c:0c:96:9f:f5:91:ad:2e:aa:de:70:bf:03:3f:8f:
5a:53:d3:b6:15:d7:d9:57:04:2c:f7:1c:da:4b:bb:
6a:ac:47:00:46:eb:07:0e:87:5f:d9:38:9c:72:d0:
2f:23:9c:0b:0b:8f:2d:60:fb:25:ef:09:61:17:3f:
5d:8d:12:4a:27:7d:21:7d:b2:c1:8d:0b:ec:b6:53:
d0:d1:36:fc:98:a4:27:6f:49:23:9e:53:72:55:c9:
74:3a:f3:14:4e:47:ed:eb:9d:e5:fc:4a:c7:09:ff:
88:9c:c1:bb:88:73:a3:fd:8e:5b:bf:23:c4:28:38:
04:83:dc:d1:37:15:b4:de:22:c6:d8:32:fc:e6:4d:
1f:74:a7:96:7d:d1:f1:56:78:0c:00:2c:89:75:d3:
e5:14:10:b4:b4:4a:21:42:22:c7:b8:77:78:07:8a:
9e:a7:12:a5:25:3e:be:84:c6:66:70:9f:7a:3d:6e:
6c:a7:99:fd:06:ad:61:d9:29:f7:e2:9a:fe:30:a3:
8b:2c:a6:08:99:9b:bb:bf:18:3e:6e:bc:c6:a9:4a:
64:71:89:8b:99:ee:55:21:83:be:21:21:39:2d:bc:
e6:a6:78:53:50:04:f8:55:5e:2e:fa:f2:a4:c6:03:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:D9:80:6E:45:43:20:22:A4:08:A3:B6:3E:DD:05:FF:27:E1:78
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/34HZgG5FQyAipAijtj7dBf8n4Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:62:92:f3:c3:16:35:44:d8:d4:25:cf:d1:ef:59:89:6d:d5:
f7:e2:b6:33:11:65:bc:ac:3d:4d:6d:64:ac:44:0b:63:3d:9b:
b0:d9:bc:46:cb:0f:fa:97:46:95:53:ee:6c:fd:d9:2e:1d:bb:
22:25:ee:8f:37:72:b6:2c:d0:3a:cb:3a:d7:56:ce:a8:b4:c3:
b5:18:3b:de:f0:5f:08:25:3c:9d:30:63:f7:46:93:04:2b:22:
95:18:4f:2a:06:a1:99:ea:23:16:56:1b:8e:aa:d7:ff:6b:42:
88:85:dd:40:a3:aa:07:0c:07:a8:41:e4:db:28:49:88:dc:84:
f0:c6:dc:29:a8:47:a1:13:41:4c:66:e5:db:d7:12:b8:cc:66:
d9:bc:6e:2a:c1:57:f0:46:49:a9:c5:5f:68:ed:da:92:d0:37:
ad:e0:01:69:d2:53:4f:65:f5:66:34:4c:a4:29:89:e6:a0:bd:
65:28:b4:cb:9b:75:25:be:65:de:f2:7a:33:86:39:59:24:32:
4d:b8:c8:4b:06:33:a4:2c:e7:ab:6c:84:86:5c:80:40:ff:99:
48:cb:7e:06:d7:e2:51:3c:a3:da:1f:3e:92:04:ed:66:4f:1c:
69:b4:e0:47:89:b2:26:83:f2:36:40:bf:bb:4b:62:fb:6b:16:
88:d7:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 08:19:23 2024 by rpki-client on console-fra.rpki-client.org