Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C_BYMpssalOZTs2QVJ1Lxkkdp5w.roa
File: C_BYMpssalOZTs2QVJ1Lxkkdp5w.roa (raw, json)
Hash identifier: 53k6PdeqQ0C9Iy/0Ix/SyqBlXq628S9vscSfpDaPLi8=
Subject key identifier: 0B:F0:58:32:9B:2C:6A:53:99:4E:CD:90:54:9D:4B:C6:49:1D:A7:9C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190F3FF79BBA23A55CDC477BEC2A3EDC366
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C_BYMpssalOZTs2QVJ1Lxkkdp5w.roa
Signing time: Sat 27 Jul 2024 11:42:04 +0000
ROA not before: Sat 27 Jul 2024 11:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51461
IP address blocks: 93.114.72.0/22 maxlen: 22
93.114.76.0/23 maxlen: 23
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
93.114.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 14 Sep 2024 22:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f3:ff:79:bb:a2:3a:55:cd:c4:77:be:c2:a3:ed:c3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 27 11:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bf058329b2c6a53994ecd90549d4bc6491da79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:e4:aa:ab:03:9f:05:72:50:00:c1:2d:35:
2e:e4:d7:01:d1:91:cc:3b:43:d6:df:7a:02:aa:1b:
d5:64:17:29:78:7d:27:6d:4f:84:d6:f6:04:74:48:
b3:c0:5e:23:f2:b8:72:60:16:0d:4b:15:01:a7:1f:
39:79:e4:67:9c:8b:9f:fc:bd:6a:6e:cf:e7:6f:37:
55:aa:fb:b2:aa:f0:68:15:46:03:2f:08:5b:2e:8f:
e8:85:65:39:03:9e:6e:74:3c:a0:16:e5:a3:5d:6b:
bd:e1:c9:1c:65:09:e5:01:cd:84:2d:de:75:cd:8d:
45:dc:53:9d:a8:13:6d:54:0c:ca:95:72:25:7e:bf:
32:99:87:f6:24:aa:51:50:60:fb:47:14:bc:c5:c6:
fb:e9:de:b4:79:27:ab:70:eb:9e:41:17:54:02:cb:
c2:f9:64:5b:0d:96:a4:4e:85:74:5b:c3:d7:b6:86:
f3:55:59:0f:9d:44:83:43:56:e5:16:21:89:c2:b8:
69:4a:86:4e:6d:99:4f:a2:4c:ff:b5:a0:5d:11:19:
33:0c:94:b4:b9:66:ac:c0:d6:e0:65:41:37:be:b5:
59:16:26:72:1c:b9:93:93:d9:2e:c9:4e:00:1c:d0:
91:cc:ee:d2:44:4e:66:52:50:5b:11:b2:3b:f9:1d:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:58:32:9B:2C:6A:53:99:4E:CD:90:54:9D:4B:C6:49:1D:A7:9C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C_BYMpssalOZTs2QVJ1Lxkkdp5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.72.0/21
93.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:67:f7:4e:5a:d3:14:b4:24:7a:bb:65:96:00:40:6b:3a:87:
5f:89:70:53:64:33:df:f6:20:e9:23:84:68:7c:a2:a3:29:3b:
ef:0e:3e:22:67:63:7c:22:aa:ba:23:ca:90:f7:c2:3b:e2:c1:
0a:2b:fd:24:c5:fb:36:8a:b0:d0:37:c5:a2:c1:2d:59:38:12:
54:73:45:33:50:12:13:ea:8f:2c:70:e5:b6:e9:81:22:00:8a:
42:d8:11:3f:42:ea:8d:fb:ed:b9:5d:b8:7c:b5:69:fc:e4:70:
e6:8c:1c:30:43:11:a5:06:51:1e:54:15:bf:ad:88:e1:c3:29:
0b:1f:73:3c:5b:67:9e:4f:2f:b3:bd:86:1d:68:69:75:ac:a2:
13:45:de:a3:33:7f:41:1f:3d:36:e9:ad:d7:4c:57:58:97:59:
c3:f8:f6:ed:0b:37:68:bf:63:1f:99:7e:10:de:dc:c2:71:e8:
f0:f7:f0:e3:96:a5:b3:23:ec:f1:74:53:38:15:26:54:71:f0:
2c:ad:8e:ae:6b:b0:4f:8d:82:cf:1e:31:dc:14:97:b1:21:6d:
b0:b5:74:a6:3a:db:5d:ed:18:08:fe:66:e2:e9:07:c8:68:e7:
31:cd:a0:f2:dd:db:7b:0d:26:f0:62:56:ed:30:a8:e2:ab:09:
84:f4:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 23:14:08 2024 by rpki-client on console-fra.rpki-client.org