Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Grp-jSbKhFBbdySSRmjYJ9BmYv8.roa
File: Grp-jSbKhFBbdySSRmjYJ9BmYv8.roa (raw, json)
Hash identifier: WSToR3151TalhXWowDLV2SasMw0T3R2TRp0/nkPyVPw=
Subject key identifier: 1A:BA:7E:8D:26:CA:84:50:5B:77:24:92:46:68:D8:27:D0:66:62:FF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01896EB4C13FA5534B6CDCCE2908DD1731B4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Grp-jSbKhFBbdySSRmjYJ9BmYv8.roa
Signing time: Wed 19 Jul 2023 15:11:26 +0000
ROA not before: Wed 19 Jul 2023 15:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 93.119.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 07:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:b4:c1:3f:a5:53:4b:6c:dc:ce:29:08:dd:17:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 19 15:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aba7e8d26ca84505b7724924668d827d06662ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:2a:be:47:66:4e:72:91:43:bd:46:18:de:
42:d8:11:42:23:a2:1f:2b:61:88:65:69:c4:58:38:
7c:91:a4:47:cc:34:4c:5d:3c:0b:3a:01:2d:8e:93:
10:fd:bf:96:2d:32:66:32:5c:b0:3f:58:f8:f5:d0:
13:2f:11:00:5b:e4:3b:ba:74:66:8c:a2:f3:7e:a7:
8e:05:8f:2f:32:32:10:a5:7f:e8:d0:65:1c:f8:c0:
f2:cc:22:65:74:e2:1a:bd:fa:a7:6d:a3:21:65:d2:
65:bd:d5:9e:61:56:2b:3e:b8:7a:c5:62:a1:a9:cd:
ed:25:3d:45:ed:0f:bd:49:7f:18:72:5f:33:7f:79:
01:4f:fa:d4:c2:c1:11:8e:2d:ad:34:0c:58:6a:14:
b5:a4:df:6e:94:77:0c:c6:b2:92:98:c1:ab:2e:cc:
74:9c:08:6d:a7:1a:59:3a:c9:a9:88:67:90:46:c1:
21:c0:52:1e:45:7b:51:ea:58:85:5f:e6:9d:61:03:
01:56:08:da:36:29:13:d7:a7:c5:70:94:77:37:40:
b3:0a:f8:6a:c9:36:64:86:3d:23:df:71:25:a7:ee:
73:60:72:bb:45:52:e8:cb:a4:2a:92:16:7d:91:87:
f9:94:5b:03:4d:fb:d7:07:bc:88:36:d2:e7:cb:1e:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:7E:8D:26:CA:84:50:5B:77:24:92:46:68:D8:27:D0:66:62:FF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Grp-jSbKhFBbdySSRmjYJ9BmYv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c2:d0:d5:9f:8e:20:4d:b2:4d:77:2d:e0:ad:3f:53:95:91:
42:09:4d:f7:63:52:a7:4b:2a:35:ee:35:4d:4e:53:5d:dd:4e:
10:cb:b3:0a:c3:76:4a:aa:cc:8d:ed:9f:24:da:9d:3d:f3:92:
7d:b7:84:a4:16:b1:7a:7e:75:51:61:34:a0:d1:c9:c7:47:6f:
bd:ef:01:30:65:a2:7c:92:c0:5b:88:ba:a5:ab:2a:c2:eb:fa:
7a:ec:0a:2f:8f:bc:1c:fb:f8:f3:a3:0c:cf:66:c0:67:d0:71:
ed:d8:37:0a:f5:b5:c3:a1:51:19:d9:59:8c:36:e7:3a:22:28:
96:e9:63:ee:b9:c6:ad:84:86:b0:91:12:af:85:94:a1:f6:77:
ab:4d:0f:59:f7:ba:0e:ff:f0:53:82:5b:82:33:2e:42:64:6c:
8f:6f:36:02:81:8e:a2:99:b1:f6:92:6d:da:b6:bb:ec:8e:e0:
34:2f:7f:48:84:8e:fb:37:ce:75:ca:66:5a:6b:06:7c:a8:08:
c0:5e:ef:71:c1:90:d1:8d:9a:32:c8:c3:2e:44:93:b4:72:29:
7f:d6:63:fa:6d:48:d0:37:7b:f3:de:4b:de:76:49:fb:3c:ae:
5d:c6:bf:55:ac:de:b2:a6:ee:fd:96:c0:21:ae:ff:b1:39:9c:
e5:a3:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org