Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HKxO9PAbfnlBs2YTxYeUd0jARRI.roa
File: HKxO9PAbfnlBs2YTxYeUd0jARRI.roa (raw, json)
Hash identifier: KfKcUM/wc2D2/hBzKJcm4Mi+fy9Vd9epTNFlEnRUUgo=
Subject key identifier: 1C:AC:4E:F4:F0:1B:7E:79:41:B3:66:13:C5:87:94:77:48:C0:45:12
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AD4F69FECA4565A0CA69077D17A2731B0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HKxO9PAbfnlBs2YTxYeUd0jARRI.roa
Signing time: Wed 27 Sep 2023 04:47:27 +0000
ROA not before: Wed 27 Sep 2023 04:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 93.113.178.0/24 maxlen: 24
93.113.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 08:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:f6:9f:ec:a4:56:5a:0c:a6:90:77:d1:7a:27:31:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 27 04:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cac4ef4f01b7e7941b36613c587947748c04512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:72:47:9b:c3:7b:11:a0:ec:e9:3f:19:63:
13:9e:1d:bf:c1:7a:c6:6e:cd:e7:13:61:cd:f7:c0:
ff:8b:8c:89:33:6b:56:dd:6d:61:56:b7:8d:a4:ad:
61:37:41:f3:87:71:46:fd:4a:b3:2a:40:1b:07:62:
cd:48:99:44:8d:43:dd:e3:73:66:f7:47:d1:0f:d9:
6b:34:d8:06:23:56:a7:33:b6:23:fc:79:8a:1c:1b:
92:5a:a3:50:9e:1e:66:ec:57:78:46:ab:15:64:a6:
89:e2:df:f3:de:50:a8:22:a9:30:ee:f5:71:7e:7b:
48:9a:0f:6d:a4:82:f0:8f:65:a1:b9:9b:46:81:f6:
52:c7:87:45:92:98:be:7b:4a:aa:0e:2b:ed:95:7a:
c6:47:5f:5a:a7:6e:2e:9a:82:84:92:65:ef:71:b4:
15:33:11:ab:c8:d3:a4:82:db:58:44:e1:bd:29:7b:
fc:4f:05:0e:74:32:a9:b7:80:09:42:3b:59:43:86:
0f:36:3e:92:21:9b:78:17:74:35:97:f3:7a:ce:92:
42:1e:84:f9:3b:e2:8d:56:39:a7:ee:ce:43:f4:10:
f1:91:45:06:c2:02:4a:3c:30:c4:5f:3f:17:ee:0b:
82:b4:29:64:13:a9:c5:59:10:b8:57:ac:cd:e7:10:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:4E:F4:F0:1B:7E:79:41:B3:66:13:C5:87:94:77:48:C0:45:12
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HKxO9PAbfnlBs2YTxYeUd0jARRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.178.0/23
Signature Algorithm: sha256WithRSAEncryption
23:79:42:72:d8:27:2e:08:5a:6a:0a:82:56:41:ce:c1:4e:27:
0e:42:b2:c5:d8:f9:d0:aa:6b:a8:3e:dd:7b:c1:32:a9:d1:89:
d1:f5:60:c1:eb:4a:d2:18:56:03:d0:5b:1b:44:80:ee:4e:2b:
db:a2:b1:76:03:2d:89:40:84:5e:b8:91:d9:5d:33:1c:6b:a1:
f1:b1:0c:e1:7c:41:a2:f5:97:45:3d:07:ee:02:10:6e:0f:6d:
b6:b7:bf:c3:9f:ad:27:ec:84:17:a5:af:43:91:6a:50:14:67:
0e:6f:9a:6f:39:43:ef:92:23:10:64:f3:d7:86:e7:93:43:72:
8f:4f:41:6f:32:11:ce:d5:cb:3c:ea:3d:e3:e4:77:90:23:e3:
3f:11:b7:1a:00:8e:fe:eb:7d:b6:30:e9:25:e8:c0:a7:1f:14:
5e:94:79:52:3e:8b:f2:b2:5c:75:68:97:4f:65:65:0f:4f:79:
92:8b:27:84:9c:b1:e9:47:34:ea:cc:b3:dd:ed:0f:f3:18:0f:
45:9a:1c:85:4a:4f:3e:c0:51:d0:bf:57:a8:c9:90:c2:bf:72:
58:aa:17:1e:f1:3c:e6:d3:62:76:54:8a:b3:e3:c9:cd:85:84:
cf:31:26:e3:b0:95:72:6a:c7:46:43:f8:60:10:e3:29:32:fb:
ae:83:ce:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrU9p/spFZaDKaQd9F6JzGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwOTI3MDQ0NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2FjNGVmNGYwMWI3ZTc5NDFiMzY2MTNjNTg3OTQ3NzQ4YzA0NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PFyR5vDexGg7Ok/GWMTnh2/wXrG
bs3nE2HN98D/i4yJM2tW3W1hVreNpK1hN0Hzh3FG/UqzKkAbB2LNSJlEjUPd43Nm
90fRD9lrNNgGI1anM7Yj/HmKHBuSWqNQnh5m7Fd4RqsVZKaJ4t/z3lCoIqkw7vVx
fntImg9tpILwj2WhuZtGgfZSx4dFkpi+e0qqDivtlXrGR19ap24umoKEkmXvcbQV
MxGryNOkgttYROG9KXv8TwUOdDKpt4AJQjtZQ4YPNj6SIZt4F3Q1l/N6zpJCHoT5
O+KNVjmn7s5D9BDxkUUGwgJKPDDEXz8X7guCtClkE6nFWRC4V6zN5xDkhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBysTvTwG355QbNmE8WHlHdIwEUSMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSEt4TzlQQWJmbmxCczJZVHhZZVVkMGpBUlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXXGyMA0G
CSqGSIb3DQEBCwUAA4IBAQAjeUJy2CcuCFpqCoJWQc7BTicOQrLF2PnQqmuoPt17
wTKp0YnR9WDB60rSGFYD0FsbRIDuTivborF2Ay2JQIReuJHZXTMca6HxsQzhfEGi
9ZdFPQfuAhBuD222t7/Dn60n7IQXpa9DkWpQFGcOb5pvOUPvkiMQZPPXhueTQ3KP
T0FvMhHO1cs86j3j5HeQI+M/EbcaAI7+6322MOkl6MCnHxRelHlSPovyslx1aJdP
ZWUPT3mSiyeEnLHpRzTqzLPd7Q/zGA9FmhyFSk8+wFHQv1eoyZDCv3JYqhce8Tzm
02J2VIqz48nNhYTPMSbjsJVyasdGQ/hgEOMpMvuug84B
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org