Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/I470bpeNgCUJS8ipd1qhTUyF5TE.roa
File: I470bpeNgCUJS8ipd1qhTUyF5TE.roa (raw, json)
Hash identifier: DIouAq6BfWg5zmaP1trY8HmeRn+2x9NQwchcWAX1XNo=
Subject key identifier: 23:8E:F4:6E:97:8D:80:25:09:4B:C8:A9:77:5A:A1:4D:4C:85:E5:31
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018965DDF442BE4940772CEC97A322D7F06A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/I470bpeNgCUJS8ipd1qhTUyF5TE.roa
Signing time: Mon 17 Jul 2023 21:59:51 +0000
ROA not before: Mon 17 Jul 2023 21:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12349
IP address blocks: 93.119.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:dd:f4:42:be:49:40:77:2c:ec:97:a3:22:d7:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 17 21:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=238ef46e978d8025094bc8a9775aa14d4c85e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:4d:35:e2:da:68:ed:93:d6:20:3c:64:07:
fd:91:c7:64:ce:12:01:b8:04:2b:af:7f:5e:5f:b4:
2f:c2:bb:15:2d:c0:01:69:32:d9:43:53:61:85:11:
f0:bf:b8:ca:38:65:b5:31:f6:be:e4:de:13:f7:65:
d3:d1:2f:95:7a:0f:10:88:b6:82:25:b3:9f:e1:a3:
1e:eb:69:a7:66:a1:df:9a:9d:1a:54:19:54:0e:b9:
a5:3e:d0:ff:7b:b4:e0:44:8e:68:fb:49:ed:fc:57:
0e:0e:28:81:ca:24:73:a6:0d:3a:82:14:2f:ff:b6:
7e:dd:a7:52:45:e8:02:02:ea:00:ba:03:8f:c2:cd:
e1:ef:44:eb:33:42:ef:84:16:6e:eb:90:08:02:2f:
6d:38:27:e9:d4:e9:2d:06:3b:ab:4b:24:5a:ca:d2:
d5:3b:be:2c:df:18:72:b4:2e:0a:3b:9e:a9:1a:0a:
73:15:5d:f5:20:f3:ed:4c:a6:81:03:03:ef:81:48:
bc:4e:26:2d:89:a4:88:10:5d:6e:0a:37:d5:26:b4:
94:32:43:79:93:fb:34:a8:da:cf:27:46:5b:e3:3f:
f7:f8:65:de:e0:1b:d2:92:2d:6b:c4:0f:9e:67:1f:
8a:68:84:c2:73:8c:0c:3e:da:82:14:c9:32:0e:aa:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:F4:6E:97:8D:80:25:09:4B:C8:A9:77:5A:A1:4D:4C:85:E5:31
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/I470bpeNgCUJS8ipd1qhTUyF5TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e1:1f:ce:ab:a7:35:bb:7b:8d:5b:ca:53:f8:e7:ad:38:36:
54:ae:b9:64:16:d0:b7:1f:9d:d1:a3:39:84:ec:24:43:d5:8b:
92:9e:62:c9:6b:a4:ee:47:66:aa:61:2d:36:ea:0f:30:d3:2c:
ce:19:bb:bd:26:e2:7f:cc:d5:08:c8:59:ba:8f:4e:d0:33:4f:
7a:40:2c:d7:80:02:3f:1c:52:63:2d:7d:1b:df:fb:cf:aa:d6:
a1:70:0b:48:0e:c2:5c:78:47:b6:fe:a3:f3:7f:8b:de:89:54:
eb:18:5c:04:30:e1:c5:2c:35:f9:a7:ec:21:0b:b3:b3:5c:80:
a2:53:f7:ea:11:e1:6a:38:1f:c8:bb:06:55:cb:19:6c:de:69:
bc:0b:c8:af:f9:08:0e:ce:e4:10:8f:14:fb:a7:40:ed:4c:ea:
93:95:ae:d0:3f:96:98:3e:93:73:f3:18:6c:4e:72:53:40:36:
ff:ee:e5:59:1e:fc:55:f8:db:9c:31:6a:8b:1f:9a:56:f5:47:
c9:d9:0a:43:1c:42:cd:35:95:47:a7:6b:63:c8:8e:c5:db:d9:
ee:96:9b:73:13:83:96:15:a1:e0:ae:17:49:07:ff:f7:79:09:
3b:36:26:48:c1:10:b9:8e:c9:e8:3e:ba:8e:92:09:5e:db:bb:
0c:b1:9a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYll3fRCvklAdyzsl6Mi1/BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwNzE3MjE1OTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzhlZjQ2ZTk3OGQ4MDI1MDk0YmM4YTk3NzVhYTE0ZDRjODVlNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjutNNeLaaO2T1iA8ZAf9kcdkzhIB
uAQrr39eX7QvwrsVLcABaTLZQ1NhhRHwv7jKOGW1Mfa+5N4T92XT0S+Veg8QiLaC
JbOf4aMe62mnZqHfmp0aVBlUDrmlPtD/e7TgRI5o+0nt/FcODiiByiRzpg06ghQv
/7Z+3adSRegCAuoAugOPws3h70TrM0LvhBZu65AIAi9tOCfp1OktBjurSyRaytLV
O74s3xhytC4KO56pGgpzFV31IPPtTKaBAwPvgUi8TiYtiaSIEF1uCjfVJrSUMkN5
k/s0qNrPJ0Zb4z/3+GXe4BvSki1rxA+eZx+KaITCc4wMPtqCFMkyDqpfNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCOO9G6XjYAlCUvIqXdaoU1MheUxMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSTQ3MGJwZU5nQ1VKUzhpcGQxcWhUVXlGNVRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXdpMA0G
CSqGSIb3DQEBCwUAA4IBAQAu4R/Oq6c1u3uNW8pT+OetODZUrrlkFtC3H53RozmE
7CRD1YuSnmLJa6TuR2aqYS026g8w0yzOGbu9JuJ/zNUIyFm6j07QM096QCzXgAI/
HFJjLX0b3/vPqtahcAtIDsJceEe2/qPzf4veiVTrGFwEMOHFLDX5p+whC7OzXICi
U/fqEeFqOB/IuwZVyxls3mm8C8iv+QgOzuQQjxT7p0DtTOqTla7QP5aYPpNz8xhs
TnJTQDb/7uVZHvxV+NucMWqLH5pW9UfJ2QpDHELNNZVHp2tjyI7F29nulptzE4OW
FaHgrhdJB//3eQk7NiZIwRC5jsnoPrqOkgle27sMsZoY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org