Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LKuUc5VJ9oYl3FYIxi9Izplcp0E.roa
File: LKuUc5VJ9oYl3FYIxi9Izplcp0E.roa (raw, json)
Hash identifier: IzG96XtULr+mXMRR2Ye0kXfiPGbNSfvjljDLT6LTuIg=
Subject key identifier: 2C:AB:94:73:95:49:F6:86:25:DC:56:08:C6:2F:48:CE:99:5C:A7:41
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AD0DE58854AF0C98B98E783B61D26F8E4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LKuUc5VJ9oYl3FYIxi9Izplcp0E.roa
Signing time: Tue 26 Sep 2023 09:42:27 +0000
ROA not before: Tue 26 Sep 2023 09:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 93.113.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 04:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:de:58:85:4a:f0:c9:8b:98:e7:83:b6:1d:26:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 26 09:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cab94739549f68625dc5608c62f48ce995ca741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:47:49:34:26:75:70:66:f5:0d:0e:12:24:
6a:b0:ad:8c:d7:3a:9c:28:9d:13:e9:be:9a:3f:5c:
a1:c1:fa:62:2f:0b:7d:51:7e:05:e1:c1:24:49:0e:
41:c7:ea:e9:98:09:5a:82:5b:33:ed:80:47:37:00:
8e:08:71:4c:82:18:86:af:ef:0d:77:15:6a:32:3f:
11:59:a6:3f:05:c0:63:dd:c2:27:5b:7a:e8:ba:2f:
b5:3c:b0:a1:37:4b:2d:d0:93:13:10:06:63:b9:17:
a8:5e:55:a4:4c:d6:7f:4b:0f:bd:5c:5f:07:d2:fe:
5d:ac:31:5b:29:13:40:57:a8:f4:b5:b8:2b:87:80:
c1:65:76:c3:b0:9b:8e:de:13:ae:37:b3:dc:46:6a:
19:ce:4c:15:46:9e:ef:78:f1:f6:d5:8e:91:b2:d6:
73:20:c7:5c:c2:48:c7:25:48:c2:47:53:45:c3:e9:
b7:fb:d3:d9:d1:2a:c5:4b:73:73:06:b8:16:22:2f:
4c:0c:2d:67:c0:3e:31:f5:a0:18:44:64:ba:11:bf:
55:2a:dc:9f:36:30:07:bd:1b:87:ab:31:b6:00:9e:
01:ed:4b:8e:7f:8b:51:37:7d:14:26:ae:4a:8e:ca:
36:ba:ec:83:13:bd:49:ff:b9:15:c0:96:07:45:8f:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:94:73:95:49:F6:86:25:DC:56:08:C6:2F:48:CE:99:5C:A7:41
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LKuUc5VJ9oYl3FYIxi9Izplcp0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.178.0/24
Signature Algorithm: sha256WithRSAEncryption
88:69:e9:27:81:4d:09:2b:ee:c2:4a:81:c7:b6:d7:62:a5:18:
d9:c0:e1:ed:42:c2:da:48:58:2c:42:d8:78:cc:86:6f:30:3a:
e5:bb:b1:f1:0f:f2:0a:42:50:de:fa:e3:00:fc:6a:35:63:51:
0f:20:d3:bf:a1:3e:37:fb:82:81:32:79:f9:e5:68:7a:5e:f4:
6d:4b:62:77:80:e3:41:2b:f3:08:11:2c:9f:e4:98:ab:35:2a:
93:dd:81:5f:8c:ee:0a:a3:b0:6f:e4:d3:59:ed:8b:ea:e3:ca:
64:de:f1:ae:b6:83:1c:6a:c0:da:dd:89:22:18:ed:49:76:81:
81:b4:11:9b:d6:72:86:7d:c6:e5:05:0c:f1:a4:aa:51:59:07:
d6:01:72:9f:b9:b6:05:12:34:fc:ec:fb:e5:a1:5e:64:12:45:
d3:c0:df:8e:cd:1d:ca:3e:f5:ee:3c:e0:3a:fd:ca:03:98:a7:
f6:5c:9c:d1:64:f2:ed:21:13:5e:63:57:78:a5:3b:33:de:be:
95:e0:3d:1a:99:7a:0c:74:bc:b7:41:48:eb:a9:3f:2d:49:77:
38:4f:4f:71:c8:73:2f:6c:eb:06:a1:52:76:13:24:6c:0b:d4:
c8:50:f5:ea:64:78:24:77:ac:c4:7b:89:23:e9:ef:57:02:c1:
dc:2d:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org