Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OxZ3bQ5ADgbZsa8ToZDxwdKvAOw.roa
File: OxZ3bQ5ADgbZsa8ToZDxwdKvAOw.roa (raw, json)
Hash identifier: JD+clyQfAaWX7HH9D12Vp9Hdqovft0rME8OVyEHJZFo=
Subject key identifier: 3B:16:77:6D:0E:40:0E:06:D9:B1:AF:13:A1:90:F1:C1:D2:AF:00:EC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB7F289105B97E45DCEF3A78AB9C09
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OxZ3bQ5ADgbZsa8ToZDxwdKvAOw.roa
Signing time: Sun 01 Jan 2023 19:25:08 +0000
ROA not before: Sun 01 Jan 2023 19:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61971
IP address blocks: 93.119.104.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
188.240.221.0/24 maxlen: 24
89.33.192.0/22 maxlen: 22
89.33.192.0/24 maxlen: 24
89.33.193.0/24 maxlen: 24
89.33.194.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7f:28:91:05:b9:7e:45:dc:ef:3a:78:ab:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b16776d0e400e06d9b1af13a190f1c1d2af00ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:59:18:8f:95:dc:c5:bd:90:56:d5:15:b5:
41:0b:c6:7f:0d:1f:2c:92:18:01:33:2d:a2:59:b9:
74:be:e7:06:0f:45:7a:e9:ca:63:4f:dc:a9:c3:8c:
e2:cc:87:ae:96:ca:0c:3a:42:16:98:bd:1d:e8:cd:
0e:01:12:34:72:97:6b:c1:48:8d:51:0f:8b:90:b7:
c3:08:b9:11:05:19:48:e0:85:12:45:27:97:a6:ed:
47:45:4e:f1:c5:b3:9f:e3:83:2f:cf:62:fd:20:40:
c2:47:f1:82:58:e8:16:4d:93:24:5b:5a:02:1f:e3:
ed:fb:9f:f8:42:4b:b1:21:03:58:ce:db:91:a7:9e:
ad:27:f3:df:85:c1:e8:a2:9e:ad:9f:7f:71:4e:9b:
2f:e7:43:bc:7d:40:2b:62:31:77:30:a2:b1:5d:34:
1b:0b:51:e2:8a:08:05:60:73:44:5f:5e:fb:b0:ab:
53:60:47:de:6e:0d:29:30:bc:3e:e2:c5:ef:19:b5:
1e:d7:25:a9:ed:96:f5:61:3c:f5:0c:9c:be:e9:8d:
cc:00:83:5a:a5:bb:3a:86:48:fa:bb:4f:fd:e6:ac:
c2:0f:bb:31:90:a0:60:a4:9a:c6:eb:55:26:e0:f8:
19:41:d7:dd:d9:56:2b:14:ae:de:ec:f9:1a:10:15:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:77:6D:0E:40:0E:06:D9:B1:AF:13:A1:90:F1:C1:D2:AF:00:EC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OxZ3bQ5ADgbZsa8ToZDxwdKvAOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.192.0/22
93.119.104.0/24
93.119.107.0/24
188.240.210.0/24
188.240.221.0/24
Signature Algorithm: sha256WithRSAEncryption
53:10:27:7b:5f:14:3f:ba:e0:8b:83:5a:7d:a3:5b:75:fd:be:
a4:96:9b:8c:5c:43:82:e2:01:7c:dd:db:49:d6:ef:ae:33:c3:
1b:06:03:df:0e:cd:0b:fe:03:ce:7a:56:93:d6:f7:f0:3a:fa:
cc:f4:2d:df:29:d1:73:0a:3d:e6:53:6d:f0:b0:f3:f5:64:84:
c1:b1:c2:b1:97:f9:f7:f8:ae:7f:e1:f4:ba:38:f5:bc:89:74:
39:64:48:7f:4b:0f:ae:47:c9:a7:49:8c:57:75:22:fc:90:31:
40:ad:63:32:0d:9a:43:c1:d1:51:0c:6c:cc:f4:bd:ab:b4:60:
11:4c:58:e7:d6:e1:8f:b9:09:02:43:78:62:da:36:27:f7:a9:
6e:8f:d4:fd:12:7f:87:cf:b7:54:dd:cb:6f:96:ca:23:c2:82:
45:5b:95:23:7a:83:d8:82:ff:79:b9:b4:3a:5e:b5:4a:4a:0c:
28:41:5c:c1:d9:9e:20:a7:98:a8:02:80:30:eb:a5:af:ba:f6:
e1:d2:a8:1f:0f:5d:73:a1:ba:20:ed:50:cf:5c:80:f1:92:f4:
60:0a:41:06:8b:87:9e:23:4a:5e:b9:1d:ca:5c:1b:6a:26:23:
84:df:6a:bb:df:f9:63:43:38:e5:b7:bd:30:7e:49:fc:8a:6f:
14:cc:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org