Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RaL6IxDynGyx8rLBaPX3Uqt3x_4.roa
File: RaL6IxDynGyx8rLBaPX3Uqt3x_4.roa (raw, json)
Hash identifier: zJRgC3b2KCBJR/eFOV6rc1jv0MGClnsB6C2W4GUuwq0=
Subject key identifier: 45:A2:FA:23:10:F2:9C:6C:B1:F2:B2:C1:68:F5:F7:52:AB:77:C7:FE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A8965E281B96A456BFBB54A959E1CF310
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RaL6IxDynGyx8rLBaPX3Uqt3x_4.roa
Signing time: Tue 12 Sep 2023 12:37:50 +0000
ROA not before: Tue 12 Sep 2023 12:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199545
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:65:e2:81:b9:6a:45:6b:fb:b5:4a:95:9e:1c:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 12 12:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a2fa2310f29c6cb1f2b2c168f5f752ab77c7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:8d:5f:36:bf:e1:aa:1b:f5:22:1c:64:9f:
e6:ef:44:02:6b:bb:78:9a:46:92:a7:ad:85:ff:58:
1b:f4:c7:4b:52:67:b4:07:5b:4c:81:f5:bf:30:4b:
1a:22:72:b6:e5:7c:f8:46:7e:37:37:6b:9d:70:ce:
91:ae:a4:25:61:f3:51:ff:5d:09:5f:ca:16:c1:eb:
55:49:ba:0d:dc:6f:b4:fe:2b:a5:34:31:73:03:38:
c7:00:6f:af:32:cf:7f:1f:fd:58:88:61:01:04:a8:
9e:70:53:a4:d5:28:94:d6:12:f2:b3:a4:5e:74:6a:
39:43:69:c4:71:ed:25:5f:79:f9:1a:6e:4a:5b:23:
f9:2d:43:aa:e6:39:ac:23:0c:4b:56:66:7b:59:b4:
c6:4a:03:8e:45:13:cb:0e:33:a3:3e:86:28:0c:41:
d9:a4:ae:ca:a4:86:42:6c:cd:ef:ec:74:88:ff:07:
3c:64:e3:b4:e9:33:18:a7:c9:28:34:9a:0f:ec:5f:
16:b2:75:be:11:7e:59:2b:d3:2f:8d:c1:a3:bd:40:
3c:ed:bb:68:69:ec:bc:3b:ff:36:5c:02:9f:a4:11:
e5:53:53:6c:3f:da:d5:61:8c:99:f0:8a:3e:2d:ef:
db:0b:fc:0a:18:15:de:bb:30:f5:e9:b6:79:a5:8f:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:FA:23:10:F2:9C:6C:B1:F2:B2:C1:68:F5:F7:52:AB:77:C7:FE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/RaL6IxDynGyx8rLBaPX3Uqt3x_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:49:0e:3c:5e:53:46:20:31:ec:e9:7a:16:69:44:c8:b6:a8:
72:63:d1:38:ae:72:8e:11:d8:1c:5b:a5:fb:1b:49:67:fe:6f:
6a:10:c9:c5:49:35:8e:02:60:20:0b:0c:a2:0c:eb:ff:e0:b6:
94:af:4f:76:47:3b:21:0c:82:b2:01:0e:4e:47:6f:e2:ad:f2:
73:18:71:dd:58:e5:b2:57:a6:d6:7b:8d:1f:9c:d9:6e:34:1b:
d1:86:9f:3c:86:f0:6c:93:b3:a3:f6:9c:6e:e9:24:07:a6:53:
2a:fa:e8:63:96:7d:b3:4e:36:c5:33:9f:81:0e:3e:5c:b4:d0:
81:da:ca:81:de:e9:b5:7d:c6:1f:ba:3c:6f:b1:4c:b6:40:5b:
24:2a:6f:3f:76:f4:69:81:30:d4:f1:c2:55:16:d5:99:77:30:
a4:0b:f5:ab:10:38:1d:aa:21:60:b4:67:85:ed:35:35:54:54:
52:35:a0:fb:ce:38:da:79:28:c2:72:a3:c2:2e:02:31:0b:18:
64:62:11:22:ce:96:a2:0a:4b:7f:d6:b2:c9:65:72:b0:28:ac:
d7:c1:28:3e:44:6c:13:25:e4:87:31:74:4b:1b:25:18:07:23:
e1:a3:b8:c8:4a:8e:9f:5b:33:6a:5b:d9:b9:8d:d3:8a:16:45:
06:18:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 13:55:18 2023 by rpki-client on console-ams.rpki-client.org