Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_GUwNa6tNnZqDwGx8MXQW3nWs20.roa
File: _GUwNa6tNnZqDwGx8MXQW3nWs20.roa (raw, json)
Hash identifier: ortTo5veSFZOm9N7PO633moPts5ODaW+gjTaPHerhcs=
Subject key identifier: FC:65:30:35:AE:AD:36:76:6A:0F:01:B1:F0:C5:D0:5B:79:D6:B3:6D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B6243DBB650E3E91B026C5F633ECDBABF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_GUwNa6tNnZqDwGx8MXQW3nWs20.roa
Signing time: Tue 24 Oct 2023 15:18:16 +0000
ROA not before: Tue 24 Oct 2023 15:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 93.113.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 10:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:43:db:b6:50:e3:e9:1b:02:6c:5f:63:3e:cd:ba:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 24 15:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc653035aead36766a0f01b1f0c5d05b79d6b36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:32:fa:71:45:e8:6e:3d:ad:2b:c4:14:46:
df:af:d8:e4:bc:ad:23:cf:2f:b4:b0:a5:53:3c:bc:
e7:a2:55:2b:57:9b:82:34:a9:63:fe:84:ff:d8:e2:
7d:ed:25:82:df:68:85:64:c1:74:4b:b2:1e:6b:bf:
0d:e7:4b:33:79:c0:82:8c:10:46:f1:8b:53:6f:0a:
f0:06:71:f5:a4:ca:74:2c:61:59:34:e7:41:8d:2a:
f2:d5:b6:06:31:c3:ab:fb:25:7d:64:70:63:73:a1:
b5:fa:88:ac:48:29:43:17:fd:31:1e:6c:cc:02:b6:
c7:0b:c8:04:1a:26:c7:a7:fb:65:1d:f3:41:d5:f5:
6e:08:43:de:ce:a7:c7:15:8c:61:cf:6f:c5:8a:e4:
3a:6e:ee:82:d8:ba:c9:76:57:94:cf:54:68:a1:14:
3d:35:01:e4:03:78:13:1d:bf:cf:33:03:59:b0:ef:
6b:73:f0:ca:11:41:af:9c:aa:20:39:7d:f5:20:38:
9b:2a:fc:ae:c9:87:f0:a4:82:63:b0:ce:46:2c:14:
e5:3e:8a:28:3a:16:30:0d:51:a4:40:3a:05:c9:aa:
83:8c:93:76:7c:22:20:a5:bc:5f:19:e2:7c:aa:69:
b5:b7:ff:95:9e:62:c0:b9:a6:df:1d:b7:c7:4e:1d:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:65:30:35:AE:AD:36:76:6A:0F:01:B1:F0:C5:D0:5B:79:D6:B3:6D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_GUwNa6tNnZqDwGx8MXQW3nWs20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ba:f5:25:26:e1:21:52:12:20:f3:5b:6a:8c:e2:fa:65:3a:
b4:ce:ae:6e:00:c9:b5:3e:d0:fb:71:82:b1:74:25:45:66:07:
46:18:25:90:b0:31:da:1d:8b:b9:0d:28:71:d7:cc:eb:b4:71:
a9:82:8c:1b:58:da:35:1f:3c:b7:b8:62:dd:fb:1e:43:d0:34:
34:29:8d:87:59:79:3a:42:e8:df:cd:05:9e:8a:65:92:82:9d:
67:66:11:99:ed:d4:98:d4:c4:3d:82:60:a1:fd:48:ed:c8:30:
f1:2f:f0:09:96:a4:05:ab:bf:c0:c3:c7:d3:3b:8b:7d:fa:13:
25:36:f1:12:9d:c8:fa:ed:e9:25:9a:41:b6:1b:82:04:c9:76:
ae:c1:42:be:c2:0c:7a:5d:97:6b:f1:9a:f5:5a:0e:d7:39:6d:
9a:7b:98:c8:fa:fb:d5:66:66:ad:23:01:91:4f:10:98:b2:4a:
fd:a8:3c:b5:30:b4:36:28:fa:73:85:2a:10:d0:54:05:b0:0d:
3b:9b:b9:42:27:eb:bf:f5:af:f1:2e:b3:77:f2:58:46:4d:7e:
e2:cb:42:6c:8e:b4:24:ea:74:94:26:74:21:4e:63:ac:45:0e:
1a:e6:10:71:d3:10:eb:95:17:87:84:c1:5b:b6:b7:61:2d:bf:
3e:8b:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org